From d0d4da2ee28424206a188906d81e279ec4f03c25 Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Mon, 22 Jun 2026 15:29:56 +0100 Subject: [PATCH 1/5] feat: add a2ml.net and k9-svc.net front-door sites Rebuild both estate sites for casket-ssg -> Cloudflare Pages: - a2ml/site/: A2ML (Attested Markup Language) landing, spec and getting-started pages; public/ ships .well-known/security.txt, CNAME (a2ml.net), robots.txt, favicon.svg. - k9-svc/site/: K9-SVC (self-validating Nickel components) equivalent set; public/ ships .well-known/security.txt, CNAME (k9-svc.net), robots, favicon. security.txt files close the Cloudflare 'missing security.txt' insight on both domains. Site prose is licensed CC-BY-SA-4.0 (estate Rule 1: prose docs); committed with --no-verify (owner-approved) because the license-enforcer hook hard-codes MPL-2.0 for all .md and would mislabel prose. Co-Authored-By: Claude Opus 4.8 (1M context) --- a2ml/site/index.md | 77 +++++++++++++++++++++ a2ml/site/public/.well-known/security.txt | 12 ++++ a2ml/site/public/CNAME | 1 + a2ml/site/public/favicon.svg | 10 +++ a2ml/site/public/robots.txt | 4 ++ a2ml/site/spec.md | 32 +++++++++ a2ml/site/start.md | 40 +++++++++++ k9-svc/site/index.md | 70 +++++++++++++++++++ k9-svc/site/public/.well-known/security.txt | 12 ++++ k9-svc/site/public/CNAME | 1 + k9-svc/site/public/favicon.svg | 10 +++ k9-svc/site/public/robots.txt | 4 ++ k9-svc/site/spec.md | 32 +++++++++ k9-svc/site/start.md | 50 +++++++++++++ 14 files changed, 355 insertions(+) create mode 100644 a2ml/site/index.md create mode 100644 a2ml/site/public/.well-known/security.txt create mode 100644 a2ml/site/public/CNAME create mode 100644 a2ml/site/public/favicon.svg create mode 100644 a2ml/site/public/robots.txt create mode 100644 a2ml/site/spec.md create mode 100644 a2ml/site/start.md create mode 100644 k9-svc/site/index.md create mode 100644 k9-svc/site/public/.well-known/security.txt create mode 100644 k9-svc/site/public/CNAME create mode 100644 k9-svc/site/public/favicon.svg create mode 100644 k9-svc/site/public/robots.txt create mode 100644 k9-svc/site/spec.md create mode 100644 k9-svc/site/start.md diff --git a/a2ml/site/index.md b/a2ml/site/index.md new file mode 100644 index 00000000..d8598bad --- /dev/null +++ b/a2ml/site/index.md @@ -0,0 +1,77 @@ + +--- +title: A2ML +site: A2ML +date: 2026-06-22 +--- + +# A2ML — Attested Markup Language + +

A lightweight, Djot-like markup that compiles into a typed, attested core. Authoring stays simple; structural guarantees switch on when you want them.

+ +
+Spec v1.1.0 +Typed core +Progressive strictness +Byte-for-byte payloads +MPL-2.0 / CC-BY-SA-4.0 +
+ +
+Get started +Read the spec +GitHub +
+ +## What it does + +
+
+

Readable surface

+

Write a clean, Djot-like format. No ceremony when you don't need it.

+
+
+

Typed, attested core

+

Required sections, resolved references and unique IDs — verified, not hoped for.

+
+
+

Faithful payloads

+

Opaque content is preserved byte-for-byte for reliable embedding.

+
+
+

Portable rendering

+

One source, many targets — HTML, Markdown and PDF pipelines.

+
+
+ +## Progressive strictness + +A2ML lets you dial guarantees up as a document matures: + +| Mode | Guarantee | +|------|-----------| +| **lax** | Parse and render; no structural enforcement. | +| **checked** | Required sections exist, references resolve, IDs are unique. | +| **attested** | Checked, plus a verifiable attestation over the typed core. | + +## A taste + +```a2ml +# A2ML Overview + +@abstract: +A2ML is a typed, attested markup format. It verifies structure and references. +@end + +## Claims +- Required sections must exist. +- References must resolve. + +@refs: +[1] Attested Markup Language Spec (draft) +@end +``` + +## Part of the standards estate + +A2ML is a satellite of the [Hyperpolymath standards hub](https://github.com/hyperpolymath/standards). The normative specification, conformance vectors and profiles live there; this site is the front door. diff --git a/a2ml/site/public/.well-known/security.txt b/a2ml/site/public/.well-known/security.txt new file mode 100644 index 00000000..893b5c17 --- /dev/null +++ b/a2ml/site/public/.well-known/security.txt @@ -0,0 +1,12 @@ +# Security contact for a2ml.net — RFC 9116 +# https://a2ml.net/.well-known/security.txt + +Contact: mailto:j.d.a.jewell@open.ac.uk +Expires: 2027-06-21T00:00:00Z +Preferred-Languages: en +Canonical: https://a2ml.net/.well-known/security.txt +Policy: https://github.com/hyperpolymath/a2ml-ecosystem/security/policy +Acknowledgments: https://github.com/hyperpolymath/a2ml-ecosystem/security/advisories + +# Encryption: add a URL to a published PGP key to make this fully complete, +# and PGP-sign this file (clearsign) once the key is in place. diff --git a/a2ml/site/public/CNAME b/a2ml/site/public/CNAME new file mode 100644 index 00000000..5dca20ca --- /dev/null +++ b/a2ml/site/public/CNAME @@ -0,0 +1 @@ +a2ml.net diff --git a/a2ml/site/public/favicon.svg b/a2ml/site/public/favicon.svg new file mode 100644 index 00000000..0ed8a7a7 --- /dev/null +++ b/a2ml/site/public/favicon.svg @@ -0,0 +1,10 @@ + + + + + + + + + A2 + diff --git a/a2ml/site/public/robots.txt b/a2ml/site/public/robots.txt new file mode 100644 index 00000000..7718b822 --- /dev/null +++ b/a2ml/site/public/robots.txt @@ -0,0 +1,4 @@ +User-agent: * +Allow: / + +Sitemap: https://a2ml.net/sitemap.xml diff --git a/a2ml/site/spec.md b/a2ml/site/spec.md new file mode 100644 index 00000000..7118c863 --- /dev/null +++ b/a2ml/site/spec.md @@ -0,0 +1,32 @@ + +--- +title: A2ML specification +site: A2ML +date: 2026-06-22 +--- + +# Specification + +The current normative specification is **A2ML v1.1.0** — Surface Grammar + Typed Core + Profiles. + +## Documents + +- **Spec (normative, v1.1.0)** — surface grammar, typed core, profiles +- **Specification lineage** — versions and era +- **Module 0 quickstart + FAQ** +- **Syntax modules** (opt-in) +- **Grammar appendix** +- **Conformance + test vectors** +- **IANA media type draft** — `application/a2ml` +- **Comparison matrix** +- **Citation guide** + +All specification documents are maintained in the [standards](https://github.com/hyperpolymath/standards) repository under `a2ml/`. This page links the front door; the repository is the source of truth. + +## Profiles + +Profiles layer domain-specific validation on top of the base vocabulary. A2ML v1.1 introduced profiles, an expanded base vocabulary, citation support and content hashing. + +## Conformance + +Conformance is defined by published test vectors (positive and negative fixtures). Implementations validate against these to claim a given strictness level. diff --git a/a2ml/site/start.md b/a2ml/site/start.md new file mode 100644 index 00000000..3922efb7 --- /dev/null +++ b/a2ml/site/start.md @@ -0,0 +1,40 @@ + +--- +title: Get started with A2ML +site: A2ML +date: 2026-06-22 +--- + +# Get started + +A2ML is authored as plain text and validated in progressive modes. Start lax, tighten to checked, attest when ready. + +## 1. Write a document + +```a2ml +# Release Notes + +@abstract: +What changed in this release, in one paragraph. +@end + +## Changes +- Added profiles for domain validation. +- Resolved all cross-references. + +@refs: +[1] A2ML Spec v1.1.0 +@end +``` + +## 2. Validate + +Run the validator over your document. In **checked** mode it confirms that required sections exist, references resolve, and IDs are unique. In **attested** mode it additionally produces a verifiable attestation over the typed core. + +## 3. Render + +The typed core is renderer-portable: emit HTML, Markdown or feed a PDF pipeline from a single source, with opaque payloads preserved byte-for-byte. + +## Tooling + +Implementations, editor support and CI actions are coordinated in the [a2ml-ecosystem](https://github.com/hyperpolymath/a2ml-ecosystem) hub. The normative spec and conformance vectors live in [standards](https://github.com/hyperpolymath/standards). diff --git a/k9-svc/site/index.md b/k9-svc/site/index.md new file mode 100644 index 00000000..ed740d2e --- /dev/null +++ b/k9-svc/site/index.md @@ -0,0 +1,70 @@ + +--- +title: K9-SVC +site: K9-SVC +date: 2026-06-22 +--- + +# K9-SVC — Self-Validating Components + +

A Nickel-based format for configuration and contractiles that carries its own guarantees. Components validate themselves, with a trust model that scales from inert data to cryptographically signed execution.

+ +
+v1.0.0-alpha +Nickel contractiles +.k9 / .k9.ncl +application/vnd.k9+nickel +MPL-2.0 / CC-BY-SA-4.0 +
+ +
+Get started +Read the spec +GitHub +
+ +## The three-level trust model + +K9-SVC is safe by construction: a component declares how much trust it requires, and the environment grants no more. + +| Level | Name | What's permitted | +|-------|------|------------------| +| **1** | Data | Pure data, no execution — safe in all environments. | +| **2** | Validation | Nickel contract evaluation permitted. | +| **3** | Execution | Full execution — requires a cryptographic signature. | + +## What it does + +
+
+

Self-validating

+

A component states its own contract. Validation is intrinsic, not bolted on.

+
+
+

Contractiles in Nickel

+

Contracts are written in Nickel — composable, evaluable, and precise.

+
+
+

Signed execution

+

Anything beyond validation requires a cryptographic signature. No silent escalation.

+
+
+

First-class media type

+

application/vnd.k9+nickel — registered, addressable, toolable.

+
+
+ +## A taste + +```nickel +# greeting.k9.ncl — a level-2 self-validating component +{ + trust_level = 2, + contract = fun value => value | { name | String, repeat | Number }, + data = { name = "world", repeat = 3 }, +} +``` + +## Part of the standards estate + +K9-SVC is coordinated through the [k9-ecosystem](https://github.com/hyperpolymath/k9-ecosystem) hub — implementations (`k9-rs`, `k9_ex`, `k9_gleam`, `k9-deno`, `k9-haskell`), tooling and CI. The normative specification lives in [standards](https://github.com/hyperpolymath/standards). diff --git a/k9-svc/site/public/.well-known/security.txt b/k9-svc/site/public/.well-known/security.txt new file mode 100644 index 00000000..407eec09 --- /dev/null +++ b/k9-svc/site/public/.well-known/security.txt @@ -0,0 +1,12 @@ +# Security contact for k9-svc.net — RFC 9116 +# https://k9-svc.net/.well-known/security.txt + +Contact: mailto:j.d.a.jewell@open.ac.uk +Expires: 2027-06-21T00:00:00Z +Preferred-Languages: en +Canonical: https://k9-svc.net/.well-known/security.txt +Policy: https://github.com/hyperpolymath/k9-ecosystem/security/policy +Acknowledgments: https://github.com/hyperpolymath/k9-ecosystem/security/advisories + +# Encryption: add a URL to a published PGP key to make this fully complete, +# and PGP-sign this file (clearsign) once the key is in place. diff --git a/k9-svc/site/public/CNAME b/k9-svc/site/public/CNAME new file mode 100644 index 00000000..558028c9 --- /dev/null +++ b/k9-svc/site/public/CNAME @@ -0,0 +1 @@ +k9-svc.net diff --git a/k9-svc/site/public/favicon.svg b/k9-svc/site/public/favicon.svg new file mode 100644 index 00000000..03c67c84 --- /dev/null +++ b/k9-svc/site/public/favicon.svg @@ -0,0 +1,10 @@ + + + + + + + + + K9 + diff --git a/k9-svc/site/public/robots.txt b/k9-svc/site/public/robots.txt new file mode 100644 index 00000000..fd6db010 --- /dev/null +++ b/k9-svc/site/public/robots.txt @@ -0,0 +1,4 @@ +User-agent: * +Allow: / + +Sitemap: https://k9-svc.net/sitemap.xml diff --git a/k9-svc/site/spec.md b/k9-svc/site/spec.md new file mode 100644 index 00000000..f78f39d8 --- /dev/null +++ b/k9-svc/site/spec.md @@ -0,0 +1,32 @@ + +--- +title: K9-SVC specification +site: K9-SVC +date: 2026-06-22 +--- + +# Specification + +K9-SVC is at **v1.0.0-alpha**. The normative contractile specification is maintained in the [standards](https://github.com/hyperpolymath/standards) repository. + +## Identity + +| Property | Value | +|----------|-------| +| Extensions | `.k9`, `.k9.ncl` | +| Media type | `application/vnd.k9+nickel` | +| Encoding | UTF-8 | +| Built on | Nickel, Just | +| Licence | MPL-2.0 (code), CC-BY-SA-4.0 (docs) | + +## Trust levels + +The core of the specification is the three-level trust model. A component must declare its level; the host environment grants capability up to — and no further than — that level. + +1. **Data** — pure data, no execution, safe in all environments. +2. **Validation** — Nickel contract evaluation permitted. +3. **Execution** — full execution, requires a cryptographic signature. + +## Conformance + +Conformance fixtures (positive and negative) are coordinated in the [k9-ecosystem](https://github.com/hyperpolymath/k9-ecosystem) hub. Implementations validate against these vectors to claim support at a given trust level. diff --git a/k9-svc/site/start.md b/k9-svc/site/start.md new file mode 100644 index 00000000..d7f115a7 --- /dev/null +++ b/k9-svc/site/start.md @@ -0,0 +1,50 @@ + +--- +title: Get started with K9-SVC +site: K9-SVC +date: 2026-06-22 +--- + +# Get started + +A K9-SVC component is a Nickel value that declares its own trust level and contract. The toolchain reads the level and grants no more capability than the component asks for. + +## 1. Write a component + +```nickel +# config.k9.ncl +{ + trust_level = 1, # pure data — safe anywhere + data = { + service = "edge", + replicas = 3, + }, +} +``` + +## 2. Add a contract (level 2) + +```nickel +{ + trust_level = 2, # Nickel contract evaluation permitted + contract = fun v => v | { + service | String, + replicas | Number, + }, + data = { service = "edge", replicas = 3 }, +} +``` + +## 3. Sign for execution (level 3) + +Level 3 permits full execution and **requires a cryptographic signature**. Unsigned level-3 components are refused — escalation is never implicit. + +## Files & types + +- Extensions: `.k9`, `.k9.ncl` +- Media type: `application/vnd.k9+nickel` +- Encoding: UTF-8 + +## Tooling + +Implementations and CI live in the [k9-ecosystem](https://github.com/hyperpolymath/k9-ecosystem) hub; the normative spec is in [standards](https://github.com/hyperpolymath/standards). From bc76ca17031f4a7ef35fc63a391e4973a64cf5da Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Mon, 22 Jun 2026 22:07:16 +0100 Subject: [PATCH 2/5] feat: build a2ml.net + k9-svc.net as ddraig sites; PGP-sign security.txt Render both front-door sites with ddraig-ssg (Idris 2), preserving how they were originally made. Adds per-site ddraig template + AAA theme: - site/templates/default.html: skip link, labelled landmarks, nav (Home/Spec/Get started), security.txt footer link. - site/assets/style.css: WCAG 2.2 AAA theme (contrast-verified >=7:1 light+dark, :focus-visible, reduced-motion, reflow, >=44px targets) plus component styles (lede/badges/cards/buttons) the pages use. The existing Markdown content renders through ddraig's full parser (raw-HTML cards/badges, pipe tables with , fenced code). Built output is vnu-clean (W3C Nu) across all pages; public/ ships to the site root. security.txt: PGP-clearsigned both files (RFC 9116 digital signature) with the existing OpenPGP key and added an Encryption (openpgp4fpr) field, closing the 'unsigned security.txt' finding. (The live 404 is resolved by deployment.) Build: ddraig build /site _site Co-Authored-By: Claude Opus 4.8 (1M context) --- a2ml/site/assets/style.css | 121 ++++++++++++++++++++ a2ml/site/public/.well-known/security.txt | 21 +++- a2ml/site/templates/default.html | 40 +++++++ k9-svc/site/assets/style.css | 121 ++++++++++++++++++++ k9-svc/site/public/.well-known/security.txt | 21 +++- k9-svc/site/templates/default.html | 40 +++++++ 6 files changed, 360 insertions(+), 4 deletions(-) create mode 100644 a2ml/site/assets/style.css create mode 100644 a2ml/site/templates/default.html create mode 100644 k9-svc/site/assets/style.css create mode 100644 k9-svc/site/templates/default.html diff --git a/a2ml/site/assets/style.css b/a2ml/site/assets/style.css new file mode 100644 index 00000000..3b4be31d --- /dev/null +++ b/a2ml/site/assets/style.css @@ -0,0 +1,121 @@ +/* SPDX-License-Identifier: MPL-2.0 */ +/* Copyright (c) 2025-2026 Jonathan D.A. Jewell */ +/* + * a2ml.net / k9-svc.net site theme — built on the ddraig-ssg AAA base. + * WCAG 2.2 AAA: all text/UI colours contrast-verified >= 7:1 (light + dark), + * focus ring >= 3:1, reduced-motion, reflow, >= 44px targets. + */ + +:root { + --bg: #ffffff; + --bg-soft: #f4f5f9; + --bg-code: #eceef5; + --fg: #1a1b26; /* 17.09:1 on --bg */ + --fg-muted: #3a3d4d; /* 10.74:1 on --bg */ + --link: #3730a3; /* 9.93:1 on --bg */ + --link-hover: #1f1b6b; + --border: #5a5e73; + --focus: #3730a3; + --btn-fg: #ffffff; /* on --link (#3730a3) = 9.93:1 */ + --radius: 8px; + --maxw: 70rem; + --measure: 40rem; +} +@media (prefers-color-scheme: dark) { + :root { + --bg: #0e0f1a; + --bg-soft: #181a2a; + --bg-code: #1c1f33; + --fg: #e6e8f2; /* 15.60:1 */ + --fg-muted: #c2c6d8; /* lightened for >=7:1 on --bg-soft */ + --link: #b9c2ff; /* 11.09:1 */ + --link-hover: #dde2ff; + --border: #8c91ad; + --focus: #b9c2ff; + --btn-fg: #0e0f1a; /* dark text on light --link in dark mode */ + } +} + +*, *::before, *::after { box-sizing: border-box; } +html { font-size: 100%; -webkit-text-size-adjust: 100%; } +body { + margin: 0; + font-family: system-ui, -apple-system, "Segoe UI", Roboto, sans-serif; + font-size: 1.0625rem; line-height: 1.6; + color: var(--fg); background: var(--bg); + overflow-wrap: break-word; +} +.container { width: 100%; max-width: var(--maxw); margin-inline: auto; padding-inline: 1.25rem; } + +/* Skip link (2.4.1) */ +.skip-link { position: absolute; left: -9999px; top: 0; background: var(--link); color: #fff; padding: .75rem 1.25rem; border-radius: 0 0 var(--radius) 0; font-weight: 600; z-index: 100; min-height: 44px; line-height: 1.4; } +.skip-link:focus { left: 0; } + +/* Focus (2.4.7/2.4.11/2.4.13) */ +:focus-visible { outline: 3px solid var(--focus); outline-offset: 2px; border-radius: 2px; } +a:focus, button:focus, [tabindex]:focus { outline: 3px solid var(--focus); outline-offset: 2px; } + +/* Header / nav */ +.site-header { border-bottom: 1px solid var(--border); } +.nav { display: flex; flex-wrap: wrap; align-items: center; gap: 1rem; padding-block: .75rem; } +.brand { font-weight: 700; font-size: 1.2rem; color: var(--fg); text-decoration: none; } +.nav-links { list-style: none; display: flex; flex-wrap: wrap; gap: .5rem 1.25rem; margin: 0; padding: 0; } +.nav-links a, .brand { display: inline-flex; align-items: center; min-height: 44px; } + +/* Links: underlined (1.4.1) */ +a { color: var(--link); text-decoration: underline; text-underline-offset: 2px; } +a:hover { color: var(--link-hover); } +.brand, .nav-links a, .btn { text-decoration: none; } +.nav-links a:hover, .nav-links a:focus { text-decoration: underline; } + +main { display: block; } +.prose { padding-block: 2rem; } +.prose h1 { font-size: 2.25rem; line-height: 1.2; margin: 0 0 1rem; } +.prose h2 { font-size: 1.6rem; line-height: 1.3; margin: 2.25rem 0 .75rem; } +.prose h3 { font-size: 1.25rem; margin: 1.5rem 0 .5rem; } +.prose :is(h1,h2,h3,h4), .prose p, .prose li { max-width: var(--measure); } + +/* Lede */ +.lede { font-size: 1.3rem; line-height: 1.5; color: var(--fg); max-width: var(--measure); margin: 0 0 1.5rem; } + +/* Badges */ +.badges { display: flex; flex-wrap: wrap; gap: .5rem; margin: 1rem 0; padding: 0; list-style: none; } +.badge { display: inline-flex; align-items: center; min-height: 1.9rem; padding: .25rem .7rem; border: 1px solid var(--border); border-radius: 999px; font-size: .85rem; color: var(--fg); background: var(--bg-soft); } + +/* Buttons (>=44px target, 2.5.5) */ +.btn-row { display: flex; flex-wrap: wrap; gap: .75rem; margin: 1.5rem 0; } +.btn { display: inline-flex; align-items: center; min-height: 44px; padding: .6rem 1.15rem; border-radius: var(--radius); font-weight: 600; border: 2px solid var(--link); } +.btn-primary { background: var(--link); color: var(--btn-fg); } +.btn-primary:hover { background: var(--link-hover); border-color: var(--link-hover); color: var(--btn-fg); } +.btn-ghost { background: transparent; color: var(--link); } +.btn-ghost:hover { background: var(--bg-soft); } + +/* Cards */ +.cards { display: grid; grid-template-columns: repeat(auto-fit, minmax(15rem, 1fr)); gap: 1rem; margin: 1.5rem 0; } +.card { border: 1px solid var(--border); border-radius: var(--radius); padding: 1.25rem; background: var(--bg-soft); } +.card h3 { margin: 0 0 .5rem; font-size: 1.1rem; } +.card p { margin: 0; color: var(--fg); } + +/* Code */ +code { background: var(--bg-code); padding: .15em .35em; border-radius: 4px; font-size: .9em; } +pre { background: var(--bg-code); padding: 1rem; border-radius: var(--radius); overflow-x: auto; } +pre code { background: none; padding: 0; } + +/* Tables */ +.prose table { border-collapse: collapse; width: 100%; max-width: 100%; margin: 1rem 0; } +.prose caption { text-align: left; font-weight: 600; color: var(--fg-muted); padding: .5rem 0; } +.prose th, .prose td { border: 1px solid var(--border); padding: .5rem .75rem; text-align: left; } +.prose th { background: var(--bg-soft); } + +blockquote { margin: 1rem 0; padding: .5rem 1rem; border-left: 4px solid var(--link); color: var(--fg); background: var(--bg-soft); } +img { max-width: 100%; height: auto; } +hr { border: none; border-top: 1px solid var(--border); margin: 2rem 0; } +.muted { color: var(--fg-muted); } + +.site-footer { border-top: 1px solid var(--border); margin-top: 3rem; padding-block: 1.5rem; color: var(--fg-muted); font-size: .95rem; } +.site-footer a { color: var(--link); } + +@media (prefers-reduced-motion: reduce) { + *, *::before, *::after { animation-duration: .001ms !important; animation-iteration-count: 1 !important; transition-duration: .001ms !important; scroll-behavior: auto !important; } +} +@media (max-width: 30rem) { .nav { gap: .5rem; } body { font-size: 1rem; } } diff --git a/a2ml/site/public/.well-known/security.txt b/a2ml/site/public/.well-known/security.txt index 893b5c17..3b56600d 100644 --- a/a2ml/site/public/.well-known/security.txt +++ b/a2ml/site/public/.well-known/security.txt @@ -1,12 +1,29 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + # Security contact for a2ml.net — RFC 9116 # https://a2ml.net/.well-known/security.txt Contact: mailto:j.d.a.jewell@open.ac.uk +Encryption: openpgp4fpr:4A03639C1EB1F86C7F0C97A91835A14A2867091E Expires: 2027-06-21T00:00:00Z Preferred-Languages: en Canonical: https://a2ml.net/.well-known/security.txt Policy: https://github.com/hyperpolymath/a2ml-ecosystem/security/policy Acknowledgments: https://github.com/hyperpolymath/a2ml-ecosystem/security/advisories +-----BEGIN PGP SIGNATURE----- -# Encryption: add a URL to a published PGP key to make this fully complete, -# and PGP-sign this file (clearsign) once the key is in place. +iQIzBAEBCgAdFiEEljlFF1RJblHWtTfK0RkBfr9pWrEFAmo5ozcACgkQ0RkBfr9p +WrH2ORAAvgcBt6nmPx96PfNW6iwOKulGyx5suCH7+vfNZY5Y91U2ONOgiskpA3Oc +HLQ2j79cWv96C50SvWahHGu6xUCovMKPAJYpCeSV973mpsLGuxzOXghfTZw9re5F +E1W3BuuSYCGsb04maxSw8uWZ9H/ik3JJnrvOiXEcxUihJlfJSsxy6ZXZ8WwC+ajO +k90f2yaS/TN9JPgyXwH8WwaNeVh1ZnnWUSdfLVmCvu5aXp+J21EqlJBumO/HCTRe +hh8ojRwr8BGib4jbaAfPRfOZ3VIs1JUx1cJuRGsn3BkqLWuIyIeP9Xw3AVEt4pbv +9G/XYAz0MULTxqA7pJUtMwF91KOlZ24DtB0yxKjcXev8L/1vW7EU0pBsO140Kqhq +ULpPos0LpO/bGgeOBSQr164XTNFcWrEBmLjN1Qyi7ZqdMqTU2cNyM+3KFyPiPfnM +7cW7H7R8xhr/RTzN8zz0eJnOFmX3rVSy854CUW/kmTBU/5GhFFBP7YqB2QBACqqW +g+DpKobebYdL+B1jokzu4umhLd37hssojOcm0RuS13Fz3JSkvYpDKKHEjTTUO/lY +k8EuilmGKWFXNwwDhwLzrx307N+9gqoDwTKBkuOx8lj5IwjJXZvO1R6pWrIR8quF +7It/9vKqNo0O2xoebNsDM5DAn2zCtViftOieM2Tjk+gtLuxQ5yo= +=vBOZ +-----END PGP SIGNATURE----- diff --git a/a2ml/site/templates/default.html b/a2ml/site/templates/default.html new file mode 100644 index 00000000..a6eda478 --- /dev/null +++ b/a2ml/site/templates/default.html @@ -0,0 +1,40 @@ + + + + + + + {{title}} + + + + + + + +
+ +
+
+
+ {{content}} +
+
+ + + diff --git a/k9-svc/site/assets/style.css b/k9-svc/site/assets/style.css new file mode 100644 index 00000000..3b4be31d --- /dev/null +++ b/k9-svc/site/assets/style.css @@ -0,0 +1,121 @@ +/* SPDX-License-Identifier: MPL-2.0 */ +/* Copyright (c) 2025-2026 Jonathan D.A. Jewell */ +/* + * a2ml.net / k9-svc.net site theme — built on the ddraig-ssg AAA base. + * WCAG 2.2 AAA: all text/UI colours contrast-verified >= 7:1 (light + dark), + * focus ring >= 3:1, reduced-motion, reflow, >= 44px targets. + */ + +:root { + --bg: #ffffff; + --bg-soft: #f4f5f9; + --bg-code: #eceef5; + --fg: #1a1b26; /* 17.09:1 on --bg */ + --fg-muted: #3a3d4d; /* 10.74:1 on --bg */ + --link: #3730a3; /* 9.93:1 on --bg */ + --link-hover: #1f1b6b; + --border: #5a5e73; + --focus: #3730a3; + --btn-fg: #ffffff; /* on --link (#3730a3) = 9.93:1 */ + --radius: 8px; + --maxw: 70rem; + --measure: 40rem; +} +@media (prefers-color-scheme: dark) { + :root { + --bg: #0e0f1a; + --bg-soft: #181a2a; + --bg-code: #1c1f33; + --fg: #e6e8f2; /* 15.60:1 */ + --fg-muted: #c2c6d8; /* lightened for >=7:1 on --bg-soft */ + --link: #b9c2ff; /* 11.09:1 */ + --link-hover: #dde2ff; + --border: #8c91ad; + --focus: #b9c2ff; + --btn-fg: #0e0f1a; /* dark text on light --link in dark mode */ + } +} + +*, *::before, *::after { box-sizing: border-box; } +html { font-size: 100%; -webkit-text-size-adjust: 100%; } +body { + margin: 0; + font-family: system-ui, -apple-system, "Segoe UI", Roboto, sans-serif; + font-size: 1.0625rem; line-height: 1.6; + color: var(--fg); background: var(--bg); + overflow-wrap: break-word; +} +.container { width: 100%; max-width: var(--maxw); margin-inline: auto; padding-inline: 1.25rem; } + +/* Skip link (2.4.1) */ +.skip-link { position: absolute; left: -9999px; top: 0; background: var(--link); color: #fff; padding: .75rem 1.25rem; border-radius: 0 0 var(--radius) 0; font-weight: 600; z-index: 100; min-height: 44px; line-height: 1.4; } +.skip-link:focus { left: 0; } + +/* Focus (2.4.7/2.4.11/2.4.13) */ +:focus-visible { outline: 3px solid var(--focus); outline-offset: 2px; border-radius: 2px; } +a:focus, button:focus, [tabindex]:focus { outline: 3px solid var(--focus); outline-offset: 2px; } + +/* Header / nav */ +.site-header { border-bottom: 1px solid var(--border); } +.nav { display: flex; flex-wrap: wrap; align-items: center; gap: 1rem; padding-block: .75rem; } +.brand { font-weight: 700; font-size: 1.2rem; color: var(--fg); text-decoration: none; } +.nav-links { list-style: none; display: flex; flex-wrap: wrap; gap: .5rem 1.25rem; margin: 0; padding: 0; } +.nav-links a, .brand { display: inline-flex; align-items: center; min-height: 44px; } + +/* Links: underlined (1.4.1) */ +a { color: var(--link); text-decoration: underline; text-underline-offset: 2px; } +a:hover { color: var(--link-hover); } +.brand, .nav-links a, .btn { text-decoration: none; } +.nav-links a:hover, .nav-links a:focus { text-decoration: underline; } + +main { display: block; } +.prose { padding-block: 2rem; } +.prose h1 { font-size: 2.25rem; line-height: 1.2; margin: 0 0 1rem; } +.prose h2 { font-size: 1.6rem; line-height: 1.3; margin: 2.25rem 0 .75rem; } +.prose h3 { font-size: 1.25rem; margin: 1.5rem 0 .5rem; } +.prose :is(h1,h2,h3,h4), .prose p, .prose li { max-width: var(--measure); } + +/* Lede */ +.lede { font-size: 1.3rem; line-height: 1.5; color: var(--fg); max-width: var(--measure); margin: 0 0 1.5rem; } + +/* Badges */ +.badges { display: flex; flex-wrap: wrap; gap: .5rem; margin: 1rem 0; padding: 0; list-style: none; } +.badge { display: inline-flex; align-items: center; min-height: 1.9rem; padding: .25rem .7rem; border: 1px solid var(--border); border-radius: 999px; font-size: .85rem; color: var(--fg); background: var(--bg-soft); } + +/* Buttons (>=44px target, 2.5.5) */ +.btn-row { display: flex; flex-wrap: wrap; gap: .75rem; margin: 1.5rem 0; } +.btn { display: inline-flex; align-items: center; min-height: 44px; padding: .6rem 1.15rem; border-radius: var(--radius); font-weight: 600; border: 2px solid var(--link); } +.btn-primary { background: var(--link); color: var(--btn-fg); } +.btn-primary:hover { background: var(--link-hover); border-color: var(--link-hover); color: var(--btn-fg); } +.btn-ghost { background: transparent; color: var(--link); } +.btn-ghost:hover { background: var(--bg-soft); } + +/* Cards */ +.cards { display: grid; grid-template-columns: repeat(auto-fit, minmax(15rem, 1fr)); gap: 1rem; margin: 1.5rem 0; } +.card { border: 1px solid var(--border); border-radius: var(--radius); padding: 1.25rem; background: var(--bg-soft); } +.card h3 { margin: 0 0 .5rem; font-size: 1.1rem; } +.card p { margin: 0; color: var(--fg); } + +/* Code */ +code { background: var(--bg-code); padding: .15em .35em; border-radius: 4px; font-size: .9em; } +pre { background: var(--bg-code); padding: 1rem; border-radius: var(--radius); overflow-x: auto; } +pre code { background: none; padding: 0; } + +/* Tables */ +.prose table { border-collapse: collapse; width: 100%; max-width: 100%; margin: 1rem 0; } +.prose caption { text-align: left; font-weight: 600; color: var(--fg-muted); padding: .5rem 0; } +.prose th, .prose td { border: 1px solid var(--border); padding: .5rem .75rem; text-align: left; } +.prose th { background: var(--bg-soft); } + +blockquote { margin: 1rem 0; padding: .5rem 1rem; border-left: 4px solid var(--link); color: var(--fg); background: var(--bg-soft); } +img { max-width: 100%; height: auto; } +hr { border: none; border-top: 1px solid var(--border); margin: 2rem 0; } +.muted { color: var(--fg-muted); } + +.site-footer { border-top: 1px solid var(--border); margin-top: 3rem; padding-block: 1.5rem; color: var(--fg-muted); font-size: .95rem; } +.site-footer a { color: var(--link); } + +@media (prefers-reduced-motion: reduce) { + *, *::before, *::after { animation-duration: .001ms !important; animation-iteration-count: 1 !important; transition-duration: .001ms !important; scroll-behavior: auto !important; } +} +@media (max-width: 30rem) { .nav { gap: .5rem; } body { font-size: 1rem; } } diff --git a/k9-svc/site/public/.well-known/security.txt b/k9-svc/site/public/.well-known/security.txt index 407eec09..08dec07d 100644 --- a/k9-svc/site/public/.well-known/security.txt +++ b/k9-svc/site/public/.well-known/security.txt @@ -1,12 +1,29 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + # Security contact for k9-svc.net — RFC 9116 # https://k9-svc.net/.well-known/security.txt Contact: mailto:j.d.a.jewell@open.ac.uk +Encryption: openpgp4fpr:4A03639C1EB1F86C7F0C97A91835A14A2867091E Expires: 2027-06-21T00:00:00Z Preferred-Languages: en Canonical: https://k9-svc.net/.well-known/security.txt Policy: https://github.com/hyperpolymath/k9-ecosystem/security/policy Acknowledgments: https://github.com/hyperpolymath/k9-ecosystem/security/advisories +-----BEGIN PGP SIGNATURE----- -# Encryption: add a URL to a published PGP key to make this fully complete, -# and PGP-sign this file (clearsign) once the key is in place. +iQIzBAEBCgAdFiEEljlFF1RJblHWtTfK0RkBfr9pWrEFAmo5o0cACgkQ0RkBfr9p +WrFnhw//auzOJy7fkw/d/UO4sCX4LKdWpmSlgrM3x3Hif94Vub9jsMcNuN0NtgAd +6RQGf8Cj4eUCNPln1yDK8jnuwCnafd0RSQ7eS7LsGVZqG51okFrd2U7C/dyOgIHA +yGwLU2rvKXdsxp5VqUyuN60e0BNsB0erJxLZjytmU+OUbnjjWuHVrOmBRWz94DMo +vvA7pFNXM0GI0wkQuAKRFcum3IT0VH2DAzTmD11oW0YQr4vJOgwseiWFS1KfMWPY +bSyHbRYgBU6NRPL4UpBg0vwmWlgo7UolOR2JpCVJN1H6oFX4GZIBEw7hrk5+iD8z +CfyW/yeIKG5fRZfpzfbID4ynt9ji9+BvHedRdou7D+bl6TPoM+xXSJLmjV2I8xYS +su0BLj/6V6Aqpker3VP7NJscDLS7t/+KRXj7O2XIMSRjokRL5yIyxkcQVmhqfVKy +i+qkNS9sMSAY89Ce6E2bpn7f2wdBP42yCOGHISjNjv9LsmmSkuoNjy36qTR3kAgH +0KZWylOErsKdwTh9tU0URTHVTiNfhiw4WOc2/1wt+QN2/Ipg8XdcNnqLG66cs8j3 +hYIYw2a7JA+KlSCrUJ+Zv8FJKnZS6htw9FBHpzxyqQJlCjz55ksZU82hyar8WlX/ +LY6nWrIp/peBURvi3CgVXPuJuKDSOrJnZ8F1INDN1i7uTpE3olw= +=dLTg +-----END PGP SIGNATURE----- diff --git a/k9-svc/site/templates/default.html b/k9-svc/site/templates/default.html new file mode 100644 index 00000000..a6eda478 --- /dev/null +++ b/k9-svc/site/templates/default.html @@ -0,0 +1,40 @@ + + + + + + + {{title}} + + + + + + + +
+ +
+
+
+ {{content}} +
+
+ + + From 17e7f8f8251083adcde3c77f48c6ad1169deecab Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:27:18 +0100 Subject: [PATCH 3/5] refactor: convert nested avow-protocol to a thin binding standards/avow-protocol/ was a full duplicate that had genuinely diverged from the real hyperpolymath/avow-protocol repo (roughly a week apart in currency). Pilots the thin-binding design: centralise semantics in the canonical repo, localise only a small pointer here. Before removal, diffed the nested copy against the real repo in full. avow-lib/ (Idris2 formal-verification tests, ABI source, Zig FFI) had no home in the real repo, so it was migrated there first: hyperpolymath/avow-protocol#24 (merged). Everything else remaining was confirmed superseded by later work in the real repo (AffineScript .affine sources replaced by ReScript .res, README.adoc converted to README.md, local issue templates retired for the org's canon) or was unrendered RSR template scaffold with no real content. See dev-notes/handoffs/2026-07-02-standards-thin-binding-pilot-handoff.md Co-Authored-By: Claude Sonnet 5 --- avow-protocol/.editorconfig | 68 - avow-protocol/.gitattributes | 54 - .../.github/ISSUE_TEMPLATE/bug_report.md | 38 - .../.github/ISSUE_TEMPLATE/custom.md | 10 - .../.github/ISSUE_TEMPLATE/feature_request.md | 20 - avow-protocol/.github/workflows/6scm-sync.yml | 18 - avow-protocol/.github/workflows/codeql.yml | 104 -- .../.github/workflows/deploy-pages.yml | 51 - .../.github/workflows/governance.yml | 26 - avow-protocol/.github/workflows/scorecard.yml | 33 - avow-protocol/.gitignore | 22 - .../.machine_readable/6a2/ECOSYSTEM.a2ml | 20 - avow-protocol/.machine_readable/6a2/META.a2ml | 27 - .../.machine_readable/6a2/STATE.a2ml | 44 - avow-protocol/.well-known/change-password | 1 - avow-protocol/.well-known/security.txt | 10 - avow-protocol/ABI-FFI-README.md | 385 ------ avow-protocol/ARCHITECTURE-SETUP-COMPLETE.md | 294 ---- avow-protocol/ARCHITECTURE.md | 135 -- avow-protocol/AVOW-THREAT-MODEL.adoc | 1209 ----------------- avow-protocol/BINDING.adoc | 47 + avow-protocol/CLOUDFLARE-MANUAL-SETUP.md | 500 ------- avow-protocol/CLOUDFLARE-SETUP.md | 208 --- avow-protocol/CNAME | 1 - avow-protocol/CODE_OF_CONDUCT.md | 32 - avow-protocol/CONTRIBUTING.md | 116 -- avow-protocol/DEPLOY.md | 123 -- .../DEPLOYMENT-STATUS-ALL-PROJECTS.md | 184 --- avow-protocol/DEPLOYMENT-SUCCESS.md | 199 --- avow-protocol/LICENSE | 153 --- avow-protocol/MAINTAINERS.adoc | 47 - avow-protocol/QUICK-DEPLOY.md | 59 - avow-protocol/README.adoc | 510 ------- avow-protocol/ROADMAP.adoc | 22 - avow-protocol/RSR_OUTLINE.adoc | 218 --- avow-protocol/SECURITY.md | 21 - avow-protocol/WEEK-1-COMPLETE.md | 280 ---- avow-protocol/_headers | 29 - avow-protocol/assets/favicon.svg | 19 - avow-protocol/assets/script.js | 68 - avow-protocol/assets/style.css | 412 ------ .../.machine_readable/6a2/ECOSYSTEM.a2ml | 20 - .../avow-lib/.machine_readable/6a2/META.a2ml | 27 - .../avow-lib/.machine_readable/6a2/STATE.a2ml | 38 - avow-protocol/avow-lib/BUILDING.md | 115 -- avow-protocol/avow-lib/LICENSE | 27 - avow-protocol/avow-lib/README.adoc | 221 --- .../avow-lib/examples/deno/stamp_example.js | 300 ---- .../avow-lib/examples/rust/Cargo.lock | 16 - .../avow-lib/examples/rust/Cargo.toml | 9 - .../avow-lib/examples/rust/src/main.rs | 331 ----- avow-protocol/avow-lib/ffi/zig/README.adoc | 397 ------ avow-protocol/avow-lib/ffi/zig/build.zig | 63 - .../avow-lib/ffi/zig/src/example.zig | 144 -- avow-protocol/avow-lib/ffi/zig/src/main.zig | 478 ------- avow-protocol/avow-lib/ffi/zig/src/stamp.h | 241 ---- avow-protocol/avow-lib/src/abi/Consent.idr | 111 -- avow-protocol/avow-lib/src/abi/Types.idr | 168 --- .../avow-lib/src/abi/Unsubscribe.idr | 192 --- avow-protocol/avow-lib/tests/ConsentTests.idr | 92 -- avow-protocol/avow-lib/tests/Main.idr | 12 - .../avow-lib/tests/UnsubscribeTests.idr | 43 - avow-protocol/avow-social-media-design.adoc | 723 ---------- avow-protocol/casket-simple | Bin 2057416 -> 0 bytes avow-protocol/cloudflare-dns-zone.txt | 85 -- avow-protocol/config.yaml | 15 - avow-protocol/config/ci.k9.ncl | 90 -- avow-protocol/config/metadata.k9.ncl | 65 - avow-protocol/content/about.a2ml | 84 -- avow-protocol/content/index.md | 143 -- avow-protocol/contractiles/README.adoc | 19 - avow-protocol/contractiles/dust/Dustfile | 29 - avow-protocol/contractiles/must/Mustfile | 35 - avow-protocol/deno.json | 32 - avow-protocol/deno.lock | 199 --- avow-protocol/deploy-cloudflare.sh | 223 --- avow-protocol/deploy-repos.sh | 66 - avow-protocol/docs/CITATIONS.adoc | 36 - avow-protocol/docs/PROTOCOL-OUTLINE.md | 52 - avow-protocol/docs/PROTOCOL.md | 107 -- avow-protocol/docs/RELEASE-NOTES-v1.0.4.adoc | 27 - avow-protocol/examples/web-project-deno.json | 20 - avow-protocol/favicon.svg | 19 - avow-protocol/ffi/zig/build.zig | 94 -- avow-protocol/ffi/zig/src/main.zig | 274 ---- .../ffi/zig/test/integration_test.zig | 182 --- avow-protocol/index.html | 257 ---- avow-protocol/package.json | 21 - avow-protocol/public/about.html | 33 - avow-protocol/public/demo.js | 167 --- avow-protocol/public/proof-data.json | 39 - avow-protocol/rescript.json | 12 - .../scripts/CreatePagesProjects.affine | 100 -- .../scripts/DeployAllProjects.affine | 156 --- avow-protocol/scripts/DeployDeno.affine | 116 -- avow-protocol/scripts/DeployDirect.affine | 92 -- avow-protocol/scripts/GenerateProof.affine | 84 -- avow-protocol/scripts/SetupDomains.affine | 95 -- avow-protocol/scripts/check-6scm.sh | 22 - avow-protocol/scripts/sync-6scm.sh | 9 - avow-protocol/security-requirements.scm | 104 -- avow-protocol/src/Mod.affine | 7 - avow-protocol/src/Mod_test.affine | 14 - avow-protocol/src/ProvenResult.affine | 37 - avow-protocol/src/ProvenResult_test.affine | 61 - avow-protocol/src/ProvenSafeUrl.affine | 72 - avow-protocol/src/bindings/Deno_Api.affine | 34 - avow-protocol/src/bindings/Deno_Std_Fs.affine | 18 - .../src/bindings/Deno_Std_Path.affine | 10 - avow-protocol/src/bindings/Fetch_Api.affine | 25 - avow-protocol/stamp-protocol.org.zone | 40 - avow-protocol/style.css | 542 -------- avow-protocol/telegram-bot/.gitignore | 24 - avow-protocol/telegram-bot/ABI-FFI-README.md | 385 ------ avow-protocol/telegram-bot/CODE_OF_CONDUCT.md | 327 ----- avow-protocol/telegram-bot/CONTRIBUTING.md | 116 -- .../telegram-bot/DEMO-VIDEO-SCRIPT.md | 272 ---- avow-protocol/telegram-bot/DEPLOY-NOW.md | 156 --- avow-protocol/telegram-bot/LICENSE | 153 --- avow-protocol/telegram-bot/MAINTAINERS.adoc | 47 - avow-protocol/telegram-bot/NEXT-STEPS.md | 307 ----- avow-protocol/telegram-bot/README.adoc | 101 -- avow-protocol/telegram-bot/ROADMAP.adoc | 22 - avow-protocol/telegram-bot/RSR_OUTLINE.adoc | 218 --- avow-protocol/telegram-bot/SECURITY.md | 406 ------ avow-protocol/telegram-bot/TESTING-GUIDE.md | 151 -- .../.github/workflows/codeql.yml | 42 - .../.github/workflows/governance.yml | 26 - .../.github/workflows/scorecard.yml | 33 - .../telegram-bot/avow-telegram-bot/.gitignore | 24 - .../avow-telegram-bot/ABI-FFI-README.md | 385 ------ .../avow-telegram-bot/CODE_OF_CONDUCT.md | 327 ----- .../avow-telegram-bot/CONTRIBUTING.md | 116 -- .../avow-telegram-bot/DEMO-VIDEO-SCRIPT.md | 272 ---- .../avow-telegram-bot/DEPLOY-NOW.md | 156 --- .../telegram-bot/avow-telegram-bot/LICENSE | 153 --- .../avow-telegram-bot/MAINTAINERS.adoc | 47 - .../avow-telegram-bot/NEXT-STEPS.md | 307 ----- .../avow-telegram-bot/README.adoc | 101 -- .../avow-telegram-bot/ROADMAP.adoc | 22 - .../avow-telegram-bot/RSR_OUTLINE.adoc | 218 --- .../avow-telegram-bot/SECURITY.md | 406 ------ .../avow-telegram-bot/TESTING-GUIDE.md | 151 -- .../contractiles/README.adoc | 19 - .../contractiles/dust/Dustfile | 29 - .../contractiles/must/Mustfile | 35 - .../contractiles/trust/Trustfile.hs | 105 -- .../telegram-bot/avow-telegram-bot/deno.json | 25 - .../telegram-bot/avow-telegram-bot/deno.lock | 63 - .../avow-telegram-bot/docs/CITATIONS.adoc | 36 - .../examples/web-project-deno.json | 20 - .../avow-telegram-bot/ffi/zig/build.zig | 94 -- .../avow-telegram-bot/ffi/zig/src/main.zig | 274 ---- .../ffi/zig/test/integration_test.zig | 182 --- .../avow-telegram-bot/rescript.json | 22 - .../avow-telegram-bot/src/bot.affine | 232 ---- .../avow-telegram-bot/src/database.affine | 92 -- .../avow-telegram-bot/src/grammy.affine | 32 - .../avow-telegram-bot/src/sqlite.affine | 14 - .../avow-telegram-bot/src/stamp-mock.affine | 176 --- .../avow-telegram-bot/test-mock.affine | 195 --- .../telegram-bot/contractiles/README.adoc | 19 - .../telegram-bot/contractiles/dust/Dustfile | 29 - .../telegram-bot/contractiles/must/Mustfile | 35 - avow-protocol/telegram-bot/deno.json | 25 - avow-protocol/telegram-bot/deno.lock | 63 - .../telegram-bot/docs/CITATIONS.adoc | 36 - .../examples/web-project-deno.json | 20 - avow-protocol/telegram-bot/ffi/zig/build.zig | 94 -- .../telegram-bot/ffi/zig/src/main.zig | 274 ---- .../ffi/zig/test/integration_test.zig | 182 --- avow-protocol/telegram-bot/rescript.json | 12 - avow-protocol/wrangler.toml | 5 - 173 files changed, 47 insertions(+), 21511 deletions(-) delete mode 100644 avow-protocol/.editorconfig delete mode 100644 avow-protocol/.gitattributes delete mode 100644 avow-protocol/.github/ISSUE_TEMPLATE/bug_report.md delete mode 100644 avow-protocol/.github/ISSUE_TEMPLATE/custom.md delete mode 100644 avow-protocol/.github/ISSUE_TEMPLATE/feature_request.md delete mode 100644 avow-protocol/.github/workflows/6scm-sync.yml delete mode 100644 avow-protocol/.github/workflows/codeql.yml delete mode 100644 avow-protocol/.github/workflows/deploy-pages.yml delete mode 100644 avow-protocol/.github/workflows/governance.yml delete mode 100644 avow-protocol/.github/workflows/scorecard.yml delete mode 100644 avow-protocol/.gitignore delete mode 100644 avow-protocol/.machine_readable/6a2/ECOSYSTEM.a2ml delete mode 100644 avow-protocol/.machine_readable/6a2/META.a2ml delete mode 100644 avow-protocol/.machine_readable/6a2/STATE.a2ml delete mode 100644 avow-protocol/.well-known/change-password delete mode 100644 avow-protocol/.well-known/security.txt delete mode 100644 avow-protocol/ABI-FFI-README.md delete mode 100644 avow-protocol/ARCHITECTURE-SETUP-COMPLETE.md delete mode 100644 avow-protocol/ARCHITECTURE.md delete mode 100644 avow-protocol/AVOW-THREAT-MODEL.adoc create mode 100644 avow-protocol/BINDING.adoc delete mode 100644 avow-protocol/CLOUDFLARE-MANUAL-SETUP.md delete mode 100644 avow-protocol/CLOUDFLARE-SETUP.md delete mode 100644 avow-protocol/CNAME delete mode 100644 avow-protocol/CODE_OF_CONDUCT.md delete mode 100644 avow-protocol/CONTRIBUTING.md delete mode 100644 avow-protocol/DEPLOY.md delete mode 100644 avow-protocol/DEPLOYMENT-STATUS-ALL-PROJECTS.md delete mode 100644 avow-protocol/DEPLOYMENT-SUCCESS.md delete mode 100644 avow-protocol/LICENSE delete mode 100644 avow-protocol/MAINTAINERS.adoc delete mode 100644 avow-protocol/QUICK-DEPLOY.md delete mode 100644 avow-protocol/README.adoc delete mode 100644 avow-protocol/ROADMAP.adoc delete mode 100644 avow-protocol/RSR_OUTLINE.adoc delete mode 100644 avow-protocol/SECURITY.md delete mode 100644 avow-protocol/WEEK-1-COMPLETE.md delete mode 100644 avow-protocol/_headers delete mode 100644 avow-protocol/assets/favicon.svg delete mode 100644 avow-protocol/assets/script.js delete mode 100644 avow-protocol/assets/style.css delete mode 100644 avow-protocol/avow-lib/.machine_readable/6a2/ECOSYSTEM.a2ml delete mode 100644 avow-protocol/avow-lib/.machine_readable/6a2/META.a2ml delete mode 100644 avow-protocol/avow-lib/.machine_readable/6a2/STATE.a2ml delete mode 100644 avow-protocol/avow-lib/BUILDING.md delete mode 100644 avow-protocol/avow-lib/LICENSE delete mode 100644 avow-protocol/avow-lib/README.adoc delete mode 100644 avow-protocol/avow-lib/examples/deno/stamp_example.js delete mode 100644 avow-protocol/avow-lib/examples/rust/Cargo.lock delete mode 100644 avow-protocol/avow-lib/examples/rust/Cargo.toml delete mode 100644 avow-protocol/avow-lib/examples/rust/src/main.rs delete mode 100644 avow-protocol/avow-lib/ffi/zig/README.adoc delete mode 100644 avow-protocol/avow-lib/ffi/zig/build.zig delete mode 100644 avow-protocol/avow-lib/ffi/zig/src/example.zig delete mode 100644 avow-protocol/avow-lib/ffi/zig/src/main.zig delete mode 100644 avow-protocol/avow-lib/ffi/zig/src/stamp.h delete mode 100644 avow-protocol/avow-lib/src/abi/Consent.idr delete mode 100644 avow-protocol/avow-lib/src/abi/Types.idr delete mode 100644 avow-protocol/avow-lib/src/abi/Unsubscribe.idr delete mode 100644 avow-protocol/avow-lib/tests/ConsentTests.idr delete mode 100644 avow-protocol/avow-lib/tests/Main.idr delete mode 100644 avow-protocol/avow-lib/tests/UnsubscribeTests.idr delete mode 100644 avow-protocol/avow-social-media-design.adoc delete mode 100755 avow-protocol/casket-simple delete mode 100644 avow-protocol/cloudflare-dns-zone.txt delete mode 100644 avow-protocol/config.yaml delete mode 100644 avow-protocol/config/ci.k9.ncl delete mode 100644 avow-protocol/config/metadata.k9.ncl delete mode 100644 avow-protocol/content/about.a2ml delete mode 100644 avow-protocol/content/index.md delete mode 100644 avow-protocol/contractiles/README.adoc delete mode 100644 avow-protocol/contractiles/dust/Dustfile delete mode 100644 avow-protocol/contractiles/must/Mustfile delete mode 100644 avow-protocol/deno.json delete mode 100644 avow-protocol/deno.lock delete mode 100755 avow-protocol/deploy-cloudflare.sh delete mode 100755 avow-protocol/deploy-repos.sh delete mode 100644 avow-protocol/docs/CITATIONS.adoc delete mode 100644 avow-protocol/docs/PROTOCOL-OUTLINE.md delete mode 100644 avow-protocol/docs/PROTOCOL.md delete mode 100644 avow-protocol/docs/RELEASE-NOTES-v1.0.4.adoc delete mode 100644 avow-protocol/examples/web-project-deno.json delete mode 100644 avow-protocol/favicon.svg delete mode 100644 avow-protocol/ffi/zig/build.zig delete mode 100644 avow-protocol/ffi/zig/src/main.zig delete mode 100644 avow-protocol/ffi/zig/test/integration_test.zig delete mode 100644 avow-protocol/index.html delete mode 100644 avow-protocol/package.json delete mode 100644 avow-protocol/public/about.html delete mode 100644 avow-protocol/public/demo.js delete mode 100644 avow-protocol/public/proof-data.json delete mode 100644 avow-protocol/rescript.json delete mode 100644 avow-protocol/scripts/CreatePagesProjects.affine delete mode 100644 avow-protocol/scripts/DeployAllProjects.affine delete mode 100644 avow-protocol/scripts/DeployDeno.affine delete mode 100644 avow-protocol/scripts/DeployDirect.affine delete mode 100644 avow-protocol/scripts/GenerateProof.affine delete mode 100644 avow-protocol/scripts/SetupDomains.affine delete mode 100755 avow-protocol/scripts/check-6scm.sh delete mode 100755 avow-protocol/scripts/sync-6scm.sh delete mode 100644 avow-protocol/security-requirements.scm delete mode 100644 avow-protocol/src/Mod.affine delete mode 100644 avow-protocol/src/Mod_test.affine delete mode 100644 avow-protocol/src/ProvenResult.affine delete mode 100644 avow-protocol/src/ProvenResult_test.affine delete mode 100644 avow-protocol/src/ProvenSafeUrl.affine delete mode 100644 avow-protocol/src/bindings/Deno_Api.affine delete mode 100644 avow-protocol/src/bindings/Deno_Std_Fs.affine delete mode 100644 avow-protocol/src/bindings/Deno_Std_Path.affine delete mode 100644 avow-protocol/src/bindings/Fetch_Api.affine delete mode 100644 avow-protocol/stamp-protocol.org.zone delete mode 100644 avow-protocol/style.css delete mode 100644 avow-protocol/telegram-bot/.gitignore delete mode 100644 avow-protocol/telegram-bot/ABI-FFI-README.md delete mode 100644 avow-protocol/telegram-bot/CODE_OF_CONDUCT.md delete mode 100644 avow-protocol/telegram-bot/CONTRIBUTING.md delete mode 100644 avow-protocol/telegram-bot/DEMO-VIDEO-SCRIPT.md delete mode 100644 avow-protocol/telegram-bot/DEPLOY-NOW.md delete mode 100644 avow-protocol/telegram-bot/LICENSE delete mode 100644 avow-protocol/telegram-bot/MAINTAINERS.adoc delete mode 100644 avow-protocol/telegram-bot/NEXT-STEPS.md delete mode 100644 avow-protocol/telegram-bot/README.adoc delete mode 100644 avow-protocol/telegram-bot/ROADMAP.adoc delete mode 100644 avow-protocol/telegram-bot/RSR_OUTLINE.adoc delete mode 100644 avow-protocol/telegram-bot/SECURITY.md delete mode 100644 avow-protocol/telegram-bot/TESTING-GUIDE.md delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/.github/workflows/codeql.yml delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/.github/workflows/governance.yml delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/.github/workflows/scorecard.yml delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/.gitignore delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/ABI-FFI-README.md delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/CODE_OF_CONDUCT.md delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/CONTRIBUTING.md delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/DEMO-VIDEO-SCRIPT.md delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/DEPLOY-NOW.md delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/LICENSE delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/MAINTAINERS.adoc delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/NEXT-STEPS.md delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/README.adoc delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/ROADMAP.adoc delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/RSR_OUTLINE.adoc delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/SECURITY.md delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/TESTING-GUIDE.md delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/contractiles/README.adoc delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/contractiles/dust/Dustfile delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/contractiles/must/Mustfile delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/contractiles/trust/Trustfile.hs delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/deno.json delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/deno.lock delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/docs/CITATIONS.adoc delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/examples/web-project-deno.json delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/ffi/zig/build.zig delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/ffi/zig/src/main.zig delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/ffi/zig/test/integration_test.zig delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/rescript.json delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/src/bot.affine delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/src/database.affine delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/src/grammy.affine delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/src/sqlite.affine delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/src/stamp-mock.affine delete mode 100644 avow-protocol/telegram-bot/avow-telegram-bot/test-mock.affine delete mode 100644 avow-protocol/telegram-bot/contractiles/README.adoc delete mode 100644 avow-protocol/telegram-bot/contractiles/dust/Dustfile delete mode 100644 avow-protocol/telegram-bot/contractiles/must/Mustfile delete mode 100644 avow-protocol/telegram-bot/deno.json delete mode 100644 avow-protocol/telegram-bot/deno.lock delete mode 100644 avow-protocol/telegram-bot/docs/CITATIONS.adoc delete mode 100644 avow-protocol/telegram-bot/examples/web-project-deno.json delete mode 100644 avow-protocol/telegram-bot/ffi/zig/build.zig delete mode 100644 avow-protocol/telegram-bot/ffi/zig/src/main.zig delete mode 100644 avow-protocol/telegram-bot/ffi/zig/test/integration_test.zig delete mode 100644 avow-protocol/telegram-bot/rescript.json delete mode 100644 avow-protocol/wrangler.toml diff --git a/avow-protocol/.editorconfig b/avow-protocol/.editorconfig deleted file mode 100644 index fc6650ce..00000000 --- a/avow-protocol/.editorconfig +++ /dev/null @@ -1,68 +0,0 @@ -# RSR-template-repo - Editor Configuration -# https://editorconfig.org - -root = true - -[*] -charset = utf-8 -end_of_line = lf -indent_size = 2 -indent_style = space -insert_final_newline = true -trim_trailing_whitespace = true - -[*.md] -trim_trailing_whitespace = false - -[*.adoc] -trim_trailing_whitespace = false - -[*.rs] -indent_size = 4 - -[*.ex] -indent_size = 2 - -[*.exs] -indent_size = 2 - -[*.zig] -indent_size = 4 - -[*.ada] -indent_size = 3 - -[*.adb] -indent_size = 3 - -[*.ads] -indent_size = 3 - -[*.hs] -indent_size = 2 - -[*.res] -indent_size = 2 - -[*.resi] -indent_size = 2 - -[*.ncl] -indent_size = 2 - -[*.rkt] -indent_size = 2 - -[*.scm] -indent_size = 2 - -[*.nix] -indent_size = 2 - -[Justfile] -indent_style = space -indent_size = 4 - -[justfile] -indent_style = space -indent_size = 4 diff --git a/avow-protocol/.gitattributes b/avow-protocol/.gitattributes deleted file mode 100644 index e860a85c..00000000 --- a/avow-protocol/.gitattributes +++ /dev/null @@ -1,54 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -# RSR-compliant .gitattributes - -* text=auto eol=lf - -# Source -*.rs text eol=lf diff=rust -*.ex text eol=lf diff=elixir -*.exs text eol=lf diff=elixir -*.jl text eol=lf -*.res text eol=lf -*.resi text eol=lf -*.ada text eol=lf diff=ada -*.adb text eol=lf diff=ada -*.ads text eol=lf diff=ada -*.hs text eol=lf -*.chpl text eol=lf -*.scm text eol=lf -*.ncl text eol=lf -*.nix text eol=lf - -# Docs -*.md text eol=lf diff=markdown -*.adoc text eol=lf -*.txt text eol=lf - -# Data -*.json text eol=lf -*.yaml text eol=lf -*.yml text eol=lf -*.toml text eol=lf - -# Config -.gitignore text eol=lf -.gitattributes text eol=lf -justfile text eol=lf -Makefile text eol=lf -Containerfile text eol=lf - -# Scripts -*.sh text eol=lf - -# Binary -*.png binary -*.jpg binary -*.gif binary -*.pdf binary -*.woff2 binary -*.zip binary -*.gz binary - -# Lock files -Cargo.lock text eol=lf -diff -flake.lock text eol=lf -diff diff --git a/avow-protocol/.github/ISSUE_TEMPLATE/bug_report.md b/avow-protocol/.github/ISSUE_TEMPLATE/bug_report.md deleted file mode 100644 index dd84ea78..00000000 --- a/avow-protocol/.github/ISSUE_TEMPLATE/bug_report.md +++ /dev/null @@ -1,38 +0,0 @@ ---- -name: Bug report -about: Create a report to help us improve -title: '' -labels: '' -assignees: '' - ---- - -**Describe the bug** -A clear and concise description of what the bug is. - -**To Reproduce** -Steps to reproduce the behavior: -1. Go to '...' -2. Click on '....' -3. Scroll down to '....' -4. See error - -**Expected behavior** -A clear and concise description of what you expected to happen. - -**Screenshots** -If applicable, add screenshots to help explain your problem. - -**Desktop (please complete the following information):** - - OS: [e.g. iOS] - - Browser [e.g. chrome, safari] - - Version [e.g. 22] - -**Smartphone (please complete the following information):** - - Device: [e.g. iPhone6] - - OS: [e.g. iOS8.1] - - Browser [e.g. stock browser, safari] - - Version [e.g. 22] - -**Additional context** -Add any other context about the problem here. diff --git a/avow-protocol/.github/ISSUE_TEMPLATE/custom.md b/avow-protocol/.github/ISSUE_TEMPLATE/custom.md deleted file mode 100644 index 48d5f81f..00000000 --- a/avow-protocol/.github/ISSUE_TEMPLATE/custom.md +++ /dev/null @@ -1,10 +0,0 @@ ---- -name: Custom issue template -about: Describe this issue template's purpose here. -title: '' -labels: '' -assignees: '' - ---- - - diff --git a/avow-protocol/.github/ISSUE_TEMPLATE/feature_request.md b/avow-protocol/.github/ISSUE_TEMPLATE/feature_request.md deleted file mode 100644 index bbcbbe7d..00000000 --- a/avow-protocol/.github/ISSUE_TEMPLATE/feature_request.md +++ /dev/null @@ -1,20 +0,0 @@ ---- -name: Feature request -about: Suggest an idea for this project -title: '' -labels: '' -assignees: '' - ---- - -**Is your feature request related to a problem? Please describe.** -A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] - -**Describe the solution you'd like** -A clear and concise description of what you want to happen. - -**Describe alternatives you've considered** -A clear and concise description of any alternative solutions or features you've considered. - -**Additional context** -Add any other context or screenshots about the feature request here. diff --git a/avow-protocol/.github/workflows/6scm-sync.yml b/avow-protocol/.github/workflows/6scm-sync.yml deleted file mode 100644 index 387bbf9e..00000000 --- a/avow-protocol/.github/workflows/6scm-sync.yml +++ /dev/null @@ -1,18 +0,0 @@ -name: 6SCM Mirror Check - -on: - push: - paths: - - '.machine_readable/**' - pull_request: - paths: - - '.machine_readable/**' - -jobs: - check: - runs-on: ubuntu-latest - timeout-minutes: 20 - steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - - name: Check 6scm mirrors - run: bash scripts/check-6scm.sh diff --git a/avow-protocol/.github/workflows/codeql.yml b/avow-protocol/.github/workflows/codeql.yml deleted file mode 100644 index 0aac734d..00000000 --- a/avow-protocol/.github/workflows/codeql.yml +++ /dev/null @@ -1,104 +0,0 @@ -# For most projects, this workflow file will not need changing; you simply need -# to commit it to your repository. -# -# You may wish to alter this file to override the set of languages analyzed, -# or to provide custom queries or build logic. -# -# ******** NOTE ******** -# We have attempted to detect the languages in your repository. Please check -# the `language` matrix defined below to confirm you have the correct set of -# supported CodeQL languages. -# -name: "CodeQL Advanced" - -on: - push: - branches: [ "main" ] - pull_request: - branches: [ "main" ] - schedule: - - cron: '15 12 * * 3' - -permissions: read-all - -jobs: - analyze: - name: Analyze (${{ matrix.language }}) - # Runner size impacts CodeQL analysis time. To learn more, please see: - # - https://gh.io/recommended-hardware-resources-for-running-codeql - # - https://gh.io/supported-runners-and-hardware-resources - # - https://gh.io/using-larger-runners (GitHub.com only) - # Consider using larger runners or machines with greater resources for possible analysis time improvements. - runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }} - timeout-minutes: 30 - permissions: - # required for all workflows - security-events: write - - # required to fetch internal or private CodeQL packs - packages: read - - # only required for workflows in private repositories - actions: read - contents: read - - strategy: - fail-fast: false - matrix: - include: - - language: actions - build-mode: none - - language: javascript-typescript - build-mode: none - # CodeQL supports the following values keywords for 'language': 'actions', 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'rust', 'swift' - # Use `c-cpp` to analyze code written in C, C++ or both - # Use 'java-kotlin' to analyze code written in Java, Kotlin or both - # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both - # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis, - # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning. - # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how - # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages - steps: - - name: Checkout repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - - # Add any setup steps before running the `github/codeql-action/init` action. - # This includes steps like installing compilers or runtimes (`actions/setup-node` - # or others). This is typically only required for manual builds. - # - name: Setup runtime (example) - # uses: actions/setup-example@v1 - - # Initializes the CodeQL tools for scanning. - - name: Initialize CodeQL - uses: github/codeql-action/init@b2f9ef845756500b97acbdaf5c1dd4e9c1d15734 # v3 - with: - languages: ${{ matrix.language }} - build-mode: ${{ matrix.build-mode }} - # If you wish to specify custom queries, you can do so here or in a config file. - # By default, queries listed here will override any specified in a config file. - # Prefix the list here with "+" to use these queries and those in the config file. - - # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs - # queries: security-extended,security-and-quality - - # If the analyze step fails for one of the languages you are analyzing with - # "We were unable to automatically build your code", modify the matrix above - # to set the build mode to "manual" for that language. Then modify this step - # to build your code. - # ℹ️ Command-line programs to run using the OS shell. - # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun - - name: Run manual build steps - if: matrix.build-mode == 'manual' - shell: bash - run: | - echo 'If you are using a "manual" build mode for one or more of the' \ - 'languages you are analyzing, replace this with the commands to build' \ - 'your code, for example:' - echo ' make bootstrap' - echo ' make release' - exit 1 - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@b2f9ef845756500b97acbdaf5c1dd4e9c1d15734 # v3 - with: - category: "/language:${{matrix.language}}" diff --git a/avow-protocol/.github/workflows/deploy-pages.yml b/avow-protocol/.github/workflows/deploy-pages.yml deleted file mode 100644 index 1204a976..00000000 --- a/avow-protocol/.github/workflows/deploy-pages.yml +++ /dev/null @@ -1,51 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -name: Deploy STAMP Protocol - -on: - push: - branches: [main] - workflow_dispatch: - -permissions: - contents: read - pages: write - id-token: write - -concurrency: - group: "pages" - cancel-in-progress: false - -jobs: - deploy: - runs-on: ubuntu-latest - timeout-minutes: 30 - environment: - name: github-pages - url: ${{ steps.deployment.outputs.page_url }} - - steps: - - name: Checkout - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - - - name: Setup Deno - uses: denoland/setup-deno@v2 - with: - deno-version: v2.x - - - name: Build Site - run: | - deno task build - # Copy compiled output if it exists - [ -f src/StampApp.res.js ] && cp src/StampApp.res.js script.js || true - - - name: Setup Pages - uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5 - - - name: Upload artifact - uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3 - with: - path: '.' - - - name: Deploy to GitHub Pages - id: deployment - uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4 diff --git a/avow-protocol/.github/workflows/governance.yml b/avow-protocol/.github/workflows/governance.yml deleted file mode 100644 index b4062e02..00000000 --- a/avow-protocol/.github/workflows/governance.yml +++ /dev/null @@ -1,26 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -# governance.yml — single wrapper calling the shared estate governance bundle -# in hyperpolymath/standards instead of carrying per-repo copies. -# -# Replaces the per-repo governance scaffolding removed in the same commit: -# quality.yml, guix-nix-policy.yml, npm-bun-blocker.yml, ts-blocker.yml, -# security-policy.yml, rsr-antipattern.yml, wellknown-enforcement.yml, -# workflow-linter.yml -# -# Load-bearing build/security workflows stay standalone in the repo -# (rust-ci, codeql, dependabot, release, scan/mirror/pages plumbing). - -name: Governance - -on: - push: - branches: [main, master] - pull_request: - workflow_dispatch: - -permissions: - contents: read - -jobs: - governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613 diff --git a/avow-protocol/.github/workflows/scorecard.yml b/avow-protocol/.github/workflows/scorecard.yml deleted file mode 100644 index 95378b76..00000000 --- a/avow-protocol/.github/workflows/scorecard.yml +++ /dev/null @@ -1,33 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -name: OSSF Scorecard -on: - push: - branches: [main, master] - schedule: - - cron: '0 4 * * *' - workflow_dispatch: - -permissions: read-all - -jobs: - analysis: - runs-on: ubuntu-latest - timeout-minutes: 20 - permissions: - security-events: write - id-token: write - steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - with: - persist-credentials: false - - - name: Run Scorecard - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.3.1 - with: - results_file: results.sarif - results_format: sarif - - - name: Upload results - uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v3.31.8 - with: - sarif_file: results.sarif diff --git a/avow-protocol/.gitignore b/avow-protocol/.gitignore deleted file mode 100644 index c661e974..00000000 --- a/avow-protocol/.gitignore +++ /dev/null @@ -1,22 +0,0 @@ -.DS_Store -node_modules/ -.env -*.log -.wrangler/ - -# ReScript build artifacts -lib/ -*.res.js - -# npm lock file -package-lock.json - -# Crash recovery artifacts -ai-cli-crash-capture/ - -# KDE directory metadata -.directory - -# Sync reports -sync_report*.txt -sync_repos_report*.txt diff --git a/avow-protocol/.machine_readable/6a2/ECOSYSTEM.a2ml b/avow-protocol/.machine_readable/6a2/ECOSYSTEM.a2ml deleted file mode 100644 index 8db3b597..00000000 --- a/avow-protocol/.machine_readable/6a2/ECOSYSTEM.a2ml +++ /dev/null @@ -1,20 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) -# -# ECOSYSTEM.a2ml — Avow Protocol ecosystem position -[metadata] -version = "1.0.0" -last-updated = "2026-04-11" - -[project] -name = "Avow Protocol" -purpose = "" -role = "demonstration-site" - -[position-in-ecosystem] -category = "" - -[related-projects] -projects = [ - # No related projects recorded -] diff --git a/avow-protocol/.machine_readable/6a2/META.a2ml b/avow-protocol/.machine_readable/6a2/META.a2ml deleted file mode 100644 index f6b8250f..00000000 --- a/avow-protocol/.machine_readable/6a2/META.a2ml +++ /dev/null @@ -1,27 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) -# -# META.a2ml — Avow Protocol meta-level information -[metadata] -version = "0.1.0" -last-updated = "2026-04-11" - -[project-info] -license = "PMPL-1.0-or-later" -author = "Jonathan D.A. Jewell (hyperpolymath)" - -[architecture-decisions] -decisions = [ - # No ADRs recorded -] - -[development-practices] -versioning = "SemVer" -documentation = "AsciiDoc" -build-tool = "just" - -[maintenance-axes] -scoping-first = true -axis-1 = "must > intend > like" -axis-2 = "corrective > adaptive > perfective" -axis-3 = "systems > compliance > effects" diff --git a/avow-protocol/.machine_readable/6a2/STATE.a2ml b/avow-protocol/.machine_readable/6a2/STATE.a2ml deleted file mode 100644 index cfbd7ab2..00000000 --- a/avow-protocol/.machine_readable/6a2/STATE.a2ml +++ /dev/null @@ -1,44 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) -# -# STATE.a2ml — Avow Protocol project state -[metadata] -project = "stamp-protocol" -version = "1.0.0" -last-updated = "2026-01-30" -status = "active" -session = "converted from scheme — 2026-04-11" - -[project-context] -name = "Stamp Protocol" -purpose = """Interactive demonstration of STAMP consent protocol""" -completion-percentage = 65 - -[position] -phase = "MVP Development" # design | implementation | testing | maintenance | archived -maturity = "experimental" # experimental | alpha | beta | production | lts - -[route-to-mvp] -milestones = [ - # No milestones recorded -] - -[blockers-and-issues] -issues = [ - "DOM mounting not yet implemented", - "StampApp.res has model/update/render but no DOM integration", -] - -[critical-next-actions] -actions = [ - "Wire StampApp to DOM via Tea.App.standardProgram", - "Test interactive URL validation in browser", - "Complete visual consent flow UI", - "Deploy to Cloudflare Pages staging", - "Launch public site at stamp-protocol.org", - "Add API integration for real consent tracking", -] - -[maintenance-status] -last-run-utc = "2026-01-30T00:00:00Z" -last-result = "unknown" # unknown | pass | warn | fail diff --git a/avow-protocol/.well-known/change-password b/avow-protocol/.well-known/change-password deleted file mode 100644 index 21ba2758..00000000 --- a/avow-protocol/.well-known/change-password +++ /dev/null @@ -1 +0,0 @@ -https://stamp-protocol.org/ diff --git a/avow-protocol/.well-known/security.txt b/avow-protocol/.well-known/security.txt deleted file mode 100644 index 9a9ae6c3..00000000 --- a/avow-protocol/.well-known/security.txt +++ /dev/null @@ -1,10 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -# Security contact information for stamp-protocol.org -# RFC 9116: https://www.rfc-editor.org/rfc/rfc9116.html - -Contact: mailto:jonathan.jewell@open.ac.uk -Expires: 2027-01-30T00:00:00.000Z -Preferred-Languages: en -Canonical: https://stamp-protocol.org/.well-known/security.txt -Policy: https://github.com/hyperpolymath/stamp-website/blob/main/SECURITY.md -Acknowledgments: https://github.com/hyperpolymath/stamp-website/blob/main/SECURITY.md#acknowledgments diff --git a/avow-protocol/ABI-FFI-README.md b/avow-protocol/ABI-FFI-README.md deleted file mode 100644 index e6a32bbf..00000000 --- a/avow-protocol/ABI-FFI-README.md +++ /dev/null @@ -1,385 +0,0 @@ -{{~ Aditionally delete this line and fill out the template below ~}} - -# {{PROJECT}} ABI/FFI Documentation - -## Overview - -This library follows the **Hyperpolymath RSR Standard** for ABI and FFI design: - -- **ABI (Application Binary Interface)** defined in **Idris2** with formal proofs -- **FFI (Foreign Function Interface)** implemented in **Zig** for C compatibility -- **Generated C headers** bridge Idris2 ABI to Zig FFI -- **Any language** can call through standard C ABI - -## Architecture - -``` -┌─────────────────────────────────────────────┐ -│ ABI Definitions (Idris2) │ -│ src/abi/ │ -│ - Types.idr (Type definitions) │ -│ - Layout.idr (Memory layout proofs) │ -│ - Foreign.idr (FFI declarations) │ -└─────────────────┬───────────────────────────┘ - │ - │ generates (at compile time) - ▼ -┌─────────────────────────────────────────────┐ -│ C Headers (auto-generated) │ -│ generated/abi/{{project}}.h │ -└─────────────────┬───────────────────────────┘ - │ - │ imported by - ▼ -┌─────────────────────────────────────────────┐ -│ FFI Implementation (Zig) │ -│ ffi/zig/src/main.zig │ -│ - Implements C-compatible functions │ -│ - Zero-cost abstractions │ -│ - Memory-safe by default │ -└─────────────────┬───────────────────────────┘ - │ - │ compiled to lib{{project}}.so/.a - ▼ -┌─────────────────────────────────────────────┐ -│ Any Language via C ABI │ -│ - Rust, ReScript, Julia, Python, etc. │ -└─────────────────────────────────────────────┘ -``` - -## Directory Structure - -``` -{{project}}/ -├── src/ -│ ├── abi/ # ABI definitions (Idris2) -│ │ ├── Types.idr # Core type definitions with proofs -│ │ ├── Layout.idr # Memory layout verification -│ │ └── Foreign.idr # FFI function declarations -│ └── lib/ # Core library (any language) -│ -├── ffi/ -│ └── zig/ # FFI implementation (Zig) -│ ├── build.zig # Build configuration -│ ├── build.zig.zon # Dependencies -│ ├── src/ -│ │ └── main.zig # C-compatible FFI implementation -│ ├── test/ -│ │ └── integration_test.zig -│ └── include/ -│ └── {{project}}.h # C header (optional, can be generated) -│ -├── generated/ # Auto-generated files -│ └── abi/ -│ └── {{project}}.h # Generated from Idris2 ABI -│ -└── bindings/ # Language-specific wrappers (optional) - ├── rust/ - ├── rescript/ - └── julia/ -``` - -## Why Idris2 for ABI? - -### 1. **Formal Verification** - -Idris2's dependent types allow proving properties about the ABI at compile-time: - -```idris --- Prove struct size is correct -public export -exampleStructSize : HasSize ExampleStruct 16 - --- Prove field alignment is correct -public export -fieldAligned : Divides 8 (offsetOf ExampleStruct.field) - --- Prove ABI is platform-compatible -public export -abiCompatible : Compatible (ABI 1) (ABI 2) -``` - -### 2. **Type Safety** - -Encode invariants that C/Zig cannot express: - -```idris --- Non-null pointer guaranteed at type level -data Handle : Type where - MkHandle : (ptr : Bits64) -> {auto 0 nonNull : So (ptr /= 0)} -> Handle - --- Array with length proof -data Buffer : (n : Nat) -> Type where - MkBuffer : Vect n Byte -> Buffer n -``` - -### 3. **Platform Abstraction** - -Platform-specific types with compile-time selection: - -```idris -CInt : Platform -> Type -CInt Linux = Bits32 -CInt Windows = Bits32 - -CSize : Platform -> Type -CSize Linux = Bits64 -CSize Windows = Bits64 -``` - -### 4. **Safe Evolution** - -Prove that new ABI versions are backward-compatible: - -```idris --- Compiler enforces compatibility -abiUpgrade : ABI 1 -> ABI 2 -abiUpgrade old = MkABI2 { - -- Must preserve all v1 fields - v1_compat = old, - -- Can add new fields - new_features = defaults -} -``` - -## Why Zig for FFI? - -### 1. **C ABI Compatibility** - -Zig exports C-compatible functions naturally: - -```zig -export fn library_function(param: i32) i32 { - return param * 2; -} -``` - -### 2. **Memory Safety** - -Compile-time safety without runtime overhead: - -```zig -// Null check enforced at compile time -const handle = init() orelse return error.InitFailed; -defer free(handle); -``` - -### 3. **Cross-Compilation** - -Built-in cross-compilation to any platform: - -```bash -zig build -Dtarget=x86_64-linux -zig build -Dtarget=aarch64-macos -zig build -Dtarget=x86_64-windows -``` - -### 4. **Zero Dependencies** - -No runtime, no libc required (unless explicitly needed): - -```zig -// Minimal binary size -pub const lib = @import("std"); -// Only includes what you use -``` - -## Building - -### Build FFI Library - -```bash -cd ffi/zig -zig build # Build debug -zig build -Doptimize=ReleaseFast # Build optimized -zig build test # Run tests -``` - -### Generate C Header from Idris2 ABI - -```bash -cd src/abi -idris2 --cg c-header Types.idr -o ../../generated/abi/{{project}}.h -``` - -### Cross-Compile - -```bash -cd ffi/zig - -# Linux x86_64 -zig build -Dtarget=x86_64-linux - -# macOS ARM64 -zig build -Dtarget=aarch64-macos - -# Windows x86_64 -zig build -Dtarget=x86_64-windows -``` - -## Usage - -### From C - -```c -#include "{{project}}.h" - -int main() { - void* handle = {{project}}_init(); - if (!handle) return 1; - - int result = {{project}}_process(handle, 42); - if (result != 0) { - const char* err = {{project}}_last_error(); - fprintf(stderr, "Error: %s\n", err); - } - - {{project}}_free(handle); - return 0; -} -``` - -Compile with: -```bash -gcc -o example example.c -l{{project}} -L./zig-out/lib -``` - -### From Idris2 - -```idris -import {{PROJECT}}.ABI.Foreign - -main : IO () -main = do - Just handle <- init - | Nothing => putStrLn "Failed to initialize" - - Right result <- process handle 42 - | Left err => putStrLn $ "Error: " ++ errorDescription err - - free handle - putStrLn "Success" -``` - -### From Rust - -```rust -#[link(name = "{{project}}")] -extern "C" { - fn {{project}}_init() -> *mut std::ffi::c_void; - fn {{project}}_free(handle: *mut std::ffi::c_void); - fn {{project}}_process(handle: *mut std::ffi::c_void, input: u32) -> i32; -} - -fn main() { - unsafe { - let handle = {{project}}_init(); - assert!(!handle.is_null()); - - let result = {{project}}_process(handle, 42); - assert_eq!(result, 0); - - {{project}}_free(handle); - } -} -``` - -### From Julia - -```julia -const lib{{project}} = "lib{{project}}" - -function init() - handle = ccall((:{{project}}_init, lib{{project}}), Ptr{Cvoid}, ()) - handle == C_NULL && error("Failed to initialize") - handle -end - -function process(handle, input) - result = ccall((:{{project}}_process, lib{{project}}), Cint, (Ptr{Cvoid}, UInt32), handle, input) - result -end - -function cleanup(handle) - ccall((:{{project}}_free, lib{{project}}), Cvoid, (Ptr{Cvoid},), handle) -end - -# Usage -handle = init() -try - result = process(handle, 42) - println("Result: $result") -finally - cleanup(handle) -end -``` - -## Testing - -### Unit Tests (Zig) - -```bash -cd ffi/zig -zig build test -``` - -### Integration Tests - -```bash -cd ffi/zig -zig build test-integration -``` - -### ABI Verification (Idris2) - -```idris --- Compile-time verification -%runElab verifyABI - --- Runtime checks -main : IO () -main = do - verifyLayoutsCorrect - verifyAlignmentsCorrect - putStrLn "ABI verification passed" -``` - -## Contributing - -When modifying the ABI/FFI: - -1. **Update ABI first** (`src/abi/*.idr`) - - Modify type definitions - - Update proofs - - Ensure backward compatibility - -2. **Generate C header** - ```bash - idris2 --cg c-header src/abi/Types.idr -o generated/abi/{{project}}.h - ``` - -3. **Update FFI implementation** (`ffi/zig/src/main.zig`) - - Implement new functions - - Match ABI types exactly - -4. **Add tests** - - Unit tests in Zig - - Integration tests - - ABI verification tests - -5. **Update documentation** - - Function signatures - - Usage examples - - Migration guide (if breaking changes) - -## License - -PMPL-1.0-or-later - -## See Also - -- [Idris2 Documentation](https://idris2.readthedocs.io) -- [Zig Documentation](https://ziglang.org/documentation/master/) -- [Rhodium Standard Repositories](https://github.com/hyperpolymath/rhodium-standard-repositories) -- [FFI Migration Guide](../ffi-migration-guide.md) -- [ABI Migration Guide](../abi-migration-guide.md) diff --git a/avow-protocol/ARCHITECTURE-SETUP-COMPLETE.md b/avow-protocol/ARCHITECTURE-SETUP-COMPLETE.md deleted file mode 100644 index d3d289bb..00000000 --- a/avow-protocol/ARCHITECTURE-SETUP-COMPLETE.md +++ /dev/null @@ -1,294 +0,0 @@ -# SPDX-License-Identifier: CC-BY-SA-4.0 -# AVOW Protocol - Architecture Setup Complete - -**Date:** 2026-02-04 -**Author:** Jonathan D.A. Jewell - -## Summary - -Successfully renamed from STAMP Protocol to AVOW Protocol and set up the complete architecture stack: - -## What Was Done - -### 1. Rebranding: STAMP → AVOW - -✅ Updated all checkpoint files (STATE.scm, ECOSYSTEM.scm, META.scm) -✅ Changed license from AGPL-3.0 to PMPL-1.0-or-later -✅ Updated all documentation and references -✅ Changed @stamp_demo_bot to @avow_demo_bot -✅ Updated stamp-protocol.org to avow-protocol.org - -### 2. Architecture Stack Setup - -Created complete integration of: - -#### casket-ssg (Static Site Generator) -- Pure functional Haskell SSG with compile-time template validation -- Type-safe site structure -- Lazy evaluation for efficient builds -- Binary already present: `/casket-simple` - -#### cadre-tea-router (Routing) -- Created `src/AvowRouter.res` with complete route definitions -- Type-safe URL parsing and formatting -- Routes: Home, About, Docs, Demo, Verify(messageId) -- Built on cadre-router primitives - -#### rescript-tea (The Elm Architecture) -- Created `src/AvowTea.res` with full TEA implementation -- Model, Messages, Init, Update, View, Subscriptions -- Integrated with AvowRouter for URL-driven state -- Post-quantum crypto initialization support - -#### rescript-dom-mounter (Formally Verified DOM) -- Created `src/AvowSafeMount.res` for safe mounting -- Mathematical guarantees: no null pointers, valid selectors, well-formed HTML -- Batch mounting support -- Idris2-proven correctness - -#### Main Entry Point -- Created `src/Main.res` as application entry point -- Initializes with formal verification -- Logs crypto stack on startup - -### 3. Post-Quantum Cryptography Configuration - -Created `security-requirements.scm` with complete spec: - -- **Signatures:** Dilithium5-AES (ML-DSA-87, FIPS 204) -- **Key Exchange:** Kyber-1024 (ML-KEM-1024, FIPS 203) -- **Hashing:** SHAKE3-512 (FIPS 202) -- **Symmetric:** XChaCha20-Poly1305 (256-bit keys) -- **Hybrid:** Ed448 + Dilithium5 -- **Fallback:** SPHINCS+ for all PQ operations -- **Verification:** Idris2, Coq, Isabelle - -### 4. Cloudflare Integration - -Created comprehensive Cloudflare configuration: - -#### DNS Zone File (`cloudflare-dns-zone.txt`) -- Core records (A, AAAA, CNAME) with proxying -- Security records (CAA, TLSA, SSHFP) -- Mail security (DMARC, MTA-STS, TLS-RPT) -- OpenPGP and SFTP URIs -- Zero Trust/SDP tunnels for internal services -- WASM proxy endpoints - -#### Deployment Guide (`CLOUDFLARE-SETUP.md`) -- Complete 10-step setup guide -- DNS configuration with placeholders -- GitHub Pages / Cloudflare Pages integration -- Security headers configuration -- Zero Trust/SDP tunnel setup -- WAF rules and rate limiting -- WASM proxy deployment -- Post-quantum TLS verification -- Monitoring and testing procedures - -### 5. Updated Documentation - -✅ `README.md` - Complete architecture section with verification layers -✅ `index.html` - Updated with avow-root div and correct references -✅ `deno.json` - Added proper import paths for all dependencies -✅ `rescript.json` - Configured for avow-protocol -✅ `package.json` - Created with correct author and license - -## Architecture Diagram - -``` -┌─────────────────────────────────────────────────────────────┐ -│ User Browser │ -└──────────────────┬──────────────────────────────────────────┘ - │ - ▼ -┌─────────────────────────────────────────────────────────────┐ -│ Cloudflare Edge (WASM Proxy) │ -│ • Post-quantum TLS (Kyber-1024) │ -│ • DDoS protection │ -│ • WAF rules │ -│ • WASM request validation │ -└──────────────────┬──────────────────────────────────────────┘ - │ - ▼ -┌─────────────────────────────────────────────────────────────┐ -│ Cloudflare Pages / GitHub Pages │ -│ Static site served via CDN │ -└──────────────────┬──────────────────────────────────────────┘ - │ - ▼ -┌─────────────────────────────────────────────────────────────┐ -│ avow-protocol.org (Static Site) │ -│ │ -│ ┌──────────────────────────────────────────────────┐ │ -│ │ casket-ssg (Haskell) │ │ -│ │ • Compile-time template validation │ │ -│ │ • Type-safe site structure │ │ -│ └──────────────────────────────────────────────────┘ │ -│ │ │ -│ ▼ │ -│ ┌──────────────────────────────────────────────────┐ │ -│ │ ReScript Application (Main.res) │ │ -│ │ ┌────────────────────────────────────────────┐ │ │ -│ │ │ AvowSafeMount.res │ │ │ -│ │ │ • rescript-dom-mounter │ │ │ -│ │ │ • Formally verified mounting │ │ │ -│ │ │ • Idris2 proofs of correctness │ │ │ -│ │ └────────────┬───────────────────────────────┘ │ │ -│ │ ▼ │ │ -│ │ ┌────────────────────────────────────────────┐ │ │ -│ │ │ AvowTea.res (The Elm Architecture) │ │ │ -│ │ │ • Model, Msg, Init, Update, View │ │ │ -│ │ │ • Commands & Subscriptions │ │ │ -│ │ │ • Type-safe state management │ │ │ -│ │ └────────────┬───────────────────────────────┘ │ │ -│ │ ▼ │ │ -│ │ ┌────────────────────────────────────────────┐ │ │ -│ │ │ AvowRouter.res │ │ │ -│ │ │ • cadre-tea-router │ │ │ -│ │ │ • Type-safe URL parsing/formatting │ │ │ -│ │ │ • Route → Msg patterns │ │ │ -│ │ └────────────┬───────────────────────────────┘ │ │ -│ │ ▼ │ │ -│ │ ┌────────────────────────────────────────────┐ │ │ -│ │ │ proven (URL validation) │ │ │ -│ │ │ • Idris2 formal verification │ │ │ -│ │ │ • No XSS via URLs │ │ │ -│ │ │ • Compile-time safety │ │ │ -│ │ └────────────────────────────────────────────┘ │ │ -│ └──────────────────────────────────────────────────┘ │ -└─────────────────────────────────────────────────────────────┘ - │ - ▼ -┌─────────────────────────────────────────────────────────────┐ -│ libavow (Idris2 + Zig FFI) │ -│ • Dilithium5-AES signatures │ -│ • Kyber-1024 key exchange │ -│ • SHAKE3-512 hashing │ -│ • XChaCha20-Poly1305 encryption │ -│ • Dependent type proofs of protocol correctness │ -└─────────────────────────────────────────────────────────────┘ -``` - -## Formal Verification Layers - -1. **DNS Layer** - DNSSEC, CAA, TLSA records -2. **Network Layer** - Post-quantum TLS (Kyber-1024) -3. **Edge Layer** - WASM validation (to be implemented) -4. **Static Site** - casket-ssg compile-time checks -5. **DOM Mounting** - rescript-dom-mounter Idris2 proofs -6. **Routing** - cadre-tea-router type-safe patterns -7. **URL Parsing** - proven Idris2 verification -8. **Application State** - rescript-tea exhaustive pattern matching -9. **Protocol Layer** - libavow dependent type proofs -10. **Cryptography** - Coq/Isabelle verified primitives - -## Next Steps - -### Immediate (This Session) -1. ✅ Rename STAMP to AVOW throughout codebase -2. ✅ Set up casket-ssg integration -3. ✅ Create cadre-tea-router architecture -4. ✅ Build rescript-tea application -5. ✅ Configure Cloudflare DNS and security -6. ⏳ Build and test ReScript compilation -7. ⏳ Deploy to Cloudflare Pages - -### Short Term (This Week) -1. Integrate real libavow library (replace mocks) -2. Implement WASM proxy with AVOW verification -3. Set up Cloudflare Tunnel for internal services -4. Configure WAF rules and rate limiting -5. Test post-quantum crypto integration -6. Update documentation with deployment results - -### Medium Term (This Month) -1. Complete Idris2 ABI proofs for all protocol operations -2. Implement Zig FFI with full crypto primitives -3. Create integration examples for platforms -4. Write comprehensive test suite -5. Performance benchmarking -6. Security audit - -## Dependencies Setup - -Created proper dependency structure: - -- `deno.json` - Import maps for local repos -- `package.json` - npm dependencies (ReScript toolchain) -- `rescript.json` - ReScript configuration -- Repos available: - - `$REPOS_DIR/casket-ssg` - - `$REPOS_DIR/cadre-tea-router` - - `$REPOS_DIR/rescript-tea` - - `$REPOS_DIR/rescript-dom-mounter` - - `$REPOS_DIR/proven` - -## Files Created/Modified - -### Created -- `src/AvowRouter.res` - Routing definitions -- `src/AvowTea.res` - TEA application -- `src/AvowSafeMount.res` - Safe DOM mounting -- `src/Main.res` - Application entry point -- `cloudflare-dns-zone.txt` - Cloudflare DNS configuration -- `security-requirements.scm` - Post-quantum crypto specs -- `CLOUDFLARE-SETUP.md` - Deployment guide -- `ARCHITECTURE-SETUP-COMPLETE.md` - This document -- `package.json` - npm package configuration - -### Modified -- `STATE.scm` - Updated project state, tech stack, license -- `ECOSYSTEM.scm` - Updated related projects, license -- `META.scm` - Updated license -- `rescript.json` - Updated package name and configuration -- `deno.json` - Added import paths for dependencies -- `index.html` - Updated bot references, license, added avow-root div -- `README.md` - Complete architecture section rewrite - -## License Note - -All files now use **PMPL-1.0-or-later** (Palimpsest License) as specified in the development standards. - -AGPL-3.0 references have been replaced throughout the codebase. - -## Author Attribution - -All files correctly attribute: -- **Name:** Jonathan D.A. Jewell -- **Email:** j.d.a.jewell@open.ac.uk - -## Proven Library Integration - -The architecture uses `proven` library calls throughout for unbreakable code: - -- URL validation with Idris2 proofs -- No XSS via URL injection -- No runtime URL parsing errors -- Invalid URLs cannot compile -- Mathematical guarantees of correctness - -## Security Stance - -AVOW Protocol implements **belt-and-suspenders** security: - -- Hybrid classical+PQ signatures (Ed448 + Dilithium5) -- Conservative fallbacks (SPHINCS+) -- Formal verification at every layer -- Post-quantum crypto throughout -- Zero Trust architecture -- Defense in depth - -## Repository Status - -**Location:** `$REPOS_DIR/avow-protocol` -**Symlink:** `~/Documents/hyperpolymath-repos/avow-protocol` -**Git Status:** Modified, ready for commit -**Build Status:** Dependencies installed, ready for compilation - -## Contact - -For questions about this setup: -- Jonathan D.A. Jewell -- j.d.a.jewell@open.ac.uk -- GitHub: @hyperpolymath diff --git a/avow-protocol/ARCHITECTURE.md b/avow-protocol/ARCHITECTURE.md deleted file mode 100644 index d71904c9..00000000 --- a/avow-protocol/ARCHITECTURE.md +++ /dev/null @@ -1,135 +0,0 @@ -# AVOW Protocol Website Architecture - -## Multi-Layer Stack (All Layers Working Together) - -### Build-Time (Static Generation) -- **Casket-SSG (Haskell)** - Generates static HTML from Markdown -- Runs once during deployment -- Pure functional, predictable output - -### Run-Time (Client-Side) -- **ReScript** - Type-safe JavaScript compilation -- **ReScript-TEA** - The Elm Architecture for predictable state management -- **Cadre-TEA-Router** - Type-safe client-side routing - -### Verification Layers -- **k9-svc** - Self-Validating Components - - Validates form inputs - - Proves unsubscribe links work before sending - - Runtime invariant checking - -- **a2ml** - Attested Markup Language - - Typed, verifiable consent proofs - - Cryptographic timestamping - - Content with mathematical guarantees - -- **proven (Idris2)** - Formally Verified Operations - - SafeString - String operations that can't crash - - SafeUrl - URL parsing with proofs - - SafeHtml - Safe HTML generation - - All operations mathematically proven correct - -## Architecture Flow - -``` -User Request - ↓ -Casket (Haskell) → Static HTML - ↓ -Browser Loads Page - ↓ -ReScript-TEA Initializes - ↓ -User Interaction (click demo) - ↓ -TEA Update (pure state transition) - ↓ -k9-svc Validates (proves correctness) - ↓ -a2ml Generates Proof (cryptographic) - ↓ -proven Ensures Safety (Idris2 proofs) - ↓ -DOM Updated (ReScript) -``` - -## Why This Stack? - -### Casket-SSG (Haskell) -- ✅ Keeps Haskell for what it does best: pure transformations -- ✅ Perfect for static site generation -- ✅ Not destroyed or replaced - enhanced! - -### ReScript + TEA -- ✅ Type safety for client-side code -- ✅ Predictable state management -- ✅ Model-Update-View pattern -- ✅ Compile-time guarantees - -### k9-svc -- ✅ Components prove their own correctness -- ✅ Runtime validation with proofs -- ✅ Used where relevant (form validation, link checking) - -### a2ml -- ✅ Typed markup for consent proofs -- ✅ Verifiable content -- ✅ Used where relevant (cryptographic proofs) - -### proven (Idris2) -- ✅ Mathematical proofs of correctness -- ✅ Operations that cannot crash -- ✅ Used for super-robust critical paths -- ✅ SafeUrl, SafeString, SafeHtml modules - -## Integration Points - -### Current (Vanilla JS) -```javascript -// Can crash, no guarantees -document.querySelector('.stat-card').style.opacity = '1' -``` - -### With ReScript-TEA -```rescript -// Type-safe, compile-time checked -let update = (model, msg) => - switch msg { - | ShowStats => {...model, statsVisible: true} - } -``` - -### With k9-svc -```rescript -// Component proves it maintains invariants -(k9-svc-check unsubscribe-link - (response-code 200) - (response-time < 200ms) - (proof validated)) -``` - -### With a2ml -```rescript -// Typed, verifiable proof -(proof consent - (action subscribe) - (timestamp verified) - (type explicit)) -``` - -### With proven -```idris --- Operations that cannot crash (Idris2) -parseUrl : String -> Either ProofOfError (Url, ProofOfValid) -``` - -## No Layers Destroyed - -- ✅ **Haskell (Casket)** - Still generates static HTML -- ✅ **ReScript** - Adds type safety on top -- ✅ **TEA** - Adds state management on top -- ✅ **k9-svc** - Adds validation where relevant -- ✅ **a2ml** - Adds typed proofs where relevant -- ✅ **proven** - Adds formal verification for critical operations - -Each layer complements the others. Nothing is destroyed! diff --git a/avow-protocol/AVOW-THREAT-MODEL.adoc b/avow-protocol/AVOW-THREAT-MODEL.adoc deleted file mode 100644 index 1ecf49cf..00000000 --- a/avow-protocol/AVOW-THREAT-MODEL.adoc +++ /dev/null @@ -1,1209 +0,0 @@ -= STAMP Protocol: Comprehensive Threat Model -Jonathan D.A. Jewell -:toc: -:toclevels: 4 - -== Executive Summary - -*Comprehensive security analysis of STAMP Protocol covering attack vectors, defenses, residual risks, and mitigation strategies.* - -=== Threat Landscape - -[cols="2,1,1,2"] -|=== -|Threat Category |Likelihood |Impact |Primary Defense - -|Mass Bot Creation -|Very High -|Critical -|Time-locked reputation - -|Verification Bypass -|Medium -|Critical -|Multi-source requirements - -|Identity Theft -|Medium -|High -|Biometric + liveness - -|Coordination Attacks -|High -|High -|Statistical detection - -|Economic Attacks -|Medium -|Medium -|Cost asymmetry - -|Protocol Exploits -|Low -|Critical -|Formal verification - -|Supply Chain -|Low -|Critical -|Reproducible builds - -|Social Engineering -|Medium -|Medium -|Rate limiting -|=== - -== Threat Actor Analysis - -=== Actor Types - -==== 1. Individual Spammer - -*Motivation:* Financial gain (affiliate links, scams) - -*Capabilities:* - -* Limited budget ($100-1000) -* Basic technical skills -* Off-the-shelf tools - -*Attack Vectors:* - -* Buy aged accounts -* Simple automation scripts -* Manual verification gaming - -*Threat Level:* LOW (STAMP defenses effective) - -==== 2. Professional Spam Operations - -*Motivation:* Large-scale financial gain - -*Capabilities:* - -* Moderate budget ($10k-100k) -* Professional developers -* SIM farms, proxy networks -* Automated tooling - -*Attack Vectors:* - -* Mass account creation -* Verification source abuse -* Behavioral mimicry -* Account marketplace - -*Threat Level:* MEDIUM (STAMP raises costs significantly) - -==== 3. State-Sponsored Actors - -*Motivation:* Disinformation, election interference, espionage - -*Capabilities:* - -* Unlimited budget -* Advanced technical skills -* Access to real identities -* Custom malware/exploits - -*Attack Vectors:* - -* Stolen identity databases -* Compromised verification sources -* Zero-day exploits -* Social engineering at scale - -*Threat Level:* HIGH (Most sophisticated adversary) - -==== 4. Platform Competitors - -*Motivation:* Sabotage, reputation damage - -*Capabilities:* - -* Significant budget -* Inside knowledge -* Legal teams - -*Attack Vectors:* - -* Patent warfare -* FUD campaigns -* Regulatory complaints -* Technical sabotage - -*Threat Level:* MEDIUM (Non-technical threat) - -==== 5. Ideological Actors - -*Motivation:* Political agenda, activism - -*Capabilities:* - -* Variable budget -* Coordinated groups -* Technical volunteers - -*Attack Vectors:* - -* Coordinated campaigns -* Social engineering -* Reputation attacks -* Protest disruption - -*Threat Level:* MEDIUM - -== Attack Vectors & Defenses - -=== AV-1: Mass Account Creation - -==== Attack Description - -*Goal:* Create thousands of accounts quickly to spam/manipulate - -*Methods:* - -* Automated registration scripts -* CAPTCHA solving services -* Email/phone number farms -* Credential stuffing - -==== STAMP Defenses - -[cols="1,2,1"] -|=== -|Defense Layer |Mechanism |Effectiveness - -|Multi-Source Verification -|Require 2+ independent sources (email + phone + biometric) -|90% - -|Time-Locked Reputation -|New accounts have limited capabilities -|95% - -|Rate Limiting -|Per-IP, per-network registration limits -|85% - -|Behavioral Analysis -|Detect automated registration patterns -|80% - -|Cost Asymmetry -|Each verification costs attacker money -|90% -|=== - -==== Formal Verification - -[source,idris] ----- --- Account creation requires multiple proofs -record NewAccount where - email : VerifiedEmail - phone : VerifiedPhone - {auto 0 sourcesIndependent : Independent email phone} - {auto 0 notBanned : NotInBanList email phone} - {auto 0 rateLimitOK : CreationsFrom phone.network < DailyLimit} - --- Cannot create account without all proofs --- Type system enforces at compile time ----- - -==== Residual Risk - -*Attack Still Possible If:* - -* Attacker controls large SIM farm + email providers -* Cost: $1-5 per account -* Mitigation: Behavioral analysis, graduated trust - -*Risk Level:* LOW - -* *Likelihood:* Medium (possible but expensive) -* *Impact:* Low (new accounts have limited capabilities) -* *Detection Time:* Minutes-Hours -* *Recovery:* Automated account suspension - -=== AV-2: Verification Source Compromise - -==== Attack Description - -*Goal:* Compromise verification provider to create fake verifications - -*Targets:* - -* Email providers (Gmail, Outlook) -* SMS gateways -* Biometric databases -* Social verification networks - -==== Attack Scenarios - -*Scenario 1: Email Provider Breach* - -1. Attacker compromises email provider API -2. Creates fake "verified" email addresses -3. Uses them to verify STAMP accounts - -*Scenario 2: SMS Gateway Hack* - -1. Attacker compromises SMS gateway -2. Intercepts verification codes -3. Verifies fake phone numbers - -*Scenario 3: Inside Job* - -1. Attacker bribes/compromises employee -2. Issues fake verifications -3. Sells verified accounts - -==== STAMP Defenses - -[cols="1,2,1"] -|=== -|Defense Layer |Mechanism |Effectiveness - -|Multi-Source Requirement -|Compromise of one source insufficient -|99% - -|Source Independence Proof -|Verify sources are truly independent -|90% - -|Cryptographic Auditing -|All verifications logged immutably -|95% - -|Statistical Anomaly Detection -|Detect unusual verification patterns -|85% - -|Source Reputation Tracking -|Downrank compromised sources -|90% -|=== - -==== Formal Verification - -[source,idris] ----- --- Sources must be provably independent -data SourceIndependence : VerificationSource -> VerificationSource -> Type where - Independent : - (s1 : VerificationSource) -> - (s2 : VerificationSource) -> - {auto 0 diffProvider : s1.provider /= s2.provider} -> - {auto 0 diffNetwork : s1.network /= s2.network} -> - {auto 0 diffOwnership : s1.owner /= s2.owner} -> - SourceIndependence s1 s2 - --- Cannot use related sources ----- - -==== Residual Risk - -*Attack Still Possible If:* - -* Attacker compromises 2+ independent sources simultaneously -* Probability: 0.1% × 0.1% = 0.01% (with 99% per-source security) - -*Risk Level:* VERY LOW - -* *Likelihood:* Very Low (requires multiple breaches) -* *Impact:* Medium (limited by time-locks) -* *Detection Time:* Hours-Days -* *Recovery:* Revoke compromised source, re-verify users - -=== AV-3: Identity Theft - -==== Attack Description - -*Goal:* Use stolen real identities to create verified fake accounts - -*Data Sources:* - -* Data breaches (Equifax, LinkedIn, etc.) -* Dark web markets -* Phishing campaigns -* Social engineering - -==== Attack Scenarios - -*Scenario 1: Credential Stuffing* - -1. Attacker obtains leaked email/password database -2. Tries credentials on STAMP-integrated platforms -3. Takes over existing verified accounts - -*Scenario 2: Document Forgery* - -1. Attacker obtains stolen ID documents -2. Creates deepfake photos matching ID -3. Passes KYC verification - -*Scenario 3: SIM Swap* - -1. Attacker socially engineers mobile carrier -2. Transfers victim's phone number to attacker SIM -3. Receives verification codes, takes over account - -==== STAMP Defenses - -[cols="1,2,1"] -|=== -|Defense Layer |Mechanism |Effectiveness - -|Liveness Detection -|Biometric must prove live human (not photo/video) -|98% - -|Behavioral Continuity -|Detect ownership change via behavior analysis -|85% - -|Device Fingerprinting -|Track device changes, flag suspicious transfers -|80% - -|Velocity Checks -|Limit verification attempts per identity -|90% - -|Cross-Platform Correlation -|Check if identity used on multiple platforms -|75% -|=== - -==== Formal Verification - -[source,idris] ----- --- Biometric verification requires liveness proof -record BiometricVerification where - biometricData : BiometricHash - livenessProof : LivenessChallenge - timestamp : Timestamp - - {auto 0 livenessPassed : VerifyLiveness livenessProof = Passed} - {auto 0 matchesDocument : BiometricMatch biometricData documentPhoto > Threshold} - {auto 0 notReplayed : timestamp = Now} -- Cannot replay old verification - --- Deepfakes and photos cannot pass liveness ----- - -==== Residual Risk - -*Attack Still Possible If:* - -* Attacker has victim's phone, biometrics, and documents -* Sophisticated deepfake technology advances -* Social engineering at telecom level - -*Risk Level:* MEDIUM - -* *Likelihood:* Low (requires significant resources) -* *Impact:* High (fully verified account) -* *Detection Time:* Days-Weeks -* *Recovery:* Account suspension, victim notification, identity recovery - -=== AV-4: Coordination & Astroturfing - -==== Attack Description - -*Goal:* Coordinate multiple real accounts to amplify message/manipulate discourse - -*Methods:* - -* Pay real users to post/vote -* Create "organic" seeming campaigns -* Gradual account aging to avoid detection - -==== Attack Scenarios - -*Scenario 1: Paid Coordination* - -1. Attacker recruits real users (Fiverr, clickfarms) -2. Each user creates real verified account -3. Coordinate posts/votes via private channel -4. Appears organic but is coordinated - -*Scenario 2: Sleeper Accounts* - -1. Create verified accounts months in advance -2. Build reputation slowly and organically -3. Activate all at once for coordinated campaign -4. One-time use, disposable - -==== STAMP Defenses - -[cols="1,2,1"] -|=== -|Defense Layer |Mechanism |Effectiveness - -|Statistical Correlation -|Detect similar posting times, targets, content -|85% - -|Network Analysis -|Graph analysis of account relationships -|90% - -|Behavioral Diversity -|Flag accounts with identical patterns -|80% - -|Content Analysis -|Detect copy-paste, similar phrasing -|75% - -|Temporal Analysis -|Detect synchronized bursts of activity -|85% -|=== - -==== Formal Verification - -[source,idris] ----- --- Detect coordinated behavior -data CoordinationScore : List Account -> Type where - Independent : - (accounts : List Account) -> - {auto 0 temporalDiversity : VarianceOf (map postTimes accounts) > MinVariance} -> - {auto 0 contentDiversity : SimilarityOf (map content accounts) < MaxSimilarity} -> - {auto 0 networkIndependence : Clustering accounts < MaxClustering} -> - CoordinationScore accounts Low - - Coordinated : - (accounts : List Account) -> - {auto 0 highCorrelation : Correlation accounts > Threshold} -> - CoordinationScore accounts High - --- If coordination detected, flag for review ----- - -==== Residual Risk - -*Attack Still Possible If:* - -* Well-resourced attacker recruits many real users -* Users coordinate manually (no digital footprint) -* Slow, organic-seeming campaigns - -*Risk Level:* MEDIUM - -* *Likelihood:* Medium (feasible with resources) -* *Impact:* Medium (limited by detection) -* *Detection Time:* Hours-Days -* *Recovery:* Flag coordinated accounts, reduce visibility - -=== AV-5: Economic/Resource Attacks - -==== Attack Description - -*Goal:* Overwhelm STAMP infrastructure or make it economically unviable - -*Methods:* - -* DDoS attacks on verification endpoints -* Cost amplification (expensive verifications) -* Resource exhaustion - -==== Attack Scenarios - -*Scenario 1: Verification DoS* - -1. Flood verification endpoints with requests -2. Exhaust API quotas with third-party services -3. Cause service degradation/outages - -*Scenario 2: Cost Amplification* - -1. Trigger expensive verifications repeatedly -2. Force platform to pay verification costs -3. Make STAMP economically unsustainable - -==== STAMP Defenses - -[cols="1,2,1"] -|=== -|Defense Layer |Mechanism |Effectiveness - -|Rate Limiting -|Per-IP, per-network verification limits -|95% - -|Proof of Work -|Require computational puzzle before verification -|90% - -|Tiered Verification -|Cheap verifications first, expensive only if needed -|85% - -|CDN/DDoS Protection -|Cloudflare, AWS Shield -|99% - -|Cost Caps -|Limit verification costs per account/platform -|90% -|=== - -==== Formal Verification - -[source,idris] ----- --- Verification cost is bounded -record VerificationCost where - source : VerificationSource - cost : Currency - - {auto 0 costBounded : cost <= MaxCostPerVerification} - {auto 0 totalCap : SumOf (userVerifications user) <= MaxCostPerUser} - --- Cannot exceed cost limits ----- - -==== Residual Risk - -*Attack Still Possible If:* - -* Massive distributed attack from legitimate-looking IPs -* Cost: $10k-100k to cause temporary disruption - -*Risk Level:* LOW - -* *Likelihood:* Low (expensive, temporary) -* *Impact:* Low (temporary degradation, not data loss) -* *Detection Time:* Minutes -* *Recovery:* Automated traffic shaping, rate limiting - -=== AV-6: Protocol Implementation Bugs - -==== Attack Description - -*Goal:* Exploit bugs in STAMP implementation to bypass verification - -*Bug Types:* - -* Logic errors in verification checks -* Race conditions -* Integer overflows -* Type confusion - -==== Attack Scenarios - -*Scenario 1: Verification Bypass* - -1. Find bug in verification logic -2. Craft input that passes verification incorrectly -3. Create verified account without real verification - -*Scenario 2: Privilege Escalation* - -1. Find bug in reputation calculation -2. Exploit to gain high reputation instantly -3. Bypass time-lock restrictions - -==== STAMP Defenses - -[cols="1,2,1"] -|=== -|Defense Layer |Mechanism |Effectiveness - -|Formal Verification (Idris2) -|Mathematical proofs of correctness -|99.9% - -|Type Safety -|Dependent types prevent entire bug classes -|99% - -|Fuzzing -|Automated testing with random inputs -|90% - -|Code Audit -|Third-party security audits -|85% - -|Bug Bounty -|Community-driven vulnerability discovery -|80% -|=== - -==== Formal Verification - -[source,idris] ----- --- Impossible to construct verified account without proofs --- This is guaranteed by Idris2 type system -data VerifiedAccount : Type where - MkVerified : - (id : AccountId) -> - (sources : List VerificationSource) -> - {auto 0 multiSource : length sources >= 2} -> - {auto 0 sourcesValid : All VerifySource sources} -> - {auto 0 sourcesIndependent : Independent sources} -> - VerifiedAccount - --- Bug: Verification bypass --- Cannot happen: Type system prevents compilation ----- - -==== Why Formal Verification Matters - -*Traditional Code (Rust/Go):* - -[source,rust] ----- -struct VerifiedAccount { - sources: Vec, - is_verified: bool, // ❌ Can be set to true without checking sources! -} - -// Bug possible: -let fake = VerifiedAccount { - sources: vec![], - is_verified: true, // ← Oops, verified with no sources -}; ----- - -*STAMP (Idris2):* - -[source,idris] ----- --- Literally impossible to compile: -badAccount : VerifiedAccount -badAccount = MkVerified someId [] --- Error: Cannot satisfy proof: length [] >= 2 --- Code won't even compile! ----- - -==== Residual Risk - -*Attack Still Possible If:* - -* Bug in Idris2 compiler itself (extremely rare) -* Bug in FFI layer (Zig implementation) -* Misuse of STAMP library by platform - -*Risk Level:* VERY LOW - -* *Likelihood:* Very Low (formal verification is highly reliable) -* *Impact:* High if exploited -* *Detection Time:* Variable -* *Recovery:* Patch, re-verify affected accounts - -=== AV-7: Supply Chain Attacks - -==== Attack Description - -*Goal:* Compromise STAMP development/distribution to inject malicious code - -*Targets:* - -* STAMP repository (GitHub) -* Dependencies (Idris2, Zig, libraries) -* Distribution channels (npm, crates.io) -* Build infrastructure - -==== Attack Scenarios - -*Scenario 1: Dependency Poisoning* - -1. Compromise upstream dependency -2. Inject backdoor into STAMP builds -3. Backdoor deployed to all platforms using STAMP - -*Scenario 2: Repository Compromise* - -1. Compromise developer account -2. Push malicious commit to STAMP -3. Signed with trusted key, appears legitimate - -==== STAMP Defenses - -[cols="1,2,1"] -|=== -|Defense Layer |Mechanism |Effectiveness - -|Minimal Dependencies -|Few external dependencies to audit -|90% - -|Reproducible Builds -|Verify builds match source exactly -|95% - -|Signed Commits -|All commits GPG-signed by maintainers -|85% - -|Multi-Party Review -|Require 2+ maintainer approval -|90% - -|Security Scanning -|Automated CVE/malware scanning -|80% - -|Isolated Build Environment -|Builds in sandboxed containers -|85% -|=== - -==== Security Measures - -*Dependency Management* - -[source,yaml] ----- -# Only allow vetted, audited dependencies -dependencies: - idris2: "= 0.7.0" # Exact version pinning - zig: "= 0.13.0" - # No transitive dependencies allowed - # Everything manually vetted ----- - -*Build Verification* - -[source,bash] ----- -# Reproducible builds -# Anyone can verify: -git clone https://github.com/hyperpolymath/libstamp -cd libstamp -./build.sh --reproducible -sha256sum lib/libstamp.so -# Hash must match published hash ----- - -==== Residual Risk - -*Attack Still Possible If:* - -* Sophisticated state-sponsored attack -* Compromise of multiple maintainer accounts simultaneously -* Zero-day in build toolchain - -*Risk Level:* LOW - -* *Likelihood:* Very Low (requires sophisticated attack) -* *Impact:* Critical (if successful) -* *Detection Time:* Days-Weeks -* *Recovery:* Revoke compromised release, rebuild from source - -=== AV-8: Social Engineering - -==== Attack Description - -*Goal:* Manipulate humans to bypass technical controls - -*Targets:* - -* Platform administrators -* STAMP maintainers -* Verification source employees -* End users - -==== Attack Scenarios - -*Scenario 1: Admin Impersonation* - -1. Attacker impersonates platform admin -2. Contacts STAMP support requesting special access -3. Gains elevated privileges - -*Scenario 2: Phishing* - -1. Phish verification source employee -2. Gain access to verification system -3. Issue fake verifications - -*Scenario 3: User Deception* - -1. Convince user to "verify" attacker's account -2. Use social verification loophole -3. Gain trusted status - -==== STAMP Defenses - -[cols="1,2,1"] -|=== -|Defense Layer |Mechanism |Effectiveness - -|No Manual Overrides -|All verifications automated, no admin bypass -|95% - -|Rate Limits on Social Verification -|Limit vouching frequency per user -|85% - -|Audit Logging -|All administrative actions logged immutably -|90% - -|Multi-Factor Authentication -|Require MFA for all admin access -|90% - -|User Education -|Clear warnings about verification scams -|70% -|=== - -==== Formal Verification - -[source,idris] ----- --- No "god mode" or manual overrides --- All verifications must go through proofs -data AdminAction : Type where - -- Admins can only: - ViewLogs : AdminAction - SuspendAccount : AccountId -> Reason -> AdminAction - -- Cannot: - -- GrantVerification : AccountId -> AdminAction -- ❌ Doesn't exist! - --- Even admins cannot bypass verification proofs ----- - -==== Residual Risk - -*Attack Still Possible If:* - -* Sophisticated spearphishing campaign -* Insider threat (malicious employee) -* User gullibility at scale - -*Risk Level:* MEDIUM - -* *Likelihood:* Medium (humans are weakest link) -* *Impact:* Medium (limited by technical controls) -* *Detection Time:* Hours-Days -* *Recovery:* Revoke affected verifications, user notification - -== Cross-Cutting Concerns - -=== Privacy & GDPR Compliance - -==== Threats - -* Data breaches exposing verification data -* Surveillance via verification metadata -* Cross-platform tracking - -==== Defenses - -* Zero-knowledge proofs (prove property without revealing data) -* Encrypted storage of PII -* Data minimization (only store necessary data) -* Right to erasure (GDPR Article 17) -* Audit logs for compliance - -==== Implementation - -[source,idris] ----- --- Prove age without revealing birthdate -data AgeProof : Type where - OverThreshold : - (commitment : Commitment Birthdate) -> - (proof : ZKProof "age >= 18") -> - AgeProof - --- Platform receives: "User is over 18" --- Platform does NOT receive: Actual birthdate ----- - -=== Availability & Reliability - -==== Threats - -* Infrastructure outages -* Network partitions -* Database corruption - -==== Defenses - -* Multi-region deployment -* Read replicas for verification queries -* Offline verification mode (cached proofs) -* Graceful degradation - -=== Regulatory & Legal - -==== Threats - -* Regulatory capture by incumbents -* Patent trolls -* Liability for platform misconduct - -==== Defenses - -* Open source (AGPL-3.0) -* Defensive patent strategy -* Clear liability boundaries in ToS -* Regulatory compliance (DSA, GDPR, CAN-SPAM) - -== Risk Matrix - -[cols="1,1,1,1,2"] -|=== -|Threat |Likelihood |Impact |Risk Level |Mitigation Priority - -|Mass Bot Creation -|High -|Critical -|High -|✅ Mitigated (time-locks) - -|Verification Compromise -|Low -|Critical -|Medium -|✅ Mitigated (multi-source) - -|Identity Theft -|Medium -|High -|Medium -|🔶 Partially mitigated (liveness) - -|Coordination -|Medium -|Medium -|Medium -|🔶 Partially mitigated (detection) - -|Economic Attacks -|Low -|Low -|Low -|✅ Mitigated (rate limits) - -|Protocol Bugs -|Very Low -|High -|Low -|✅ Mitigated (formal verification) - -|Supply Chain -|Very Low -|Critical -|Medium -|🔶 Ongoing (reproducible builds) - -|Social Engineering -|Medium -|Medium -|Medium -|⚠️ Requires vigilance -|=== - -== Incident Response Plan - -=== Detection - -*Automated Monitoring:* - -* Anomaly detection on verification patterns -* Statistical correlation analysis -* Failed verification rate tracking -* Platform integration health checks - -*Alerting Thresholds:* - -* Failed verifications > 10% baseline -* Coordination score > 0.8 for account cluster -* Verification source error rate > 5% -* API error rate > 1% - -=== Response Procedures - -*Severity Levels:* - -[cols="1,2,2,1"] -|=== -|Level |Example |Response Time |Actions - -|P0 - Critical -|Verification bypass discovered -|< 1 hour -|Immediate patch, all-hands - -|P1 - High -|Verification source compromised -|< 4 hours -|Disable source, notify users - -|P2 - Medium -|Coordination campaign detected -|< 24 hours -|Flag accounts, investigate - -|P3 - Low -|Elevated bot activity -|< 1 week -|Monitor, adjust thresholds -|=== - -*Escalation Path:* - -1. On-call engineer notified -2. Incident commander assigned (P0/P1) -3. Stakeholders notified (platforms, users) -4. Post-mortem within 48 hours - -=== Recovery - -*Steps:* - -1. Contain the threat (disable compromised component) -2. Investigate root cause -3. Develop and test fix -4. Deploy fix with rollback plan -5. Notify affected parties -6. Post-mortem and lessons learned - -== Long-Term Threat Evolution - -=== Emerging Threats (2027-2030) - -==== AI-Generated Personas - -*Threat:* Advanced AI creates realistic human-like personas - -*Defense:* - -* Deeper behavioral analysis -* Multi-modal verification (video calls) -* Turing test 2.0 (human-only challenges) - -==== Quantum Computing - -*Threat:* Quantum computers break cryptographic proofs - -*Defense:* - -* Migrate to post-quantum cryptography -* Lattice-based signatures -* Hash-based proofs - -==== Deepfake Biometrics - -*Threat:* Perfect biometric spoofing - -*Defense:* - -* Advanced liveness detection -* Multi-factor biometrics -* Behavioral biometrics - -==== Decentralized Identity - -*Threat:* Users want self-sovereign identity, not platform-controlled - -*Defense:* - -* Integrate with W3C DIDs -* Blockchain-based verification -* User-controlled credentials - -== Conclusion - -=== Summary - -*STAMP Protocol has strong defenses against current threats:* - -* ✅ Mass bot creation: 95% effective -* ✅ Verification bypass: 99% effective -* 🔶 Identity theft: 85% effective -* 🔶 Coordination: 85% effective -* ✅ Protocol bugs: 99.9% effective - -*Key Strengths:* - -1. *Formal verification* eliminates entire bug classes -2. *Multi-source verification* prevents single point of failure -3. *Time-locked reputation* makes spam economically unviable -4. *Mathematical proofs* provide unprecedented assurance - -*Residual Risks:* - -1. Sophisticated identity theft (mitigated by liveness detection) -2. Well-resourced coordination attacks (detected statistically) -3. Social engineering (requires ongoing vigilance) - -*Overall Security Posture:* **STRONG** - -STAMP provides the most secure anti-spam/bot solution available, with mathematical guarantees impossible in traditional systems. - -=== Recommendations - -*For Platforms Adopting STAMP:* - -1. Implement all recommended verification sources -2. Monitor for coordination patterns -3. Regular security audits -4. User education on social engineering -5. Incident response plan in place - -*For STAMP Development:* - -1. Maintain formal verification rigor -2. Regular third-party audits -3. Active bug bounty program -4. Reproducible builds for all releases -5. Defensive patent strategy - -*For Regulators:* - -1. STAMP provides auditable compliance -2. Mathematical proofs enable verification -3. Consider STAMP for DSA compliance certification -4. Privacy-preserving design meets GDPR - -== Appendix: Threat Modeling Methodology - -*Framework Used:* STRIDE + Attack Trees - -*STRIDE Categories:* - -* **S**poofing (Identity theft, fake accounts) -* **T**ampering (Protocol exploits, data manipulation) -* **R**epudiation (Audit logging, non-repudiation) -* **I**nformation Disclosure (Privacy breaches) -* **D**enial of Service (Resource exhaustion) -* **E**levation of Privilege (Admin access, bypass) - -*Analysis Process:* - -1. Enumerate assets (verification data, user accounts, platform integration) -2. Identify threats per STRIDE category -3. Assess likelihood and impact -4. Design defenses -5. Formal verification of critical defenses -6. Residual risk analysis -7. Incident response planning - -*Review Cadence:* - -* Quarterly threat model review -* Annual comprehensive security audit -* Ad-hoc reviews for new features -* Post-incident updates - ---- - -*Document Version:* 1.0 -*Last Updated:* 2026-01-30 -*Next Review:* 2026-04-30 diff --git a/avow-protocol/BINDING.adoc b/avow-protocol/BINDING.adoc new file mode 100644 index 00000000..eb2aad6d --- /dev/null +++ b/avow-protocol/BINDING.adoc @@ -0,0 +1,47 @@ +// SPDX-License-Identifier: CC-BY-SA-4.0 +// SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell += avow-protocol — thin binding +:toc: + +This directory is NOT a copy of the avow-protocol codebase. It is a +pointer. Do not add protocol text, source, docs, or templates here — +they belong in the canonical repo below. + +== Canonical repository + +https://github.com/hyperpolymath/avow-protocol[hyperpolymath/avow-protocol] +is the single source of truth for all avow-protocol content: protocol +spec, source, docs, tests, and governance. + +== Standards this component opts into + +* `LICENCE-POLICY.adoc` — canonical MPL-2.0 (code) / CC-BY-SA-4.0 (docs) pair +* Reusable CI workflows: Scorecard, Hypatia scan, Governance bundle +* `.machine_readable/contractiles/` obligation-typing convention + +== Known gaps (tracked, not fixed by this binding) + +* The real repo's `.machine_readable/6a2/` has not yet migrated to + `descriptiles` per the estate naming mandate (2026-06-30). Tracked + debt in the real repo, out of scope here. + +== History + +Prior to 2026-07-02 this directory held a full duplicate of the +avow-protocol codebase that had genuinely diverged from the real repo +(roughly a week apart in currency). The duplicate was removed as part +of the standards thin-binding pilot +(`dev-notes/handoffs/2026-07-02-standards-thin-binding-pilot-handoff.md`). + +Before removal, the nested copy was diffed against the real repo in +full. One piece of unique content had no home in the real repo: +`avow-lib/` (Idris2 formal-verification tests, ABI source, Zig FFI). +It was migrated to the real repo first, so it wasn't discarded: +https://github.com/hyperpolymath/avow-protocol/pull/24 + +Everything else unique to the old nested copy was confirmed superseded +by later work in the real repo (AffineScript `.affine` sources replaced +by ReScript `.res` equivalents, `README.adoc` converted to `README.md`, +local issue templates retired in favour of the org's `.github` canon) +or was unrendered RSR template scaffold with no real content +(`{{PROJECT}}` placeholders, never instantiated). diff --git a/avow-protocol/CLOUDFLARE-MANUAL-SETUP.md b/avow-protocol/CLOUDFLARE-MANUAL-SETUP.md deleted file mode 100644 index 1fc032c0..00000000 --- a/avow-protocol/CLOUDFLARE-MANUAL-SETUP.md +++ /dev/null @@ -1,500 +0,0 @@ -# SPDX-License-Identifier: CC-BY-SA-4.0 -# Cloudflare Manual Setup - Detailed Step-by-Step Instructions - -Complete visual guide for deploying AVOW Protocol to Cloudflare via dashboard. - -## Table of Contents - -1. [Prerequisites](#prerequisites) -2. [Part 1: Cloudflare Pages Setup](#part-1-cloudflare-pages-setup) -3. [Part 2: DNS Configuration](#part-2-dns-configuration) -4. [Part 3: Security Configuration](#part-3-security-configuration) -5. [Part 4: Zero Trust Setup](#part-4-zero-trust-setup) -6. [Part 5: Testing & Verification](#part-5-testing--verification) - ---- - -## Prerequisites - -- [ ] Cloudflare account (free or paid) -- [ ] Domain `avow-protocol.org` added to Cloudflare -- [ ] GitHub repository `hyperpolymath/avow-protocol` accessible -- [ ] Repository pushed to main branch - ---- - -## Part 1: Cloudflare Pages Setup - -### Step 1.1: Access Cloudflare Pages - -1. Log in to [Cloudflare Dashboard](https://dash.cloudflare.com) -2. Click on your account in the top left -3. In the left sidebar, click **"Workers & Pages"** -4. Click **"Create application"** button -5. Select **"Pages"** tab -6. Click **"Connect to Git"** - -### Step 1.2: Connect GitHub Repository - -1. Click **"Connect GitHub"** (or "Connect another repository" if already connected) -2. Authorize Cloudflare to access your repositories -3. In the repository list, find and select: **`hyperpolymath/avow-protocol`** -4. Click **"Begin setup"** - -### Step 1.3: Configure Build Settings - -On the "Set up builds and deployments" page: - -**Framework preset:** None (or Custom) - -**Build configuration:** -- Build command: `deno task build` -- Build output directory: `.` (just a dot) -- Root directory: `/` (leave as default) - -**Environment variables:** (click "Add variable" if needed) -- None required for initial deployment - -**Branch deployment:** -- Production branch: `main` -- Preview branch: Leave enabled for pull requests - -Click **"Save and Deploy"** - -### Step 1.4: Wait for Initial Build - -- Watch the build logs in real-time -- Initial build takes 2-5 minutes -- Look for: `✅ Success! Deployed to https://avow-protocol-xxx.pages.dev` -- Copy the `.pages.dev` URL for testing - -**If build fails:** -- Check that all dependencies are in `package.json` -- Verify `deno.json` has correct build task -- Check build logs for specific errors - -### Step 1.5: Verify Initial Deployment - -1. Click the `.pages.dev` URL from build logs -2. Verify the site loads correctly -3. Check browser console for any errors (F12 → Console) -4. Test navigation between pages - ---- - -## Part 2: DNS Configuration - -### Step 2.1: Access DNS Settings - -1. In Cloudflare Dashboard, click on **`avow-protocol.org`** domain -2. Click **"DNS"** in the left sidebar -3. You'll see the DNS records table - -### Step 2.2: Import DNS Zone (Recommended) - -**Option A: Bulk Import** - -1. Click **"Advanced"** at top right -2. Click **"Import and export"** -3. Click **"Import DNS records"** -4. Copy contents from `cloudflare-dns-zone.txt` -5. Paste into the text box -6. Click **"Preview records"** -7. Review the records to be imported -8. Click **"Import"** - -**Option B: Manual Entry** (if import fails) - -Add these critical records manually: - -#### Root Domain Records - -| Type | Name | Content | Proxy | TTL | -|------|------|---------|-------|-----| -| A | @ | 192.0.2.1 | ✅ Proxied | Auto | -| AAAA | @ | 2001:db8::1 | ✅ Proxied | Auto | -| A | www | 192.0.2.1 | ✅ Proxied | Auto | -| AAAA | www | 2001:db8::1 | ✅ Proxied | Auto | - -**⚠️ Update IPs:** Replace `192.0.2.1` and `2001:db8::1` with your actual IPs (or leave if using Cloudflare Pages) - -#### GitHub Pages CNAME (if using GitHub Pages) - -| Type | Name | Content | Proxy | TTL | -|------|------|---------|-------|-----| -| CNAME | gh-pages | hyperpolymath.github.io | ❌ DNS only | Auto | - -#### Security Records - -| Type | Name | Content | -|------|------|---------| -| CAA | @ | `0 issue "letsencrypt.org"` | -| CAA | @ | `0 issue "digicert.com"` | -| CAA | @ | `0 iodef "mailto:j.d.a.jewell@open.ac.uk"` | -| TXT | @ | `v=spf1 include:_spf.github.com ~all` | -| TXT | @ | `github-pages-challenge-hyperpolymath=avow-protocol-verification` | - -#### Mail Security (Optional) - -| Type | Name | Content | -|------|------|---------| -| TXT | _dmarc | `v=DMARC1; p=reject; rua=mailto:j.d.a.jewell@open.ac.uk` | -| MX | @ | `10 mail.avow-protocol.org` | - -### Step 2.3: Configure Custom Domain for Pages - -1. Go back to **Workers & Pages** → **avow-protocol** project -2. Click **"Custom domains"** tab -3. Click **"Set up a custom domain"** -4. Enter: `avow-protocol.org` -5. Click **"Continue"** -6. Cloudflare will automatically create DNS records -7. Wait for "Active" status (1-5 minutes) -8. Repeat for `www.avow-protocol.org` - -### Step 2.4: Enable DNSSEC - -1. In domain settings, click **"DNS"** -2. Scroll to **"DNSSEC"** section -3. Click **"Enable DNSSEC"** -4. Copy the DS record information -5. Add DS record to your domain registrar (if required) - ---- - -## Part 3: Security Configuration - -### Step 3.1: Configure Security Headers - -1. In domain overview, click **"Rules"** in left sidebar -2. Click **"Transform Rules"** -3. Click **"Create rule"** -4. Rule name: `AVOW Security Headers` - -**When incoming requests match:** -- Select: "All incoming requests" - -**Then:** -- Click "Set static" → "Response header" -- Add these headers one by one: - -| Header | Value | -|--------|-------| -| Strict-Transport-Security | `max-age=63072000; includeSubDomains; preload` | -| X-Content-Type-Options | `nosniff` | -| X-Frame-Options | `DENY` | -| X-XSS-Protection | `1; mode=block` | -| Content-Security-Policy | `default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'` | -| Referrer-Policy | `strict-origin-when-cross-origin` | -| Permissions-Policy | `geolocation=(), microphone=(), camera=()` | - -5. Click **"Deploy"** - -### Step 3.2: Configure WAF Rules - -1. In left sidebar, click **"Security"** → **"WAF"** -2. Click **"Create rule"** - -**Rate Limiting - API Endpoints:** -- Rule name: `API Rate Limit` -- If: `URI Path contains "/api/"` -- Then: Rate limit -- Requests: 100 per minute -- Action: Block -- Duration: 600 seconds - -**Rate Limiting - General:** -- Rule name: `General Rate Limit` -- If: `All incoming requests` -- Then: Rate limit -- Requests: 1000 per minute -- Action: Challenge (CAPTCHA) - -3. Click **"Deploy"** - -### Step 3.3: Enable SSL/TLS - -1. Click **"SSL/TLS"** in left sidebar -2. Set encryption mode to: **"Full (strict)"** -3. Click **"Edge Certificates"** -4. Enable: - - ✅ Always Use HTTPS - - ✅ HTTP Strict Transport Security (HSTS) - - ✅ Minimum TLS Version: TLS 1.3 - - ✅ TLS 1.3 (Post-Quantum) - - ✅ Automatic HTTPS Rewrites - -### Step 3.4: Configure Firewall Rules - -1. Go to **Security** → **WAF** -2. Click **"Custom rules"** tab -3. Add these rules: - -**Block Bad Bots:** -``` -(cf.client.bot) and not (cf.verified_bot_category in {"Search Engine Crawler" "Monitoring & Analytics"}) -Action: Block -``` - -**Require Valid Referer for POST:** -``` -(http.request.method eq "POST") and not (http.referer contains "avow-protocol.org") -Action: Block -``` - ---- - -## Part 4: Zero Trust Setup - -### Step 4.1: Create Cloudflare Tunnel - -1. In Cloudflare Dashboard, go to **Zero Trust** -2. Click **"Networks"** → **"Tunnels"** -3. Click **"Create a tunnel"** -4. Tunnel name: `avow-protocol-tunnel` -5. Click **"Save tunnel"** -6. Copy the tunnel token (you'll need this) - -### Step 4.2: Install cloudflared - -On your server: - -```bash -# Install cloudflared -curl -L https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64 -o cloudflared -chmod +x cloudflared -sudo mv cloudflared /usr/local/bin/ - -# Authenticate -cloudflared tunnel login - -# Create tunnel -cloudflared tunnel create avow-protocol - -# Configure tunnel -cat > ~/.cloudflared/config.yml < -credentials-file: /path/to/credentials.json - -ingress: - - hostname: dashboard.internal.avow-protocol.org - service: http://localhost:3000 - - hostname: ci.internal.avow-protocol.org - service: http://localhost:8080 - - service: http_status:404 -EOF - -# Run tunnel -cloudflared tunnel run avow-protocol -``` - -### Step 4.3: Add DNS Records for Tunnel - -In Cloudflare DNS, add: - -| Type | Name | Content | -|------|------|---------| -| CNAME | dashboard.internal | `.cfargotunnel.com` | -| CNAME | ci.internal | `.cfargotunnel.com` | - -### Step 4.4: Configure Access Policies - -1. Go to **Zero Trust** → **Access** → **Applications** -2. Click **"Add an application"** -3. Select **"Self-hosted"** -4. Application name: `AVOW Internal Dashboard` -5. Session duration: 24 hours -6. Application domain: `dashboard.internal.avow-protocol.org` -7. Click **"Next"** - -**Add policy:** -- Policy name: `AVOW Team Access` -- Action: Allow -- Include: Emails: `j.d.a.jewell@open.ac.uk` -- Click **"Next"** → **"Add application"** - ---- - -## Part 5: Testing & Verification - -### Step 5.1: Test HTTPS and SSL - -```bash -# Test SSL certificate -curl -I https://avow-protocol.org - -# Check for HSTS header -curl -I https://avow-protocol.org | grep -i strict - -# Test HTTP → HTTPS redirect -curl -I http://avow-protocol.org - -# Test TLS 1.3 -openssl s_client -connect avow-protocol.org:443 -tls1_3 -``` - -### Step 5.2: Test Security Headers - -```bash -# Check all security headers -curl -I https://avow-protocol.org | grep -E "(X-|Content-Security|Strict-Transport)" -``` - -Expected headers: -- ✅ Strict-Transport-Security -- ✅ X-Content-Type-Options: nosniff -- ✅ X-Frame-Options: DENY -- ✅ Content-Security-Policy - -### Step 5.3: Test DNS Records - -```bash -# Test DNSSEC -dig +dnssec avow-protocol.org - -# Test CAA records -dig CAA avow-protocol.org - -# Test SPF -dig TXT avow-protocol.org | grep spf -``` - -### Step 5.4: Test Performance - -1. **Lighthouse Audit:** - - Open Chrome DevTools (F12) - - Click "Lighthouse" tab - - Click "Generate report" - - Target scores: 95+ for all categories - -2. **WebPageTest:** - - Go to https://www.webpagetest.org - - Enter: `https://avow-protocol.org` - - Run test - - Check CDN performance - -3. **SSL Labs:** - - Go to https://www.ssllabs.com/ssltest/ - - Enter: `avow-protocol.org` - - Target grade: A+ - -### Step 5.5: Functional Testing - -Manual testing checklist: - -- [ ] Home page loads correctly -- [ ] All navigation links work -- [ ] Interactive demo functions -- [ ] Forms submit properly -- [ ] No console errors (F12 → Console) -- [ ] Mobile responsive (F12 → Device toolbar) -- [ ] All assets load (images, CSS, JS) -- [ ] No mixed content warnings - ---- - -## Troubleshooting - -### DNS Not Propagating - -```bash -# Check current DNS -dig avow-protocol.org - -# Flush local DNS cache (Linux) -sudo systemctl restart systemd-resolved - -# Or (macOS) -sudo dscacheutil -flushcache -``` - -### SSL Certificate Issues - -1. Check Cloudflare SSL mode: must be "Full (strict)" -2. Verify origin certificate on server -3. Wait 5-10 minutes for certificate provisioning -4. Clear browser cache and cookies - -### Build Failures - -1. Check build logs in Pages dashboard -2. Verify `deno.json` build command -3. Test build locally: `deno task build` -4. Check for missing dependencies in `package.json` - -### Rate Limiting Too Aggressive - -1. Go to Security → WAF → Custom rules -2. Adjust rate limits: - - Increase requests per minute - - Change action to "Challenge" instead of "Block" - ---- - -## Post-Deployment Checklist - -- [ ] Custom domain configured and active -- [ ] DNS records imported and verified -- [ ] DNSSEC enabled -- [ ] SSL/TLS set to Full (strict) -- [ ] Security headers configured -- [ ] WAF rules deployed -- [ ] Rate limiting configured -- [ ] Zero Trust tunnel created (optional) -- [ ] Access policies configured (optional) -- [ ] All tests passing -- [ ] Lighthouse score 95+ -- [ ] SSL Labs grade A+ -- [ ] No console errors -- [ ] Mobile responsive verified - ---- - -## Monitoring & Maintenance - -### Daily - -- Check Cloudflare Analytics for traffic patterns -- Review Security Events for blocked requests -- Monitor error rates in Real-time logs - -### Weekly - -- Review WAF rule effectiveness -- Check certificate expiration dates (auto-renewed) -- Update DNS records if IPs changed - -### Monthly - -- Run Lighthouse audit -- Run SSL Labs test -- Update security headers if needed -- Review Zero Trust policies - ---- - -## Support - -**Documentation:** -- Cloudflare Pages: https://developers.cloudflare.com/pages/ -- Cloudflare DNS: https://developers.cloudflare.com/dns/ -- Cloudflare Tunnel: https://developers.cloudflare.com/cloudflare-one/ - -**Contact:** -- Jonathan D.A. Jewell: j.d.a.jewell@open.ac.uk -- GitHub Issues: https://github.com/hyperpolymath/avow-protocol/issues - ---- - -## Complete! 🎉 - -Your AVOW Protocol site is now deployed with: -- ✅ Global CDN (Cloudflare) -- ✅ Post-quantum TLS 1.3 -- ✅ DNSSEC enabled -- ✅ Security headers configured -- ✅ WAF protection active -- ✅ Rate limiting enabled -- ✅ Zero Trust ready (optional) - -Visit: https://avow-protocol.org diff --git a/avow-protocol/CLOUDFLARE-SETUP.md b/avow-protocol/CLOUDFLARE-SETUP.md deleted file mode 100644 index 3b3622f3..00000000 --- a/avow-protocol/CLOUDFLARE-SETUP.md +++ /dev/null @@ -1,208 +0,0 @@ -# SPDX-License-Identifier: CC-BY-SA-4.0 -# Cloudflare Setup Guide for avow-protocol.org - -## Prerequisites - -- Cloudflare account with avow-protocol.org domain -- GitHub repository: hyperpolymath/avow-protocol -- Cloudflare API credentials - -## Step 1: DNS Configuration - -1. Import DNS zone file: - ```bash - # Review the zone file - cat cloudflare-dns-zone.txt - - # Apply via Cloudflare Dashboard or API - ``` - -2. Update placeholder values: - - Replace `192.0.2.1` with actual origin IP - - Replace `2001:db8::1` with actual IPv6 - - Update `tunnel-id` with your Cloudflare Tunnel ID - - Update SSHFP fingerprints with actual SSH keys - - Update TLSA records with actual certificate hashes - -## Step 2: GitHub Pages Setup - -1. In GitHub repository settings: - - Enable GitHub Pages from `main` branch - - Set custom domain: `avow-protocol.org` - - Wait for GitHub verification - -2. Add GitHub verification TXT record: - ``` - github-pages-challenge-hyperpolymath=avow-protocol-verification - ``` - -## Step 3: Cloudflare Pages Setup - -Alternative to GitHub Pages for better integration: - -1. Connect repository to Cloudflare Pages: - - Build command: `deno task build` - - Output directory: `.` (root) - - Environment variables: None required - -2. Configure custom domain: - - Add `avow-protocol.org` as custom domain - - Enable automatic HTTPS - -## Step 4: Security Headers - -Add security headers via Cloudflare Transform Rules: - -```http -Strict-Transport-Security: max-age=63072000; includeSubDomains; preload -X-Content-Type-Options: nosniff -X-Frame-Options: DENY -X-XSS-Protection: 1; mode=block -Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' -Referrer-Policy: strict-origin-when-cross-origin -Permissions-Policy: geolocation=(), microphone=(), camera=() -``` - -## Step 5: Zero Trust/SDP Configuration - -For internal services (dashboard.internal, ci.internal, db.internal): - -1. Create Cloudflare Tunnel: - ```bash - cloudflared tunnel create avow-protocol - ``` - -2. Configure tunnel routes: - ```yaml - # config.yml - tunnel: - credentials-file: /path/to/credentials.json - - ingress: - - hostname: dashboard.internal.avow-protocol.org - service: http://localhost:3000 - - hostname: ci.internal.avow-protocol.org - service: http://localhost:8080 - - hostname: db.internal.avow-protocol.org - service: tcp://localhost:5432 - - service: http_status:404 - ``` - -3. Set up Cloudflare Access: - - Create Access policy for internal subdomains - - Configure authentication (SAML, GitHub OAuth, etc.) - - Enforce MFA - -## Step 6: WAF Rules - -Configure Web Application Firewall rules: - -1. Rate limiting: - - API endpoints: 100 requests/minute per IP - - General pages: 1000 requests/minute per IP - -2. Custom rules: - - Block known bad user agents - - Require valid Referer for POST requests - - Block requests with suspicious patterns - -## Step 7: WASM Proxy - -Deploy WASM-based request filtering: - -1. Create Workers script: - ```javascript - // wasm-proxy.js - export default { - async fetch(request, env) { - // Load AVOW verification WASM module - const wasmModule = await WebAssembly.instantiate(env.AVOW_WASM); - - // Validate request using WASM - const isValid = await wasmModule.exports.validateRequest(request); - - if (!isValid) { - return new Response('Invalid request', { status: 403 }); - } - - return await fetch(request); - } - }; - ``` - -2. Deploy Worker: - ```bash - wrangler deploy - ``` - -3. Configure route: - - Route: `wasm.avow-protocol.org/*` - - Worker: `avow-wasm-proxy` - -## Step 8: Post-Quantum TLS - -Cloudflare automatically supports post-quantum key exchange (Kyber) for TLS 1.3. - -Verify configuration: -```bash -curl -I --tlsv1.3 https://avow-protocol.org -``` - -Look for: `CF-QUIC` and `Alt-Svc: h3=":443"` headers - -## Step 9: Monitoring and Alerts - -1. Enable Cloudflare Analytics -2. Set up alerts for: - - High error rates (4xx, 5xx) - - DDoS attacks - - Certificate expiration - - DNS changes - -## Step 10: Testing - -Test all security configurations: - -```bash -# Test HTTPS redirect -curl -I http://avow-protocol.org - -# Test security headers -curl -I https://avow-protocol.org - -# Test DNSSEC -dig +dnssec avow-protocol.org - -# Test CAA records -dig CAA avow-protocol.org - -# Test TLSA records -dig TLSA _443._tcp.avow-protocol.org - -# Test MTA-STS -dig TXT _mta-sts.avow-protocol.org -``` - -## Maintenance - -- Update DNS zone serial on changes: `YYYYMMDDNN` format -- Rotate TLSA records 30 days before certificate renewal -- Review WAF rules quarterly -- Update security requirements as standards evolve - -## References - -- [Cloudflare DNS](https://developers.cloudflare.com/dns/) -- [Cloudflare Pages](https://developers.cloudflare.com/pages/) -- [Cloudflare Tunnel](https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/) -- [Cloudflare Workers](https://developers.cloudflare.com/workers/) -- [Post-Quantum Cryptography](https://blog.cloudflare.com/post-quantum-tls/) - -## Security Requirements - -See `security-requirements.scm` for detailed cryptographic requirements including: -- Dilithium5-AES signatures -- Kyber-1024 key exchange -- SHAKE3-512 hashing -- XChaCha20-Poly1305 encryption -- Idris2 formal verification diff --git a/avow-protocol/CNAME b/avow-protocol/CNAME deleted file mode 100644 index dc26d7d6..00000000 --- a/avow-protocol/CNAME +++ /dev/null @@ -1 +0,0 @@ -stamp-protocol.org diff --git a/avow-protocol/CODE_OF_CONDUCT.md b/avow-protocol/CODE_OF_CONDUCT.md deleted file mode 100644 index 98dab488..00000000 --- a/avow-protocol/CODE_OF_CONDUCT.md +++ /dev/null @@ -1,32 +0,0 @@ -# Stamp Protocol Code of Conduct - -Like the technical community as a whole, the Stamp Protocol team and community is made up of a mixture of professionals and volunteers from all over the world, working on every aspect of the mission - including mentorship, teaching, and connecting people. - -Diversity is one of our huge strengths, but it can also lead to communication issues and unhappiness. To that end, we have a few ground rules that we ask people to adhere to. This code applies equally to founders, mentors and those seeking help and guidance. - -This isn’t an exhaustive list of things that you can’t do. Rather, take it in the spirit in which it’s intended - a guide to make it easier to enrich all of us and the technical communities in which we participate. - -This code of conduct applies to all spaces managed by the Stamp Protocol project or . This includes IRC, the mailing lists, the issue tracker, DSF events, and any other forums created by the project team which the community uses for communication. In addition, violations of this code outside these spaces may affect a person's ability to participate within them. - -If you believe someone is violating the code of conduct, we ask that you report it by emailing [](mailto:). For more details please see our - -- **Be friendly and patient.** -- **Be welcoming.** We strive to be a community that welcomes and supports people of all backgrounds and identities. This includes, but is not limited to members of any race, ethnicity, culture, national origin, colour, immigration status, social and economic class, educational level, sex, sexual orientation, gender identity and expression, age, size, family status, political belief, religion, and mental and physical ability. -- **Be considerate.** Your work will be used by other people, and you in turn will depend on the work of others. Any decision you take will affect users and colleagues, and you should take those consequences into account when making decisions. Remember that we're a world-wide community, so you might not be communicating in someone else's primary language. -- **Be respectful.** Not all of us will agree all the time, but disagreement is no excuse for poor behavior and poor manners. We might all experience some frustration now and then, but we cannot allow that frustration to turn into a personal attack. It’s important to remember that a community where people feel uncomfortable or threatened is not a productive one. Members of the Stamp Protocol community should be respectful when dealing with other members as well as with people outside the Stamp Protocol community. -- **Be careful in the words that you choose.** We are a community of professionals, and we conduct ourselves professionally. Be kind to others. Do not insult or put down other participants. Harassment and other exclusionary behavior aren't acceptable. This includes, but is not limited to: - - Violent threats or language directed against another person. - - Discriminatory jokes and language. - - Posting sexually explicit or violent material. - - Posting (or threatening to post) other people's personally identifying information ("doxing"). - - Personal insults, especially those using racist or sexist terms. - - Unwelcome sexual attention. - - Advocating for, or encouraging, any of the above behavior. - - Repeated harassment of others. In general, if someone asks you to stop, then stop. -- **When we disagree, try to understand why.** Disagreements, both social and technical, happen all the time and Stamp Protocol is no exception. It is important that we resolve disagreements and differing views constructively. Remember that we’re different. The strength of Stamp Protocol comes from its varied community, people from a wide range of backgrounds. Different people have different perspectives on issues. Being unable to understand why someone holds a viewpoint doesn’t mean that they’re wrong. Don’t forget that it is human to err and blaming each other doesn’t get us anywhere. Instead, focus on helping to resolve issues and learning from mistakes. - -Original text courtesy of the [Speak Up! project](http://web.archive.org/web/20141109123859/http://speakup.io/coc.html). - -## Questions? - -If you have questions, please see . If that doesn't answer your questions, feel free to [contact us](mailto:). diff --git a/avow-protocol/CONTRIBUTING.md b/avow-protocol/CONTRIBUTING.md deleted file mode 100644 index 8c9d97b7..00000000 --- a/avow-protocol/CONTRIBUTING.md +++ /dev/null @@ -1,116 +0,0 @@ -# Clone the repository -git clone https://github.com/hyperpolymath/standards.git -cd standards - -# Using Nix (recommended for reproducibility) -nix develop - -# Or using toolbox/distrobox -toolbox create standards-dev -toolbox enter standards-dev -# Install dependencies manually - -# Verify setup -just check # or: cargo check / mix compile / etc. -just test # Run test suite -``` - -### Repository Structure -``` -standards/ -├── src/ # Source code (Perimeter 1-2) -├── lib/ # Library code (Perimeter 1-2) -├── extensions/ # Extensions (Perimeter 2) -├── plugins/ # Plugins (Perimeter 2) -├── tools/ # Tooling (Perimeter 2) -├── docs/ # Documentation (Perimeter 3) -│ ├── architecture/ # ADRs, specs (Perimeter 2) -│ └── proposals/ # RFCs (Perimeter 3) -├── examples/ # Examples (Perimeter 3) -├── spec/ # Spec tests (Perimeter 3) -├── tests/ # Test suite (Perimeter 2-3) -├── .well-known/ # Protocol files (Perimeter 1-3) -├── .github/ # GitHub config (Perimeter 1) -│ ├── ISSUE_TEMPLATE/ -│ └── workflows/ -├── CHANGELOG.md -├── CODE_OF_CONDUCT.md -├── CONTRIBUTING.md # This file -├── GOVERNANCE.md -├── LICENSE -├── MAINTAINERS.md -├── README.adoc -├── SECURITY.md -├── flake.nix # Nix flake (Perimeter 1) -└── Justfile # Task runner (Perimeter 1) -``` - ---- - -## How to Contribute - -### Reporting Bugs - -**Before reporting**: -1. Search existing issues -2. Check if it's already fixed in `main` -3. Determine which perimeter the bug affects - -**When reporting**: - -Use the [bug report template](.github/ISSUE_TEMPLATE/bug_report.md) and include: - -- Clear, descriptive title -- Environment details (OS, versions, toolchain) -- Steps to reproduce -- Expected vs actual behaviour -- Logs, screenshots, or minimal reproduction - -### Suggesting Features - -**Before suggesting**: -1. Check the [roadmap](ROADMAP.md) if available -2. Search existing issues and discussions -3. Consider which perimeter the feature belongs to - -**When suggesting**: - -Use the [feature request template](.github/ISSUE_TEMPLATE/feature_request.md) and include: - -- Problem statement (what pain point does this solve?) -- Proposed solution -- Alternatives considered -- Which perimeter this affects - -### Your First Contribution - -Look for issues labelled: - -- [`good first issue`](https://github.com/hyperpolymath/standards/labels/good%20first%20issue) — Simple Perimeter 3 tasks -- [`help wanted`](https://github.com/hyperpolymath/standards/labels/help%20wanted) — Community help needed -- [`documentation`](https://github.com/hyperpolymath/standards/labels/documentation) — Docs improvements -- [`perimeter-3`](https://github.com/hyperpolymath/standards/labels/perimeter-3) — Community sandbox scope - ---- - -## Development Workflow - -### Branch Naming -``` -docs/short-description # Documentation (P3) -test/what-added # Test additions (P3) -feat/short-description # New features (P2) -fix/issue-number-description # Bug fixes (P2) -refactor/what-changed # Code improvements (P2) -security/what-fixed # Security fixes (P1-2) -``` - -### Commit Messages - -We follow [Conventional Commits](https://www.conventionalcommits.org/): -``` -(): - -[optional body] - -[optional footer] diff --git a/avow-protocol/DEPLOY.md b/avow-protocol/DEPLOY.md deleted file mode 100644 index 195ad5d5..00000000 --- a/avow-protocol/DEPLOY.md +++ /dev/null @@ -1,123 +0,0 @@ -# Deploy STAMP Protocol Website to Cloudflare Pages - -## ✅ What's Ready - -- Professional landing page -- Mobile responsive -- SEO optimized -- Links to your Telegram bot (@stamp_demo_bot) -- Ready to deploy - -## 🚀 Deploy Now (5 Minutes) - -### Option 1: GitHub + Cloudflare Pages (Recommended) - -**1. Push to GitHub:** -```bash -cd ~/Documents/hyperpolymath-repos/stamp-protocol - -# Create GitHub repo -gh repo create stamp-protocol --public --source=. --remote=origin --push - -# Or manually: -git remote add origin https://github.com/hyperpolymath/stamp-protocol.git -git push -u origin main -``` - -**2. Connect to Cloudflare Pages:** - -1. Go to https://dash.cloudflare.com/ -2. Click **Pages** in the sidebar -3. Click **Create a project** -4. Click **Connect to Git** -5. Authorize GitHub -6. Select **stamp-protocol** repository -7. Configure build settings: - - **Project name:** stamp-protocol - - **Production branch:** main - - **Framework preset:** None - - **Build command:** (leave empty) - - **Build output directory:** `/` -8. Click **Save and Deploy** - -**3. Configure Custom Domain:** - -1. After deploy, go to **Custom domains** -2. Click **Set up a custom domain** -3. Enter: `stamp-protocol.org` -4. Cloudflare will auto-configure DNS -5. SSL certificate issued automatically - -**Done!** Your site will be live at https://stamp-protocol.org in ~2 minutes. - -### Option 2: Direct Upload (Faster for Testing) - -```bash -# Install Wrangler -npm install -g wrangler - -# Login -wrangler login - -# Deploy -cd ~/Documents/hyperpolymath-repos/stamp-protocol -wrangler pages deploy . --project-name=stamp-protocol -``` - -Then configure domain in Cloudflare dashboard. - -## 🔄 Updates - -After first deploy, just push to GitHub: -```bash -git add . -git commit -m "Update content" -git push -``` - -Cloudflare automatically rebuilds and deploys in ~30 seconds. - -## 🌐 Custom Domain Setup - -If you need to manually configure DNS: - -1. Go to **DNS** in Cloudflare dashboard -2. Add CNAME record: - - **Name:** `@` - - **Target:** `stamp-protocol.pages.dev` - - **Proxy status:** Proxied (orange cloud) -3. Save - -SSL certificate will be issued automatically. - -## ✅ Verify Deployment - -Visit: https://stamp-protocol.org - -Check: -- [ ] Homepage loads -- [ ] Mobile responsive -- [ ] Telegram bot link works -- [ ] All sections present -- [ ] SSL certificate valid - -## 📊 Add Analytics (Optional) - -1. Go to Cloudflare Pages dashboard -2. Click **Web Analytics** -3. Copy the beacon code -4. Add to `index.html` before `` -5. Push update - -## 🎯 What's on the Site - -- **Hero:** Value proposition + CTA to Telegram bot -- **Problem:** Email spam, social bots, platform costs -- **Solution:** Dependent types + formal verification -- **How it works:** Technical comparison -- **Demo:** Telegram bot walkthrough -- **Use cases:** Email, dating, social media, business -- **Stats:** Impact metrics -- **Footer:** Links and contact - -Ready to show investors and users! diff --git a/avow-protocol/DEPLOYMENT-STATUS-ALL-PROJECTS.md b/avow-protocol/DEPLOYMENT-STATUS-ALL-PROJECTS.md deleted file mode 100644 index 504f9764..00000000 --- a/avow-protocol/DEPLOYMENT-STATUS-ALL-PROJECTS.md +++ /dev/null @@ -1,184 +0,0 @@ -# SPDX-License-Identifier: CC-BY-SA-4.0 -# Multi-Project Cloudflare Pages Deployment Status - -**Date:** 2026-02-04 -**Total Projects:** 10 -**Method:** Deno + Wrangler CLI + Direct API - ---- - -## ✅ Successfully Deployed Projects - -All 10 projects have been deployed to Cloudflare Pages: - -| Project | Production URL | Custom Domain | Status | Files | -|---------|----------------|---------------|--------|-------| -| oblibeny | https://oblibeny.pages.dev | oblibeny.net | Pending DNS | 307 | -| affinescript | https://affinescript.pages.dev | affinescript.dev | Pending DNS | 1,066 | -| error-lang | https://error-lang.pages.dev | error-lang.org | Pending DNS | 129 | -| reposystem | https://reposystem.pages.dev | reposystem.dev | Pending DNS | 135 | -| my-lang | https://my-lang.pages.dev | my-lang.net | Pending DNS | 1,874 | -| betlang | https://betlang.pages.dev | betlang.org | Pending DNS | 4 | -| verisimdb | https://verisimdb.pages.dev | verisimdb.org | Pending DNS | 30 | -| anvomidav | https://anvomidav.pages.dev | anvomidav.org | Pending DNS | 18 | -| ephapax | https://ephapax.pages.dev | ephapax.org | Pending DNS | 31 | -| eclexia | https://eclexia.pages.dev | eclexia.org | Pending DNS | 12 | - ---- - -## 🚀 Deployment Details - -### Projects with Homepage - -- **betlang**: Deployed from `homepage/` directory (has index.html) - -### Projects with Documentation - -Deployed from `docs/` directory: -- verisimdb -- anvomidav -- ephapax -- eclexia - -### Full Repository Deploys - -Deployed entire repository (excluding build artifacts): -- oblibeny (307 files) -- affinescript (1,066 files) -- error-lang (129 files) -- reposystem (135 files) -- my-lang (1,874 files) - ---- - -## ⚠️ Issues Resolved - -### Large File Size Errors - -Several projects initially failed due to Rust build artifacts exceeding Cloudflare Pages' 25MB file size limit: -- verisimdb (103MB .rlib file) -- betlang (57.4MB LSP binary) -- anvomidav (33.9MB LSP binary) -- ephapax (28.5MB binary) -- eclexia (69.3MB LSP binary) - -**Solution:** Deployed from web-specific directories (`homepage/` or `docs/`) instead of entire repository. - ---- - -## 📋 Custom Domain Status - -All custom domains are configured but **pending DNS verification**. - -### DNS Configuration Needed - -None of these domains have DNS zones in Cloudflare. Two options: - -#### Option 1: Add to Cloudflare DNS (Recommended) - -For each domain, add a DNS zone in Cloudflare and set nameservers at your registrar. - -#### Option 2: Configure at Current Registrar - -Add CNAME records at your current DNS provider: - -``` -# For each domain: -@ (root) CNAME .pages.dev -www CNAME .pages.dev -``` - -**Examples:** -- `affinescript.dev` → `affinescript.pages.dev` -- `anvomidav.org` → `anvomidav.pages.dev` -- `betlang.org` → `betlang.pages.dev` -- etc. - ---- - -## ✅ What's Working Now - -### .pages.dev URLs - -All projects are accessible via their .pages.dev URLs: -- ✅ https://oblibeny.pages.dev -- ✅ https://affinescript.pages.dev -- ✅ https://error-lang.pages.dev -- ✅ https://reposystem.pages.dev -- ✅ https://my-lang.pages.dev -- ✅ https://betlang.pages.dev -- ✅ https://verisimdb.pages.dev -- ✅ https://anvomidav.pages.dev -- ✅ https://ephapax.pages.dev -- ✅ https://eclexia.pages.dev - -**Note:** Some may show 404 if they lack an `index.html` in the root. Deployment-specific URLs (with hashes) should work. - -### Features Enabled - -All projects have: -- ✅ Global CDN (Cloudflare's 300+ data centers) -- ✅ Auto SSL/TLS with TLS 1.3 -- ✅ Post-Quantum TLS (Kyber-1024) -- ✅ DDoS Protection -- ✅ Unlimited bandwidth -- ✅ Auto-deploy capability - ---- - -## 📊 Next Steps - -### Immediate Actions - -1. **Configure DNS** for custom domains (see options above) -2. **Wait 1-5 minutes** for DNS propagation -3. **Verify** custom domains are accessible - -### For Projects Without index.html - -Several projects (docs-only deployments) may need: -- Create `index.html` in the deployed directory -- Or configure redirect rules in Pages - -### Build Configuration (Optional) - -Projects can be configured with: -- Build commands -- Environment variables -- Build notifications -- Branch previews - ---- - -## 🎯 Summary - -**Status:** All 10 projects successfully deployed to Cloudflare Pages -**Blocker:** DNS configuration needed for custom domains -**ETA:** 1-5 minutes after DNS is configured - -**Total files deployed:** 3,614 files across 10 projects -**Total time:** ~15 minutes - ---- - -## Verification Commands - -```bash -# Check custom domain status -for domain in affinescript.dev anvomidav.org betlang.org eclexia.org ephapax.org error-lang.org my-lang.net oblibeny.net reposystem.dev verisimdb.org; do - curl -I "https://$domain" 2>&1 | grep -E "HTTP|curl:" -done - -# Check .pages.dev URLs -for project in oblibeny affinescript error-lang reposystem my-lang betlang verisimdb anvomidav ephapax eclexia; do - curl -I "https://${project}.pages.dev" 2>&1 | grep "HTTP" -done -``` - ---- - -## Support - -- **Cloudflare Dashboard:** https://dash.cloudflare.com/pages -- **DNS Management:** https://dash.cloudflare.com/dns -- **Wrangler Docs:** https://developers.cloudflare.com/workers/wrangler/ diff --git a/avow-protocol/DEPLOYMENT-SUCCESS.md b/avow-protocol/DEPLOYMENT-SUCCESS.md deleted file mode 100644 index 9a8f1b84..00000000 --- a/avow-protocol/DEPLOYMENT-SUCCESS.md +++ /dev/null @@ -1,199 +0,0 @@ -# SPDX-License-Identifier: CC-BY-SA-4.0 -# Cloudflare Pages Deployment - Success Report - -**Date:** 2026-02-04 -**Deployed by:** Claude Sonnet 4.5 -**Method:** Deno + Wrangler CLI - ---- - -## Deployed Sites - -### 1. AVOW Protocol -- **Project:** avow-protocol -- **URL:** https://ca8ba13d.avow-protocol.pages.dev -- **Production URL:** https://avow-protocol.pages.dev -- **Custom Domain:** avow-protocol.org (pending DNS) -- **Files:** 141 uploaded -- **Status:** ✅ Live - -### 2. A2ML -- **Project:** a2ml -- **URL:** https://8f8410aa.a2ml.pages.dev -- **Production URL:** https://a2ml.pages.dev -- **Files:** 441 uploaded -- **Status:** ✅ Live - -### 3. K9-SVC -- **Project:** k9-svc -- **URL:** https://295504e4.k9-svc.pages.dev -- **Production URL:** https://k9-svc.pages.dev -- **Files:** 1280 uploaded -- **Status:** ✅ Live - ---- - -## Deployment Details - -### Configuration Used - -**API Authentication:** -- Cloudflare API Token (with Pages Edit permissions) -- Account ID: (private — see ~/.config/hyperpolymath/cloudflare.env) - -**Deployment Method:** -```bash -deno run -A npm:wrangler pages deploy . --project-name= --branch=main -``` - -### Auto-Deploy Setup - -Each project is now configured for automatic deployment: -1. Push to `main` branch triggers build -2. Cloudflare builds and deploys automatically -3. New URL generated for each deployment -4. Production URL remains stable - ---- - -## Features Enabled - -✅ **Global CDN** - Cloudflare's 300+ data centers -✅ **Auto SSL/TLS** - Automatic HTTPS with TLS 1.3 -✅ **Post-Quantum TLS** - Kyber-1024 key exchange -✅ **DDoS Protection** - Cloudflare's network protection -✅ **Auto-Deploy** - Push to deploy workflow -✅ **Build Cache** - Faster subsequent builds -✅ **Unlimited Bandwidth** - Free tier includes unlimited - ---- - -## Next Steps - -### For Each Site: - -1. **Add Custom Domains** - - Go to project → Custom domains - - Add domain (e.g., avow-protocol.org) - - Cloudflare auto-configures DNS - -2. **Configure Security Headers** - - Use Transform Rules - - Add HSTS, CSP, X-Frame-Options, etc. - - See: CLOUDFLARE-MANUAL-SETUP.md - -3. **Set up WAF Rules** - - Rate limiting - - Bot protection - - Geo-blocking if needed - -4. **Enable Analytics** - - Web Analytics (privacy-friendly) - - Real-time logs - - Performance monitoring - -5. **Configure Build Settings** - - Build command (if needed) - - Environment variables - - Build notifications - ---- - -## Verification - -Test each deployment: - -```bash -# AVOW Protocol -curl -I https://ca8ba13d.avow-protocol.pages.dev - -# A2ML -curl -I https://8f8410aa.a2ml.pages.dev - -# K9-SVC -curl -I https://295504e4.k9-svc.pages.dev -``` - -All should return: -- Status: 200 OK -- Server: cloudflare -- CF-Ray: [unique ID] - ---- - -## Architecture Stack - -### AVOW Protocol -- **Frontend:** ReScript → JavaScript (ES6) -- **Build:** Deno + ReScript compiler -- **SSG:** casket-ssg (Haskell) -- **Router:** cadre-tea-router -- **State:** rescript-tea (The Elm Architecture) -- **Verification:** Idris2 + Zig FFI -- **Crypto:** Dilithium5, Kyber-1024, SHAKE3-512 - -### A2ML -- **Format:** A2ML markup language -- **Compiler:** ReScript-based -- **Output:** Static HTML/CSS/JS - -### K9-SVC -- **Type:** Service validation framework -- **Language:** Nickel configuration -- **Documentation:** AsciiDoc/Markdown - ---- - -## Costs - -**Current Plan:** Free Tier - -**Includes:** -- Unlimited requests -- Unlimited bandwidth -- Unlimited sites -- 500 builds/month -- 1 concurrent build - -**No charges for:** -- Static hosting -- SSL certificates -- DDoS protection -- CDN bandwidth - ---- - -## Monitoring - -**Cloudflare Dashboard:** -- https://dash.cloudflare.com/pages - -**Key Metrics:** -- Requests per second -- Bandwidth usage -- Error rates (4xx, 5xx) -- Cache hit ratio -- Build success/failure rate - ---- - -## Support & Documentation - -- **Cloudflare Pages Docs:** https://developers.cloudflare.com/pages/ -- **Wrangler CLI Docs:** https://developers.cloudflare.com/workers/wrangler/ -- **Status Page:** https://www.cloudflarestatus.com/ - ---- - -## Success! 🎉 - -All three sites are now live on Cloudflare's global network with: -- Post-quantum TLS encryption -- DDoS protection -- Auto-deploy from Git -- Unlimited bandwidth -- 100% uptime SLA - -**Total deployment time:** ~5 minutes -**Files deployed:** 1,862 total -**Global availability:** Immediate diff --git a/avow-protocol/LICENSE b/avow-protocol/LICENSE deleted file mode 100644 index ec540b34..00000000 --- a/avow-protocol/LICENSE +++ /dev/null @@ -1,153 +0,0 @@ -SPDX-License-Identifier: MPL-2.0 -SPDX-FileCopyrightText: 2024-2025 Palimpsest Stewardship Council - -================================================================================ -PALIMPSEST-MPL LICENSE VERSION 1.0 -================================================================================ - -File-level copyleft with ethical use and quantum-safe provenance - -Based on Mozilla Public License 2.0 - --------------------------------------------------------------------------------- -PREAMBLE --------------------------------------------------------------------------------- - -This License extends the Mozilla Public License 2.0 (MPL-2.0) with provisions -for ethical use, post-quantum cryptographic provenance, and emotional lineage -protection. The base MPL-2.0 terms apply except where explicitly modified by -the Exhibits below. - -Like a palimpsest manuscript where each layer builds upon what came before, -this license recognizes that creative works carry history, context, and meaning -that transcend mere code or text. - --------------------------------------------------------------------------------- -SECTION 1: BASE LICENSE --------------------------------------------------------------------------------- - -This License incorporates the full text of Mozilla Public License 2.0 by -reference. The complete MPL-2.0 text is available at: -https://www.mozilla.org/en-US/MPL/2.0/ - -All terms, conditions, and definitions from MPL-2.0 apply except where -explicitly modified by the Exhibits in this License. - --------------------------------------------------------------------------------- -SECTION 2: ADDITIONAL DEFINITIONS --------------------------------------------------------------------------------- - -2.1. "Emotional Lineage" - means the narrative, cultural, symbolic, and contextual meaning embedded - in Covered Software, including but not limited to: protest traditions, - cultural heritage, trauma narratives, and community stories. - -2.2. "Provenance Metadata" - means cryptographically signed attribution information attached to or - associated with Covered Software, including author identities, timestamps, - modification history, and lineage references. - -2.3. "Non-Interpretive System" - means any automated system that processes Covered Software without - preserving or considering its Emotional Lineage, including but not - limited to: AI training pipelines, content aggregators, and automated - summarization tools. - -2.4. "Quantum-Safe Signature" - means a cryptographic signature using algorithms resistant to attacks - by quantum computers, as specified in Exhibit B. - --------------------------------------------------------------------------------- -SECTION 3: ETHICAL USE REQUIREMENTS --------------------------------------------------------------------------------- - -In addition to the rights and obligations under MPL-2.0: - -3.1. Emotional Lineage Preservation - You must make reasonable efforts to preserve and communicate the - Emotional Lineage of Covered Software when distributing or creating - derivative works. This includes maintaining narrative context, cultural - attributions, and symbolic meaning where documented. - -3.2. Non-Interpretive System Notice - If You use Covered Software as input to a Non-Interpretive System, You - must: - (a) document such use in a publicly accessible manner; and - (b) not claim that outputs of such systems carry the Emotional Lineage - of the original work without explicit permission from Contributors. - -3.3. Ethical Use Declaration - Commercial use of Covered Software requires acknowledgment that You have - read and understood Exhibit A (Ethical Use Guidelines) and agree to act - in good faith accordance with its principles. - -See Exhibit A for complete Ethical Use Guidelines. - --------------------------------------------------------------------------------- -SECTION 4: PROVENANCE REQUIREMENTS --------------------------------------------------------------------------------- - -4.1. Metadata Preservation - You must not strip, alter, or obscure Provenance Metadata from Covered - Software except where technically necessary and with clear documentation - of any changes. - -4.2. Quantum-Safe Provenance (Optional) - Contributors may sign their Contributions using Quantum-Safe Signatures. - If Quantum-Safe Signatures are present, You must preserve them in all - distributions. - -4.3. Lineage Chain - When creating derivative works, You should extend the provenance chain - to include Your own contributions, maintaining cryptographic linkage to - prior Contributors where feasible. - -See Exhibit B for Quantum-Safe Provenance specifications. - --------------------------------------------------------------------------------- -SECTION 5: GOVERNANCE --------------------------------------------------------------------------------- - -5.1. Stewardship Council - This License is maintained by the Palimpsest Stewardship Council, which - may issue clarifications, interpretive guidance, and future versions. - -5.2. Version Selection - You may use Covered Software under this version of the License or any - later version published by the Palimpsest Stewardship Council. - -5.3. Dispute Resolution - Disputes regarding interpretation of Ethical Use Requirements (Section 3) - should first be submitted to the Palimpsest Stewardship Council for - non-binding guidance before pursuing legal remedies. - --------------------------------------------------------------------------------- -SECTION 6: COMPATIBILITY --------------------------------------------------------------------------------- - -6.1. MPL-2.0 Compatibility - Covered Software under this License may be combined with software under - MPL-2.0. The combined work must comply with both licenses. - -6.2. Secondary Licenses - The Secondary License provisions of MPL-2.0 Section 3.3 apply to this - License. - --------------------------------------------------------------------------------- -EXHIBITS --------------------------------------------------------------------------------- - -Exhibit A - Ethical Use Guidelines -Exhibit B - Quantum-Safe Provenance Specification - -See separate files: -- EXHIBIT-A-ETHICAL-USE.txt -- EXHIBIT-B-QUANTUM-SAFE.txt - --------------------------------------------------------------------------------- -END OF PALIMPSEST-MPL LICENSE VERSION 1.0 --------------------------------------------------------------------------------- - -For questions about this License: -- Repository: https://github.com/hyperpolymath/palimpsest-license -- Council: contact via repository Issues diff --git a/avow-protocol/MAINTAINERS.adoc b/avow-protocol/MAINTAINERS.adoc deleted file mode 100644 index 48d97817..00000000 --- a/avow-protocol/MAINTAINERS.adoc +++ /dev/null @@ -1,47 +0,0 @@ -// SPDX-License-Identifier: CC-BY-SA-4.0 -= Maintainers -:toc: preamble - -This document lists the maintainers of this project and their responsibilities. - -== Current Maintainers - -[cols="2,3,2",options="header"] -|=== -| Name | Role | Contact - -| Jonathan D.A. Jewell -| Lead Maintainer -| https://github.com/hyperpolymath[@hyperpolymath] -|=== - -== Responsibilities - -Maintainers are responsible for: - -* Reviewing and merging pull requests -* Triaging issues and feature requests -* Ensuring code quality and security standards -* Managing releases and versioning -* Upholding the project's code of conduct - -== Becoming a Maintainer - -Contributors who demonstrate: - -* Consistent, high-quality contributions -* Understanding of the project's goals and standards -* Constructive participation in discussions -* Commitment to the project's long-term health - -May be invited to become maintainers at the discretion of existing maintainers. - -== Decision Making - -* Routine decisions (bug fixes, minor improvements) can be made by any maintainer -* Significant changes require discussion and consensus among maintainers -* Breaking changes or major features should be discussed in issues before implementation - -== Contact - -For questions about project governance, open an issue or contact the maintainers listed above. diff --git a/avow-protocol/QUICK-DEPLOY.md b/avow-protocol/QUICK-DEPLOY.md deleted file mode 100644 index 84c86965..00000000 --- a/avow-protocol/QUICK-DEPLOY.md +++ /dev/null @@ -1,59 +0,0 @@ -# Quick Cloudflare Deployment (5 Minutes) - -## Step 1: Connect Repository (2 minutes) - -1. Go to: https://dash.cloudflare.com/pages -2. Click **"Create a project"** -3. Click **"Connect to Git"** -4. Select **"GitHub"** -5. Find and select: **`hyperpolymath/avow-protocol`** -6. Click **"Begin setup"** - -## Step 2: Configure Build (1 minute) - -**Build settings:** -- Framework preset: **None** -- Build command: **`deno task build`** -- Build output directory: **`.`** (just a dot) -- Root directory: **`/`** (leave as default) - -Click **"Save and Deploy"** - -## Step 3: Watch Build (2 minutes) - -- Build starts automatically -- Takes 2-3 minutes -- Shows real-time logs -- Look for: ✅ Success! - -## Step 4: Get Your URL - -Your site will be live at: -- **`https://avow-protocol.pages.dev`** - -## Step 5: Add Custom Domain (Optional) - -1. In your project, click **"Custom domains"** -2. Click **"Set up a custom domain"** -3. Enter: **`avow-protocol.org`** -4. Cloudflare auto-configures DNS -5. Wait 1-5 minutes for activation - -## That's It! 🎉 - -Your AVOW Protocol site is now live with: -- ✅ Global CDN -- ✅ Auto SSL/TLS -- ✅ Auto-deploy on git push -- ✅ Post-quantum TLS 1.3 -- ✅ DDoS protection - -Visit your site and verify it works! - -## Next: Complete Security Setup - -Follow **CLOUDFLARE-MANUAL-SETUP.md** for: -- Security headers -- WAF rules -- Zero Trust -- Monitoring diff --git a/avow-protocol/README.adoc b/avow-protocol/README.adoc deleted file mode 100644 index 1a16a8e2..00000000 --- a/avow-protocol/README.adoc +++ /dev/null @@ -1,510 +0,0 @@ -AVOW Protocol: Attributed Verification of Origin Willingness - -Idris Inside Protocol Draft - -Reference site and interactive demo for the AVOW Protocol—a high-assurance standard for secure subscriber attribution and spam prevention. -Table of Contents - - Introduction - Core Concepts - 1. Attributed Origin - 2. Origin Willingness - 3. The Spam-Ham Determinant - Formal Logic (The AVOW Proof) - Technical Stack - Project Structure - Implementation Status - License - -Introduction - -The AVOW Protocol (Attributed Verification of Origin Willingness) is designed to solve the "Spam vs. Ham" problem at the architectural level. Unlike traditional opt-in systems that rely on easily spoofed headers, AVOW uses formal mathematical proofs to ensure that every message is both attributed to a known source and willed by the recipient. -Core Concepts - -The protocol moves beyond simple "Opt-in" logic by verifying the relationship between the message source and the receiver’s intent. -1. Attributed Origin - -Every message or subscription event must carry a cryptographic proof of its source. This eliminates "ghost" subscriptions and sender spoofing. -2. Origin Willingness - -Willingness is not a static state but a verified property of the communication channel. A message is classified as Ham only if the recipient has an active, proven "willingness token" for that specific Origin. -3. The Spam-Ham Determinant - -A communication is rejected as Spam if: * The Origin cannot be cryptographically attributed. * The Willingness proof has expired or was never issued. * The state transition violates the formally verified workflow. -Formal Logic (The AVOW Proof) - -Using the proven library (Idris2), we define the validity of a communication state through the following theorem: -\[V(m) \iff A(o) \land W(r, o)\] - -Where: * V ( m ) is the validity of the message. * A ( o ) is the successful Attribution of the Origin o . * W ( r , o ) is the Willingness of the recipient r to accept o . -Technical Stack - - Logic Engine: ReScript 12 + TEA (The Elm Architecture) - - Verification: proven (Idris2) for structural integrity of state and URLs. - - Security: Enforced HTTPS and Content Security Policies (CSP) via .well-known/ standards. - -Project Structure - -avow-protocol/ -├── src/ -│ ├── AvowApp.res # Core Logic & State Machine -│ ├── OriginProof.res # Attribution logic -│ └── ProvenSafeUrl.res # Idris2-backed URL proofs -├── docs/ -│ └── PROTOCOL.adoc # Full mathematical specification -└── .well-known/ # RFC 9116 & Protocol discovery - -Implementation Status - - ✓ Origin Attribution: Cryptographic binding of senders. - - ✓ Formal URL Validation: Zero-runtime-error URL parsing. - - ❏ Willingness State Machine: Full TEA implementation of consent lifecycles. - - ❏ Spam/Ham Heuristics: Proof-based filtering demo. - -License - -PMPL-1.0-or-later - -I’m going to pressure-test this against what already exists and where the idea breaks against reality. I’m assuming you mean email/newsletter/subscription flows first, because “spam vs ham” gets slippery fast outside that; if you meant SMS/telephony instead, say so and I’ll retarget it. - -This is already clarifying itself: origin-attestation is real and standardized territory; recipient-willingness is the part that’s novel, but also the part most likely to bite you. I’m pulling the current mail standards and bulk-sender rules so I can tell you whether AVOW is a real gap or just a fancy wrapper around DKIM/DMARC + unsubscribe. - -You’re not a fool. This is a real instinct hitting a real gap. But in its current form, AVOW is trying to prove something the mail ecosystem usually can’t prove cleanly. - -Email already has a pretty mature stack for origin-side claims: SPF authorizes sending hosts, DKIM signs mail at the domain level, DMARC aligns authenticated identities with the visible From domain, and ARC exists because forwarding, mailing lists, and other intermediaries routinely break simpler authentication models. Mailing-list UX also already has standardized List-Subscribe and List-Unsubscribe headers, with RFC 8058 defining one-click unsubscribe. Large receivers like Gmail now explicitly require bulk senders to use SPF, DKIM, DMARC alignment, TLS, and one-click unsubscribe for marketing/subscribed mail. - -So AVOW is not solving a fake problem. The real gap is this: origin authentication is standardized; recipient willingness is mostly handled as policy, reputation, UX, and local receiver judgment, not as a portable cryptographic fact. Even Google’s current guidance leans on opt-in, confirmation, unsubscribes, and spam complaint rates, and explicitly notes that the line between promotional and transactional mail depends partly on recipient context. The email architecture docs also make clear that user-level behavior and mailing-list behavior are messy and partly subjective, not something you can reduce to one timeless global truth. - -That’s the core problem in your theorem: -V(m)  ⟺  A(o)∧W(r,o) -V(m)⟺A(o)∧W(r,o) - -A(o) is plausible. W(r,o) is the dangerous bit. A protocol can prove a token exists. It cannot really prove, in the human sense, that a recipient is still “willing” right now, in this context, for this exact message class, through this route, after forwarding, delegation, mailing-list remailing, account compromise, or changing preferences. - -The spots where AVOW currently overreaches are these: - - It treats ham/spam as if it were fully derivable from origin + consent, when receivers also care about reputation, abuse, complaints, compromise, and message class. - - It assumes a neat sender→recipient path, but SMTP has relays, gateways, mediators, and mailing lists that can re-post or modify messages while preserving some original authorship cues. ARC exists precisely because intermediaries break simpler authentication stories. - - It puts a lot of emphasis on HTTPS/CSP/.well-known, but transport security and discovery territory is already occupied by things like MTA-STS and current sender requirements. That’s useful plumbing, just not your differentiator. - - It wants a binary proof where the real world probably needs graded attestation. Telephony’s STIR/PASSporT/SHAKEN stack is a good precedent here: it uses cryptographic origin identity plus levels of attestation, not a magical absolute truth bit. - -Here’s the salvage, and I think it’s actually pretty good: - -AVOW should stop pretending to be a universal “spam killer protocol” and become a consent-attested messaging framework for subscribed/bulk/managed communication. - -That means: -V(m,t)  ⟺  Attest(o,s,m) ∧ ConsentCap(r,o,purpose,channel,t) ∧ Fresh(cap,t) ∧ NotRevoked(cap,t) ∧ ReplaySafe(m,cap) ∧ WorkflowOK -V(m,t)⟺Attest(o,s,m) ∧ ConsentCap(r,o,purpose,channel,t) ∧ Fresh(cap,t) ∧ NotRevoked(cap,t) ∧ ReplaySafe(m,cap) ∧ WorkflowOK - -That is much stronger. It says: - - the origin is attested, - - the sender is authorized to act for that origin, - - the recipient previously granted a scoped capability, - - the capability is fresh and not revoked, - - the message can’t replay an old proof, - - and the state machine is valid. - -That is no longer “is this ham in the philosophical sense?” It is “does this message satisfy a formally checkable acceptance policy?” That’s actually implementable. - -My honest verdict: - -As a universal internet protocol: probably too ambitious, and a bit category-confused. -As a domain-scoped or provider-scoped protocol for consent-attested bulk mail / subscriptions / list traffic: genuinely interesting. - -The practical version of AVOW would look like this: - - Origin attestation token - Signed by the sender domain, or by a delegated ESP with explicit delegation. - - Recipient willingness token - Really this should be a consent capability, not “willingness” in the philosophical sense. It should be scoped to: - - recipient pseudonym or mailbox handle - - origin - - list or purpose - - allowed message class - - expiry - - revocation reference - - nonce / anti-replay binding - - Receiver policy engine - Receiver verifies both tokens and then still applies local policy. - - Graceful coexistence with mail today - AVOW should ride alongside SPF/DKIM/DMARC/ARC, not replace them. - -The other big recommendation: keep Idris inside the verifier, not inside the wire protocol identity. Formal methods are excellent for proving your parser, state machine, and token-validation rules are sound. They do not prove that remote parties are honest, or that human consent semantics are complete. - -So the sharp version is: - - Good idea: consent as a cryptographically scoped capability. - - Weak idea: “spam vs ham solved architecturally.” - - Best framing: “AVOW is a formally specified, consent-attested extension for subscribed messaging, not a universal theorem of wantedness.” - -If I were steering the repo, I’d rewrite the pitch to: - - AVOW is a consent-attested messaging framework that combines authenticated origin, delegated sender authority, and recipient-scoped acceptance capabilities for high-assurance subscription and bulk-mail workflows. - -That pitch is strong. The current one is a little too “I have abolished spam by theorem,” which is catnip for reviewers in the wrong way. - -Next thing I’d write is the threat model before any more code: attacker goals, trust anchors, token issuer, delegation model, replay model, revocation model, mailing-list/forwarder behavior, and downgrade story. - -could you write me a replacement README.adoc - -Absolutely — here’s a replacement README.adoc that pitches AVOW in a sharper, more credible way, without sounding like it’s trying to mathematically abolish spam from the universe. - -= AVOW Protocol -:toc: -:toclevels: 3 -:sectnums: - -AVOW — *Attributed Verification of Origin & Willingness* — is a high-assurance protocol draft for consent-attested messaging. - -Rather than attempting to "solve spam" in the abstract, AVOW defines a verifiable acceptance model for messages that should only be delivered when two conditions hold: - -. the sender's origin can be cryptographically attributed; and -. the recipient has a valid, scoped, non-revoked willingness token for that origin and message purpose. - -AVOW is aimed at subscription, notification, and managed messaging workflows where consent, attribution, and policy enforcement need to be explicit, inspectable, and machine-verifiable. - -== Status - -[IMPORTANT] -==== -AVOW is currently a protocol exploration and reference implementation draft. - -It is *not* a replacement for SMTP, SPF, DKIM, DMARC, ARC, or existing unsubscribe standards. -It is best understood as a complementary consent-attestation layer for high-assurance messaging environments. -==== - -Current state: - -* ✅ Origin attribution model drafted -* ✅ Formal validation experiments with Idris2 / `proven` -* ✅ Initial ReScript architecture for stateful protocol demos -* ❏ Willingness capability model in progress -* ❏ Revocation / expiry lifecycle design in progress -* ❏ End-to-end protocol demo not yet complete - -== Why AVOW? - -Existing messaging systems are reasonably good at proving aspects of *sender identity*, but much weaker at proving whether a recipient has actually granted ongoing, scoped permission for a class of messages. - -That creates a familiar mess: - -* spoofed or weakly-attributed origins -* stale or unverifiable consent records -* ambiguous subscription state -* poor replay / revocation semantics -* "opt-in" claims that are hard to independently verify -* overloading of local spam filtering with consent questions it cannot cleanly prove - -AVOW explores a stricter model: - -[stem] -++++ -V(m, t) iff A(o) and C(r, o, p, t) and F(c, t) and R(m, c) and S -++++ - -Where: - -* `V(m, t)` = message `m` is valid for acceptance at time `t` -* `A(o)` = origin `o` is cryptographically attributed -* `C(r, o, p, t)` = recipient `r` has a valid consent capability for origin `o` and purpose `p` -* `F(c, t)` = the capability is fresh / unexpired at time `t` -* `R(m, c)` = the message and capability are replay-safe -* `S` = the state transition satisfies the verified workflow - -This is intentionally narrower than "all ham/spam classification". -AVOW is about *provable acceptance conditions*, not universal philosophical certainty about wantedness. - -== Core Concepts - -=== 1. Attributed Origin - -Every accepted communication must be bound to a cryptographically attributable origin. - -This means: - -* the sender identity is not merely asserted in a mutable header -* the sending authority can be tied to a recognized origin -* delegated senders can be modeled explicitly rather than hand-waved - -AVOW treats unattributed or ambiguously attributed origin as a first-class failure. - -=== 2. Willingness as a Capability - -AVOW does not treat willingness as a vague boolean preference. -Instead, it models willingness as a scoped capability with explicit properties such as: - -* recipient -* origin -* purpose or message class -* channel -* issuance time -* expiry time -* revocation reference -* anti-replay binding - -A message is not accepted merely because a sender once claimed "the user opted in". -It must correspond to a currently valid willingness capability. - -=== 3. Verified State Transitions - -Consent is not static. -It changes over time through a lifecycle such as: - -* requested -* challenged -* granted -* renewed -* narrowed -* revoked -* expired - -AVOW models these transitions explicitly so that invalid state jumps can be rejected. - -=== 4. Spam/Ham as Policy Outcome - -AVOW deliberately avoids claiming that all spam detection can be reduced to one theorem. - -Instead: - -* AVOW can prove whether a message satisfies a strict consent-attested acceptance policy -* receivers may still apply local reputation, abuse, content, and operational policy - -That distinction matters. -AVOW is a high-assurance protocol component, not a magic replacement for receiver judgment. - -== Protocol Model - -At a high level, AVOW introduces two linked proofs: - -. *Origin Proof* — this message originates from an attributable sender or authorized delegate -. *Willingness Proof* — this recipient has granted a valid, scoped capability for this class of communication - -A receiver evaluates both before deciding whether a message qualifies for AVOW acceptance. - -[source,text] ----- -Sender/Delegate - | - | 1. emits attributed message + origin proof - | 2. binds message to willingness capability reference - v -Receiver - | - |-- verify origin attribution - |-- verify willingness capability - |-- check expiry / revocation / replay safety - |-- validate workflow state transition - v -Accept / Quarantine / Reject ----- - -== Design Principles - -=== Explicit over implicit - -No hidden "trust me, the user signed up somewhere" semantics. - -=== Scoped consent over blanket consent - -Permission should be narrow, inspectable, and purpose-bound. - -=== Formal workflow integrity - -State transitions should be specified precisely enough to verify. - -=== Coexistence over replacement - -AVOW should layer alongside existing mail and messaging infrastructure, not pretend the last 20 years never happened. - -=== High assurance where it matters - -The goal is not maximal complexity everywhere. -The goal is to make strong guarantees possible in systems that actually need them. - -== Non-Goals - -AVOW is *not* trying to be: - -* a universal replacement for SMTP -* a replacement for SPF, DKIM, DMARC, or ARC -* a complete spam-filtering engine -* a proof of human intent in the philosophical sense -* a guarantee that a message is good, useful, or non-abusive in all contexts - -AVOW is specifically about cryptographically and structurally verifiable acceptance criteria. - -== Technical Stack - -The current reference site / demo stack uses: - -* *ReScript 12 + TEA* for the protocol demo and state machine UI -* *Idris2* with `proven` for high-assurance validation experiments -* *AsciiDoc* for protocol documentation -* *.well-known/* conventions for discovery and policy surfacing -* *HTTPS + CSP* for secure reference-site delivery - -The formal methods work is intended to strengthen the protocol model and verifier logic. -It is *not* a claim that formal proofs alone eliminate operational abuse. - -== Repository Structure - -[source,text] ----- -avow-protocol/ -├── src/ -│ ├── AvowApp.res # Core application and protocol state machine -│ ├── OriginProof.res # Origin attribution logic -│ ├── Willingness.res # Consent capability lifecycle (planned/in progress) -│ └── ProvenSafeUrl.res # Idris2-backed safe URL integration -├── docs/ -│ ├── PROTOCOL.adoc # Full protocol draft -│ ├── THREAT-MODEL.adoc # Adversaries, trust boundaries, and failure modes -│ └── STATE-MACHINE.adoc # Consent lifecycle and transition rules -└── .well-known/ - ├── security.txt - └── avow # Discovery / policy experiments ----- - -== Implementation Priorities - -Near-term priorities: - -. define the willingness capability schema -. specify revocation and renewal semantics -. model replay resistance -. document delegation rules for third-party senders -. write the threat model before over-building the demo -. produce a minimal end-to-end verifier - -Suggested milestone sequence: - -* *M1* — Formalize origin attribution structure -* *M2* — Define willingness capability format -* *M3* — Specify state transitions and invalid transitions -* *M4* — Implement verifier prototype -* *M5* — Build demo showing accept / reject / revoke paths -* *M6* — Evaluate interoperability with real-world mail flows - -== Threat Model - -AVOW is only meaningful if it states what it is defending against. - -Key threat categories include: - -* forged or weakly attributed sender identity -* stale or fabricated consent claims -* replay of previously valid capabilities -* revoked-but-still-used willingness proofs -* confused deputy problems with delegated senders -* state-machine bypasses -* downgrade to non-AVOW delivery semantics - -A dedicated threat model document is strongly recommended and should be treated as a core protocol artifact, not an afterthought. - -== Example Acceptance Rule - -An AVOW-aware receiver might evaluate a message using logic like: - -[source,text] ----- -accept(message) if - verifyOrigin(message.originProof) && - verifyCapability(message.willingnessProof) && - capabilityMatches(message.origin, message.recipient, message.purpose) && - !isExpired(message.willingnessProof) && - !isRevoked(message.willingnessProof) && - !isReplay(message) -else reject_or_quarantine(message) ----- - -This is intentionally stricter than common marketing-email workflows. -That is the point. - -== Project Philosophy - -AVOW assumes that secure messaging should not depend entirely on: - -* sender self-description -* vague claims of prior opt-in -* reputation systems alone -* after-the-fact unsubscribe flows - -Instead, it explores whether *origin* and *recipient willingness* can be made explicit enough to verify. - -That makes AVOW especially relevant to systems that value: - -* strong consent guarantees -* auditable subscription workflows -* formally specified transitions -* abuse-resistant notification channels -* research into high-assurance messaging infrastructure - -== Development - -[source,bash] ----- -deno task build -deno task watch ----- - -As the protocol matures, this repository is expected to contain: - -* a reference site -* an interactive protocol demo -* a verifier prototype -* formal notes and proofs -* threat-model documentation -* example issuer / receiver flows - -== Contributing - -Contributions are welcome, especially in these areas: - -* protocol design review -* threat modeling -* formal specification -* ReScript implementation -* Idris2 proof support -* interoperability critique -* naming and scope refinement - -The most useful feedback is the brutal kind: -tell us where the model breaks, where the assumptions leak, and where the protocol is pretending to know more than it really can. - -== License - -This project is licensed under: - -*PMPL-1.0-or-later* - -See the license file for full terms. - -I can also do a tighter second pass that sounds more like one of your repo READMEs — more manifesto-ish, more formal-methods-heavy, or more “Rhodium standard / protocol-draft” in tone. - - diff --git a/avow-protocol/ROADMAP.adoc b/avow-protocol/ROADMAP.adoc deleted file mode 100644 index 45a5ac98..00000000 --- a/avow-protocol/ROADMAP.adoc +++ /dev/null @@ -1,22 +0,0 @@ -// SPDX-License-Identifier: CC-BY-SA-4.0 -= Avow Protocol Roadmap - -== Current Status - -Initial development phase. - -== Milestones - -=== v0.1.0 - Foundation -* [ ] Core functionality -* [ ] Basic documentation -* [ ] CI/CD pipeline - -=== v1.0.0 - Stable Release -* [ ] Full feature set -* [ ] Comprehensive tests -* [ ] Production ready - -== Future Directions - -_To be determined based on community feedback._ diff --git a/avow-protocol/RSR_OUTLINE.adoc b/avow-protocol/RSR_OUTLINE.adoc deleted file mode 100644 index 94a49d83..00000000 --- a/avow-protocol/RSR_OUTLINE.adoc +++ /dev/null @@ -1,218 +0,0 @@ -= RSR Template Repository - -image:[Palimpsest-MPL-1.0,link="https://github.com/hyperpolymath/palimpsest-license"] image:[Palimpsest,link="https://github.com/hyperpolymath/palimpsest-license"] -:toc: -:sectnums: - -// Badges -image:https://img.shields.io/badge/RSR-Infrastructure-cd7f32[RSR Infrastructure] -image:https://img.shields.io/badge/Phase-Maintenance-brightgreen[Phase] -image:https://img.shields.io/badge/Guix-Primary-purple?logo=gnu[Guix] - -== Overview - -**The canonical template for RSR (Rhodium Standard Repository) projects.** - -This repository provides the standardized structure, configuration, and tooling for all 139 repos in the hyperpolymath ecosystem. Use it to: - -* Bootstrap new projects with RSR compliance -* Reference the standard directory structure -* Copy configuration templates (Justfile, STATE.scm, etc.) - -== Quick Start - -[source,bash] ----- -# Clone the template -git clone https://github.com/hyperpolymath/RSR-template-repo my-project -cd my-project - -# Remove template git history -rm -rf .git -git init - -# Customize -sed -i 's/RSR-template-repo/my-project/g' Justfile guix.scm README.adoc - -# Enter development environment -guix shell -D -f guix.scm - -# Validate compliance -just validate-rsr ----- - -== What's Included - -[cols="1,3"] -|=== -|File/Directory |Purpose - -|`.editorconfig` -|Editor configuration (indent, charset) - -|`.gitignore` -|Standard ignore patterns - -|`.guix-channel` -|Guix channel definition - -|`.well-known/` -|RFC-compliant metadata (security.txt, ai.txt, humans.txt) - -|`docs/` -|Documentation directory - -|`guix.scm` -|Guix package definition - -|`justfile` -|Task runner with 50+ recipes - -|`LICENSE.txt` -|AGPL + Palimpsest dual license - -|`README.adoc` -|This file - -|`RSR_COMPLIANCE.adoc` -|Compliance tracking - -|`STATE.scm` -|Project state checkpoint -|=== - -== Justfile Features - -The template Justfile provides: - -* **~10 billion recipe combinations** via matrix recipes -* **Cookbook generation**: `just cookbook` → `docs/just-cookbook.adoc` -* **Man page generation**: `just man` → `docs/man/project.1` -* **RSR validation**: `just validate-rsr` -* **STATE.scm management**: `just state-touch`, `just state-phase` -* **Container support**: `just container-build`, `just container-push` -* **CI matrix**: `just ci-matrix [stage] [depth]` - -=== Key Recipes - -[source,bash] ----- -just # Show all recipes -just help # Detailed help -just info # Project info -just combinations # Show matrix options - -just build # Build (debug) -just test # Run tests -just quality # Format + lint + test -just ci # Full CI pipeline - -just validate # RSR + STATE validation -just docs # Generate all docs -just cookbook # Generate Justfile docs - -just guix-shell # Guix dev environment -just container-build # Build container ----- - -== Directory Structure - -[source] ----- -project/ -├── .editorconfig # Editor settings -├── .gitignore # Git ignore -├── .guix-channel # Guix channel -├── .well-known/ # RFC metadata -│ ├── ai.txt -│ ├── humans.txt -│ └── security.txt -├── config/ # Nickel configs (optional) -├── docs/ # Documentation -│ ├── generated/ -│ ├── man/ -│ └── just-cookbook.adoc -├── guix.scm # Guix package -├── Justfile # Task runner -├── LICENSE.txt # Dual license -├── README.adoc # Overview -├── RSR_COMPLIANCE.adoc # Compliance -├── src/ # Source code -├── STATE.scm # State checkpoint -└── tests/ # Tests ----- - -== RSR Compliance - -=== Language Tiers - -* **Tier 1** (Gold): Rust, Elixir, Zig, Ada, Haskell, ReScript -* **Tier 2** (Silver): Nickel, Racket, Guile Scheme, Nix -* **Infrastructure**: Guix channels, derivations - -=== Required Files - -* `.editorconfig` -* `.gitignore` -* `justfile` -* `README.adoc` -* `RSR_COMPLIANCE.adoc` -* `LICENSE.txt` (AGPL + Palimpsest) -* `.well-known/security.txt` -* `.well-known/ai.txt` -* `.well-known/humans.txt` -* `guix.scm` OR `flake.nix` - -=== Prohibited - -* Python outside `salt/` directory -* TypeScript/JavaScript (use ReScript) -* CUE (use Guile/Nickel) -* `Dockerfile` (use `Containerfile`) - -== STATE.scm - -The STATE.scm file tracks project state: - -[source,scheme] ----- -(define state - `((metadata - (project . "my-project") - (updated . "2025-12-10")) - (position - (phase . implementation) ; design|implementation|testing|maintenance|archived - (maturity . beta)) ; experimental|alpha|beta|production|lts - (ecosystem - (part-of . ("RSR Framework")) - (depends-on . ())))) ----- - -== Badge Schema - -Generate badges from STATE.scm: - -[source,bash] ----- -just badges standard ----- - -See `docs/BADGE_SCHEMA.adoc` for the full badge taxonomy. - -== Ecosystem Integration - -This template is part of: - -* **STATE.scm Ecosystem**: Conversation checkpoints -* **RSR Framework**: Repository standards -* **Consent-Aware-HTTP**: .well-known compliance - -== License - -SPDX-License-Identifier: MPL-2.0 - -== Links - -* https://github.com/hyperpolymath/elegant-STATE[elegant-STATE] - STATE.scm tooling -* https://github.com/hyperpolymath/conative-gating[conative-gating] - Policy enforcement -* https://rhodium.sh[Rhodium Standard] - RSR documentation diff --git a/avow-protocol/SECURITY.md b/avow-protocol/SECURITY.md deleted file mode 100644 index 034e8480..00000000 --- a/avow-protocol/SECURITY.md +++ /dev/null @@ -1,21 +0,0 @@ -# Security Policy - -## Supported Versions - -Use this section to tell people about which versions of your project are -currently being supported with security updates. - -| Version | Supported | -| ------- | ------------------ | -| 5.1.x | :white_check_mark: | -| 5.0.x | :x: | -| 4.0.x | :white_check_mark: | -| < 4.0 | :x: | - -## Reporting a Vulnerability - -Use this section to tell people how to report a vulnerability. - -Tell them where to go, how often they can expect to get an update on a -reported vulnerability, what to expect if the vulnerability is accepted or -declined, etc. diff --git a/avow-protocol/WEEK-1-COMPLETE.md b/avow-protocol/WEEK-1-COMPLETE.md deleted file mode 100644 index 6024c500..00000000 --- a/avow-protocol/WEEK-1-COMPLETE.md +++ /dev/null @@ -1,280 +0,0 @@ -# STAMP Protocol - Week 1 Complete ✅ - -**Date:** 2026-01-30 -**Status:** MVP Deployed and Ready - -## 🎉 What We Built - -### 1. Core Protocol Design -- **libstamp** - Idris2 ABI with formal verification - - Dependent types prove message compliance - - Zig FFI for C compatibility - - Transport-agnostic architecture -- **Location:** `~/Documents/hyperpolymath-repos/libstamp/` - -### 2. Working Telegram Bot -- **@stamp_demo_bot** - Live demo on Telegram - - `/start` - Subscribe with consent proof - - `/verify` - See cryptographic verification - - `/status` - Check subscription details - - `/unsubscribe` - One-click proven unsubscribe -- **Database:** SQLite persistence -- **Status:** Deployed and running -- **Location:** `~/Documents/hyperpolymath-repos/stamp-telegram-bot/` - -### 3. Professional Website -- **https://stamp-protocol.org** - Live on Cloudflare Pages - - Hero section with clear value prop - - Problem/solution framework - - Interactive browser demo (ReScript) - - Technical comparison - - Live bot link -- **Features:** - - Mobile responsive - - SEO optimized - - Fast loading - - Auto-deploys from GitHub -- **Location:** `~/Documents/hyperpolymath-repos/stamp-website/` - -### 4. Interactive Demo -- **Browser-based verification** - No install required - - Test unsubscribe link verification - - Test consent chain verification - - See mathematical proofs live -- **Tech:** ReScript (type-safe JavaScript) -- **Embedded:** stamp-protocol.org - -### 5. Strategic Planning -- **52-week execution roadmap** - - Phase 0: Foundation (Weeks 1-8) - - Phase 1: Dating app pilot (Weeks 9-20) - - Phase 2: Scale + FOMO (Weeks 21-36) - - Phase 3: Major platform (Weeks 37-52) -- **Go-to-market:** "Inception approach" -- **First customer:** Dating apps (Bumble, Hinge, Feeld) -- **Funding:** Bootstrap → Angels (£250-500k) → Series A - -### 6. Testing & Documentation -- **Testing guide** - How to get user feedback -- **Demo video script** - 2-minute pitch recording -- **Deploy guides** - Step-by-step for all platforms -- **Technical docs** - Complete API documentation - -## 📁 Repository Structure - -``` -hyperpolymath-repos/ -├── libstamp/ # Core verification library -│ ├── src/abi/*.idr # Idris2 ABI with proofs -│ └── ffi/zig/ # Zig FFI implementation -│ -├── stamp-telegram-bot/ # Working demo bot -│ ├── src/bot.ts # Telegram bot (400+ lines) -│ ├── src/database.ts # SQLite persistence -│ ├── src/stamp-mock.ts # Mock verification -│ ├── TESTING-GUIDE.md # User testing guide -│ └── DEMO-VIDEO-SCRIPT.md # Recording instructions -│ -└── stamp-website/ # Public website - ├── index.html # Landing page - ├── style.css # Responsive design - └── src/StampDemo.res # Interactive demo -``` - -## 🔗 Live Links - -| Resource | URL | -|----------|-----| -| **Website** | https://stamp-protocol.org | -| **Telegram Bot** | https://t.me/stamp_demo_bot | -| **GitHub Org** | https://github.com/hyperpolymath | -| **Bot Repo** | https://github.com/hyperpolymath/stamp-telegram-bot | -| **Website Repo** | https://github.com/hyperpolymath/stamp-website | - -## 📊 Metrics & Goals - -### Week 1 Targets (Achieved) -- [x] Working prototype deployed -- [x] Domain purchased and configured -- [x] Professional website live -- [x] Interactive demo functional -- [x] Bot responding to users -- [x] Testing materials prepared -- [x] Demo video script ready - -### Week 2 Goals -- [ ] Get 3-5 user feedback responses -- [ ] Record 2-minute demo video -- [ ] Integrate real libstamp (replace mocks) -- [ ] Performance benchmarks -- [ ] Dating app one-pager -- [ ] Reach out to first potential customer - -## 🎯 Key Innovations - -1. **Dependent Types for Messaging** - - First protocol to use formal verification - - Mathematically proven compliance - - Code won't compile if invalid - -2. **Transport-Agnostic Architecture** - - Works for email, SMS, social media - - Platform integrates, not replaces - -3. **Inception Go-to-Market** - - Present narrow (email) - - Architecture broad (everything) - - Let customers discover value - -## 💡 Market Positioning - -### Primary Markets -1. **Social Media** ($1.2B+) - - Dating apps: Fake profiles - - Twitter: Bot accounts - - Reddit: Astroturfing - -2. **Messaging** ($200M+) - - Email newsletters - - RCS business messaging - - SMS marketing - -### Value Proposition -- **For platforms:** 80-90% bot reduction, save $100M+/year -- **For users:** Proven consent, working unsubscribe, transparency -- **For regulators:** Cryptographic compliance proof - -## 🛠️ Technology Stack - -| Layer | Technology | Purpose | -|-------|------------|---------| -| **ABI** | Idris2 | Formal verification, dependent types | -| **FFI** | Zig | C-compatible, cross-platform | -| **Bot** | TypeScript + Deno | Telegram integration | -| **Website** | ReScript + HTML/CSS | Type-safe frontend | -| **Database** | SQLite | Persistence (for now) | -| **Deploy** | Cloudflare Pages | Website hosting | -| **Runtime** | Deno | Bot runtime | - -## 📚 Documentation Created - -1. **SESSION-SUMMARY-2026-01-30.md** - Complete session notes -2. **stamp-execution-roadmap.adoc** - 52-week plan -3. **stamp-week-1-checklist.md** - Week 1 tasks -4. **DEPLOY-NOW.md** - Bot deployment guide -5. **TESTING-GUIDE.md** - User testing instructions -6. **DEMO-VIDEO-SCRIPT.md** - Video recording guide -7. **README.md** - Project documentation (all repos) - -## 🚀 How to Use This Week's Work - -### Show to Investors -1. Visit stamp-protocol.org -2. Show interactive demo -3. Test Telegram bot -4. Walk through 52-week roadmap -5. Explain market size ($1.2B+) - -### Get User Feedback -1. Share @stamp_demo_bot with 3-5 people -2. Use TESTING-GUIDE.md -3. Collect feedback -4. Iterate on UX - -### Record Demo Video -1. Follow DEMO-VIDEO-SCRIPT.md -2. Install SimpleScreenRecorder -3. Practice script -4. Record 2-minute demo -5. Upload to YouTube - -### Deploy Your Own -1. Clone repos from GitHub -2. Follow DEPLOY-NOW.md -3. Get Telegram bot token -4. Deploy to Cloudflare Pages -5. Customize for your use case - -## 🎯 Next Steps (Week 2) - -### Must Do -- [ ] Test bot with 3-5 people (use TESTING-GUIDE.md) -- [ ] Record demo video (use DEMO-VIDEO-SCRIPT.md) -- [ ] Replace mocks with real libstamp -- [ ] Performance testing - -### Should Do -- [ ] Write dating app one-pager -- [ ] Research potential customers -- [ ] Improve bot UX based on feedback -- [ ] Add analytics to website - -### Could Do -- [ ] YC application (if interested) -- [ ] Reach out to angels -- [ ] Blog post explaining STAMP -- [ ] Twitter/LinkedIn presence - -## 💼 Business Readiness - -**Investment Ready:** -- ✓ Working prototype -- ✓ Clear value proposition -- ✓ Market sizing ($1.4B+) -- ✓ 52-week roadmap -- ✓ Go-to-market strategy -- ✓ Technical differentiation -- ✓ Regulatory angle (GDPR, CAN-SPAM) - -**Customer Ready:** -- ✓ Live demo (bot + website) -- ✓ Technical documentation -- ✓ Proof of concept -- ⏳ Customer testimonials (Week 2) -- ⏳ Case study (dating app pilot, Week 9-20) - -## 🏆 What Makes This Special - -1. **Speed:** Idea → Working demo in 1 day -2. **Completeness:** Bot + Website + Docs + Strategy -3. **Technical Innovation:** First use of dependent types for messaging -4. **Market Fit:** $1.4B+ market, clear problem -5. **Execution Plan:** 52-week roadmap with milestones - -## 📞 Contact & Support - -**Project:** STAMP Protocol -**Maintainer:** Jonathan D.A. Jewell -**Email:** j.d.a.jewell@open.ac.uk -**Website:** https://stamp-protocol.org -**Telegram:** @stamp_demo_bot - -**Bot Status Check:** -```bash -cd ~/Documents/hyperpolymath-repos/stamp-telegram-bot -pgrep -f bot.ts && echo "✓ Running" || echo "✗ Stopped" -tail -20 bot.log -``` - -**Website Status:** -- Live: https://stamp-protocol.org -- Auto-deploys from GitHub on push -- Cloudflare CDN (global) - -## 🎉 Congratulations! - -You went from "I have an idea about spam" to: -- ✓ Working code (1000+ lines) -- ✓ Live demo (bot + website) -- ✓ Strategic roadmap -- ✓ Market validation -- ✓ Investor-ready materials - -**That's exceptional progress for Week 1.** - -Now execute Week 2, get feedback, and iterate. You're building something that could legitimately change how the internet handles messaging. - ---- - -**Last Updated:** 2026-01-30 -**Next Review:** Week 2 completion (2026-02-06) diff --git a/avow-protocol/_headers b/avow-protocol/_headers deleted file mode 100644 index 3b1ca7e2..00000000 --- a/avow-protocol/_headers +++ /dev/null @@ -1,29 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -# Security headers for stamp-protocol.org (Cloudflare Pages format) - -/* - # HSTS - Force HTTPS for 2 years, include subdomains, preload - Strict-Transport-Security: max-age=63072000; includeSubDomains; preload - - # CSP - Content Security Policy (strict) - Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' https://img.shields.io data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' - - # Prevent clickjacking - X-Frame-Options: DENY - - # Prevent MIME sniffing - X-Content-Type-Options: nosniff - - # XSS Protection - X-XSS-Protection: 1; mode=block - - # Referrer Policy - Referrer-Policy: strict-origin-when-cross-origin - - # Permissions Policy (disable unnecessary features) - Permissions-Policy: geolocation=(), microphone=(), camera=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=() - - # Cross-Origin policies - Cross-Origin-Embedder-Policy: require-corp - Cross-Origin-Opener-Policy: same-origin - Cross-Origin-Resource-Policy: same-origin diff --git a/avow-protocol/assets/favicon.svg b/avow-protocol/assets/favicon.svg deleted file mode 100644 index bf6bd3fe..00000000 --- a/avow-protocol/assets/favicon.svg +++ /dev/null @@ -1,19 +0,0 @@ - - - - - - - - - - - - - - diff --git a/avow-protocol/assets/script.js b/avow-protocol/assets/script.js deleted file mode 100644 index 2240694c..00000000 --- a/avow-protocol/assets/script.js +++ /dev/null @@ -1,68 +0,0 @@ -// STAMP Protocol Website - Interactive Elements - -// Smooth scrolling for anchor links -document.querySelectorAll('a[href^="#"]').forEach(anchor => { - anchor.addEventListener('click', function (e) { - e.preventDefault(); - const target = document.querySelector(this.getAttribute('href')); - if (target) { - target.scrollIntoView({ - behavior: 'smooth', - block: 'start' - }); - } - }); -}); - -// Add scroll animation for stats -const observerOptions = { - threshold: 0.5, - rootMargin: '0px 0px -100px 0px' -}; - -const statsObserver = new IntersectionObserver((entries) => { - entries.forEach(entry => { - if (entry.isIntersecting) { - entry.target.style.opacity = '1'; - entry.target.style.transform = 'translateY(0)'; - } - }); -}, observerOptions); - -// Animate stats when they come into view -document.addEventListener('DOMContentLoaded', () => { - const statCards = document.querySelectorAll('.stat-card'); - statCards.forEach(card => { - card.style.opacity = '0'; - card.style.transform = 'translateY(30px)'; - card.style.transition = 'all 0.6s ease-out'; - statsObserver.observe(card); - }); - - // Animate features - const features = document.querySelectorAll('.feature'); - features.forEach((feature, index) => { - feature.style.opacity = '0'; - feature.style.transform = 'translateY(30px)'; - feature.style.transition = `all 0.6s ease-out ${index * 0.1}s`; - - const featureObserver = new IntersectionObserver((entries) => { - entries.forEach(entry => { - if (entry.isIntersecting) { - entry.target.style.opacity = '1'; - entry.target.style.transform = 'translateY(0)'; - } - }); - }, observerOptions); - - featureObserver.observe(feature); - }); -}); - -// Track demo bot clicks -document.querySelectorAll('a[href*="t.me/stamp_demo_bot"]').forEach(link => { - link.addEventListener('click', () => { - console.log('Demo bot link clicked'); - // Could add analytics here - }); -}); diff --git a/avow-protocol/assets/style.css b/avow-protocol/assets/style.css deleted file mode 100644 index afce2a90..00000000 --- a/avow-protocol/assets/style.css +++ /dev/null @@ -1,412 +0,0 @@ -/* STAMP Protocol Website Styles */ - -:root { - --primary: #2563eb; - --primary-dark: #1e40af; - --secondary: #64748b; - --success: #10b981; - --background: #ffffff; - --surface: #f8fafc; - --text: #0f172a; - --text-muted: #64748b; - --border: #e2e8f0; - --code-bg: #1e293b; - --code-text: #e2e8f0; -} - -* { - margin: 0; - padding: 0; - box-sizing: border-box; -} - -body { - font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif; - line-height: 1.6; - color: var(--text); - background: var(--background); -} - -.container { - max-width: 1200px; - margin: 0 auto; - padding: 0 2rem; -} - -/* Hero Section */ -.hero { - background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); - color: white; - padding: 6rem 0 8rem; - text-align: center; -} - -.hero h1 { - font-size: 4rem; - font-weight: 800; - margin-bottom: 1rem; - letter-spacing: -0.02em; -} - -.hero .tagline { - font-size: 1.5rem; - opacity: 0.95; - margin-bottom: 1rem; - font-weight: 500; -} - -.hero .subtitle { - font-size: 1.25rem; - opacity: 0.9; - max-width: 800px; - margin: 0 auto 3rem; - line-height: 1.8; -} - -.hero strong { - color: #fbbf24; - font-weight: 700; -} - -.cta-buttons { - display: flex; - gap: 1rem; - justify-content: center; - flex-wrap: wrap; -} - -.btn { - display: inline-block; - padding: 1rem 2rem; - border-radius: 0.5rem; - text-decoration: none; - font-weight: 600; - font-size: 1.1rem; - transition: all 0.2s; -} - -.btn-primary { - background: white; - color: var(--primary); -} - -.btn-primary:hover { - transform: translateY(-2px); - box-shadow: 0 10px 25px rgba(0,0,0,0.2); -} - -.btn-secondary { - background: rgba(255,255,255,0.2); - color: white; - border: 2px solid white; -} - -.btn-secondary:hover { - background: rgba(255,255,255,0.3); -} - -/* Problem Section */ -.problem { - padding: 6rem 0; - background: var(--surface); -} - -.problem h2 { - text-align: center; - font-size: 2.5rem; - margin-bottom: 3rem; -} - -.problem-grid { - display: grid; - grid-template-columns: repeat(auto-fit, minmax(300px, 1fr)); - gap: 2rem; -} - -.problem-card { - background: white; - padding: 2rem; - border-radius: 1rem; - box-shadow: 0 4px 6px rgba(0,0,0,0.05); -} - -.problem-card h3 { - font-size: 1.5rem; - margin-bottom: 1rem; -} - -.problem-card .stat { - color: var(--primary); - font-weight: 700; - font-size: 1.25rem; - margin-top: 1rem; -} - -/* Solution Section */ -.solution { - padding: 6rem 0; -} - -.solution h2 { - text-align: center; - font-size: 2.5rem; - margin-bottom: 1rem; -} - -.solution .intro { - text-align: center; - font-size: 1.25rem; - color: var(--text-muted); - margin-bottom: 4rem; -} - -.features { - display: grid; - grid-template-columns: repeat(auto-fit, minmax(300px, 1fr)); - gap: 3rem; -} - -.feature { - text-align: center; -} - -.feature-icon { - width: 4rem; - height: 4rem; - background: var(--success); - color: white; - border-radius: 50%; - display: flex; - align-items: center; - justify-content: center; - font-size: 2rem; - margin: 0 auto 1.5rem; -} - -.feature h3 { - font-size: 1.5rem; - margin-bottom: 1rem; -} - -.feature code { - background: var(--code-bg); - color: var(--code-text); - padding: 0.5rem 1rem; - border-radius: 0.5rem; - display: inline-block; - margin-top: 1rem; - font-size: 0.9rem; - font-family: 'Monaco', 'Courier New', monospace; -} - -/* Technical Section */ -.technical { - padding: 6rem 0; - background: var(--surface); -} - -.technical h2 { - text-align: center; - font-size: 2.5rem; - margin-bottom: 4rem; -} - -.tech-comparison { - display: grid; - grid-template-columns: repeat(auto-fit, minmax(400px, 1fr)); - gap: 3rem; -} - -.tech-col h3 { - font-size: 1.5rem; - margin-bottom: 1.5rem; -} - -.tech-col pre { - background: var(--code-bg); - color: var(--code-text); - padding: 1.5rem; - border-radius: 0.75rem; - overflow-x: auto; - margin-bottom: 1rem; - font-size: 0.95rem; - line-height: 1.6; -} - -.tech-col .explanation { - font-size: 1.1rem; - color: var(--text-muted); -} - -/* Demo Section */ -.demo { - padding: 6rem 0; -} - -.demo h2 { - text-align: center; - font-size: 2.5rem; - margin-bottom: 3rem; -} - -.demo-box { - max-width: 700px; - margin: 0 auto; - background: var(--surface); - padding: 3rem; - border-radius: 1rem; - border: 2px solid var(--border); -} - -.demo-box h3 { - font-size: 1.75rem; - margin-bottom: 1rem; -} - -.demo-box ol { - margin: 2rem 0; - padding-left: 1.5rem; -} - -.demo-box li { - margin-bottom: 1rem; - font-size: 1.1rem; -} - -.demo-box code { - background: var(--code-bg); - color: var(--code-text); - padding: 0.25rem 0.5rem; - border-radius: 0.25rem; - font-family: 'Monaco', 'Courier New', monospace; -} - -.demo-box .btn { - margin-top: 2rem; -} - -/* Use Cases */ -.use-cases { - padding: 6rem 0; - background: var(--surface); -} - -.use-cases h2 { - text-align: center; - font-size: 2.5rem; - margin-bottom: 3rem; -} - -.use-case-grid { - display: grid; - grid-template-columns: repeat(auto-fit, minmax(250px, 1fr)); - gap: 2rem; -} - -.use-case { - background: white; - padding: 2rem; - border-radius: 0.75rem; - box-shadow: 0 2px 4px rgba(0,0,0,0.05); -} - -.use-case h3 { - font-size: 1.25rem; - margin-bottom: 0.75rem; - color: var(--primary); -} - -/* Stats */ -.stats { - padding: 6rem 0; - background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); - color: white; -} - -.stats h2 { - text-align: center; - font-size: 2.5rem; - margin-bottom: 3rem; -} - -.stats-grid { - display: grid; - grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); - gap: 3rem; -} - -.stat-card { - text-align: center; -} - -.stat-number { - font-size: 3.5rem; - font-weight: 800; - margin-bottom: 0.5rem; -} - -.stat-label { - font-size: 1.25rem; - opacity: 0.9; -} - -/* Footer */ -.footer { - padding: 4rem 0 2rem; - text-align: center; - background: var(--text); - color: white; -} - -.footer h2 { - font-size: 2rem; - margin-bottom: 1rem; -} - -.footer-links { - margin: 2rem 0; - display: flex; - gap: 2rem; - justify-content: center; - flex-wrap: wrap; -} - -.footer-links a { - color: white; - text-decoration: none; - font-size: 1.1rem; - transition: opacity 0.2s; -} - -.footer-links a:hover { - opacity: 0.7; -} - -.copyright { - margin-top: 2rem; - opacity: 0.7; - font-size: 0.9rem; -} - -/* Responsive */ -@media (max-width: 768px) { - .hero h1 { - font-size: 2.5rem; - } - - .hero .tagline { - font-size: 1.25rem; - } - - .hero .subtitle { - font-size: 1.1rem; - } - - .tech-comparison { - grid-template-columns: 1fr; - } - - .container { - padding: 0 1rem; - } -} diff --git a/avow-protocol/avow-lib/.machine_readable/6a2/ECOSYSTEM.a2ml b/avow-protocol/avow-lib/.machine_readable/6a2/ECOSYSTEM.a2ml deleted file mode 100644 index b165e584..00000000 --- a/avow-protocol/avow-lib/.machine_readable/6a2/ECOSYSTEM.a2ml +++ /dev/null @@ -1,20 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) -# -# ECOSYSTEM.a2ml — Avow Lib ecosystem position -[metadata] -version = "1.0" -last-updated = "2026-04-11" - -[project] -name = "Avow Lib" -purpose = "TODO: Brief purpose statement" -role = "TODO: library|application|tool|framework" - -[position-in-ecosystem] -category = "" - -[related-projects] -projects = [ - # No related projects recorded -] diff --git a/avow-protocol/avow-lib/.machine_readable/6a2/META.a2ml b/avow-protocol/avow-lib/.machine_readable/6a2/META.a2ml deleted file mode 100644 index c741d789..00000000 --- a/avow-protocol/avow-lib/.machine_readable/6a2/META.a2ml +++ /dev/null @@ -1,27 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) -# -# META.a2ml — Avow Lib meta-level information -[metadata] -version = "0.1.0" -last-updated = "2026-04-11" - -[project-info] -license = "PMPL-1.0-or-later" -author = "Jonathan D.A. Jewell (hyperpolymath)" - -[architecture-decisions] -decisions = [ - # No ADRs recorded -] - -[development-practices] -versioning = "SemVer" -documentation = "AsciiDoc" -build-tool = "just" - -[maintenance-axes] -scoping-first = true -axis-1 = "must > intend > like" -axis-2 = "corrective > adaptive > perfective" -axis-3 = "systems > compliance > effects" diff --git a/avow-protocol/avow-lib/.machine_readable/6a2/STATE.a2ml b/avow-protocol/avow-lib/.machine_readable/6a2/STATE.a2ml deleted file mode 100644 index 5a9440a0..00000000 --- a/avow-protocol/avow-lib/.machine_readable/6a2/STATE.a2ml +++ /dev/null @@ -1,38 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) -# -# STATE.a2ml — Avow Lib project state -[metadata] -project = "libstamp" -version = "1.0" -last-updated = "2026-02-04" -status = "active" -session = "converted from scheme — 2026-04-11" - -[project-context] -name = "Libstamp" -purpose = """TODO: Add project description""" -completion-percentage = 0 - -[position] -phase = "development" # design | implementation | testing | maintenance | archived -maturity = "experimental" # experimental | alpha | beta | production | lts - -[route-to-mvp] -milestones = [ - # No milestones recorded -] - -[blockers-and-issues] -issues = [ - # No blockers recorded -] - -[critical-next-actions] -actions = [ - "Update STATE.scm with project details", -] - -[maintenance-status] -last-run-utc = "2026-02-04T00:00:00Z" -last-result = "unknown" # unknown | pass | warn | fail diff --git a/avow-protocol/avow-lib/BUILDING.md b/avow-protocol/avow-lib/BUILDING.md deleted file mode 100644 index 145e30a0..00000000 --- a/avow-protocol/avow-lib/BUILDING.md +++ /dev/null @@ -1,115 +0,0 @@ -# Building libstamp - -## Current Status - -**Core Idris2 types**: ✓ Complete (`src/abi/`) -**Zig FFI implementation**: ✓ Complete (`ffi/zig/`) -**Build system**: ⚠️ Zig version compatibility issue - -## The Zig Version Issue - -The FFI code is written for **Zig 0.13.0**, but your system has **Zig 0.15.2** installed. - -Zig 0.15 is a development version with breaking API changes. The build system API is completely different. - -## Option 1: Downgrade to Zig 0.13.0 (Recommended) - -```bash -# You have asdf installed, so: -asdf install zig 0.13.0 -cd ~/Documents/hyperpolymath-repos/libstamp -asdf local zig 0.13.0 - -# Now build works: -cd ffi/zig -zig build # Build library -zig build test # Run tests -zig build example # Run example -``` - -## Option 2: Skip FFI for MVP - -For the **Telegram bot demo** (your Week 1 goal), you don't actually need the full FFI yet. - -**What you can do instead:** - -1. **Mock the verification functions** in TypeScript/ReScript -2. Build the Telegram bot with mocked verification -3. Prove the UX works -4. Come back and integrate real FFI later - -This gets you to a working demo **faster**. - -### Mock Implementation (TypeScript for Deno) - -```typescript -// mock-stamp.ts - Temporary until Zig FFI is built - -export interface UnsubscribeParams { - url: string; - tested_at: number; - response_code: number; - response_time: number; - token: string; - signature: string; -} - -export function verifyUnsubscribe(params: UnsubscribeParams): boolean { - // Mock implementation - checks basic properties - if (!params.url.startsWith('https://')) return false; - if (params.response_code !== 200) return false; - if (params.response_time >= 200) return false; - - const now = Date.now(); - const age = now - params.tested_at; - if (age > 60000) return false; // > 60 seconds old - - return true; -} - -export function generateProof(params: UnsubscribeParams): string { - return JSON.stringify({ - type: "unsubscribe_verification", - url: params.url, - tested_at: params.tested_at, - response_code: params.response_code, - response_time_ms: params.response_time, - verified: true, - timestamp: Date.now(), - }, null, 2); -} -``` - -This lets you: -- ✓ Build Telegram bot **now** -- ✓ Demo the UX **this week** -- ✓ Show investors/users -- → Add real FFI later (Week 2-3) - -## Option 3: Update build.zig for Zig 0.15 - -If you want to use Zig 0.15, I can research the new API and update `build.zig`. But this will take time. - -## My Recommendation - -**For Week 1 (this week):** -- Use **Option 2** (mock implementation) -- Build Telegram bot with mocked verification -- Get feedback from users - -**For Week 2:** -- Install Zig 0.13.0 (Option 1) -- Build real FFI -- Replace mocks with real verification - -**Why:** Gets you to a demo **faster**. The UX is more important than the implementation for early feedback. - -## Next Steps - -Tell me which option you want: - -1. **"Help me downgrade Zig"** → I'll guide you through asdf setup -2. **"Let's use mocks for now"** → I'll help you build the Telegram bot immediately -3. **"Fix build.zig for 0.15"** → I'll research and update (takes longer) - -What's your priority? diff --git a/avow-protocol/avow-lib/LICENSE b/avow-protocol/avow-lib/LICENSE deleted file mode 100644 index 4d9b782e..00000000 --- a/avow-protocol/avow-lib/LICENSE +++ /dev/null @@ -1,27 +0,0 @@ -POLYMATHEMATICAL META-PUBLIC LICENSE (PMPL) -Version 1.0, or (at your option) any later version - -Copyright (c) 2026 Jonathan D.A. Jewell - -Permission is hereby granted, free of charge, to any person obtaining a copy -of this software and associated documentation files (the "Software"), to deal -in the Software without restriction, including without limitation the rights -to use, copy, modify, merge, publish, distribute, sublicense, and/or sell -copies of the Software, and to permit persons to whom the Software is -furnished to do so, subject to the following conditions: - -The above copyright notice and this permission notice shall be included in all -copies or substantial portions of the Software. - -THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR -IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, -FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE -AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER -LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, -OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE -SOFTWARE. - ---- - -This license is also known as the Palimpsest License. -SPDX-License-Identifier: MPL-2.0 diff --git a/avow-protocol/avow-lib/README.adoc b/avow-protocol/avow-lib/README.adoc deleted file mode 100644 index 2d1e41d8..00000000 --- a/avow-protocol/avow-lib/README.adoc +++ /dev/null @@ -1,221 +0,0 @@ -= avow-lib: Formal Verification Library for Avow Protocol -Jonathan D.A. Jewell -:toc: -:idris2-version: 0.7.0 -:zig-version: 0.13.0 - -== Overview - -*avow-lib* is the core verification library for the Avow protocol (formerly STAMP). It uses *dependent types* to provide *mathematical proofs* of compliance properties that are impossible with traditional type systems. - -== The Core Innovation - -=== What Makes Avow Different? - -[cols="1,1,1,1"] -|=== -|Approach |Type Safety |Memory Safety |*Provable Properties* - -|JSON/CSV -|✗ -|✗ -|✗ - -|Rust/Go -|✓ -|✓ -|✗ - -|Haskell/OCaml -|✓ -|~ -|✗ - -|*Idris2* (Avow) -|✓ -|✓ -|*✓* -|=== - -=== Example: Unsubscribe Link Verification - -*Without dependent types (Rust):* -[source,rust] ----- -struct UnsubscribeLink { - url: String, - tested: bool, // ✗ Can be set to true without testing -} ----- - -*With dependent types (Idris2):* -[source,idris] ----- -record UnsubscribeLink where - url : URL - testedAt : Timestamp - response : HTTPResponse - {auto 0 recentTest : TimeDiff testedAt Now 60000} - {auto 0 success : response.code = OK} - {auto 0 fastResponse : response.responseTime < 200} ----- - -*Result:* You literally cannot compile code that creates an invalid unsubscribe link. - -== Architecture - -Following the hyperpolymath ABI/FFI universal standard: - ----- -avow-lib/ -├── src/ -│ ├── abi/ # Idris2 ABI definitions (CORE) -│ │ ├── Types.idr # Foundational types -│ │ ├── Unsubscribe.idr # Unsubscribe verification -│ │ ├── Consent.idr # Consent chain proofs -│ │ └── RateLimit.idr # Rate limiting proofs -│ └── lib/ # Additional library code -│ -├── ffi/ -│ └── zig/ # Zig FFI implementation -│ ├── build.zig -│ └── src/ -│ └── main.zig # C ABI wrapper -│ -├── generated/ -│ └── abi/ -│ └── *.h # C headers (for compatibility) -│ -└── examples/ - └── basic_verification.idr ----- - -== What Gets Proven - -=== 1. Unsubscribe Verification - -* ✓ URL was tested (not just claimed) -* ✓ Test was recent (< 60 seconds old) -* ✓ Server responded with 200 OK -* ✓ Response was fast (< 200ms) -* ✓ Cryptographically signed - -=== 2. Consent Chain Verification - -* ✓ User actually opted in (double opt-in) -* ✓ Confirmation happened AFTER request -* ✓ Confirmation was timely (< 24 hours) -* ✓ Token is cryptographically valid - -=== 3. Rate Limiting - -* ✓ Sender hasn't exceeded daily limit -* ✓ Limit appropriate for trust level -* ✓ Cannot bypass at runtime - -=== 4. Content Safety - -* ✓ No malware detected -* ✓ No dark patterns -* ✓ Policy compliance verified - -== Why Not Other Languages? - -[cols="1,3"] -|=== -|Language |Limitation - -|Haskell -|Strong types, but cannot prove URL actually works - -|Rust -|Memory safe, but cannot prove algorithmic properties - -|Go -|Simple, but weak type system, no proofs - -|OCaml -|Good types, but not dependent types - -|Coq/Agda -|Theorem provers, not practical for systems programming - -|Idris2 -|*Dependent types + practical systems programming* -|=== - -== Building - -*Requirements:* - -* Idris2 {idris2-version}+ -* Zig {zig-version}+ - -*Build:* -[source,bash] ----- -# Build Idris2 ABI -cd src/abi -idris2 --build - -# Build Zig FFI -cd ../../ffi/zig -zig build ----- - -== Usage Example - -*Rust/Go/Python code using avow-lib via FFI:* - -[source,rust] ----- -// Rust code calling Idris2 verification via Zig FFI -extern "C" { - fn stamp_verify_unsubscribe( - url: *const c_char, - tested_at: u64, - response_code: u16, - response_time: u32, - token: *const c_char, - signature: *const c_char, - ) -> bool; -} - -// This returns false if proofs don't hold -let valid = unsafe { - stamp_verify_unsubscribe( - c_str("https://example.com/unsub"), - 1706630400000, - 200, // OK - 87, // 87ms - c_str("token..."), - c_str("signature..."), - ) -}; - -if valid { - // Proofs checked, message can be delivered - deliver_message(msg); -} ----- - -== Status - -*Current:* Proof of concept - -* [x] Core types defined -* [x] Unsubscribe verification -* [x] Consent chain verification -* [ ] Rate limiting verification -* [ ] Content safety verification -* [ ] Zig FFI implementation -* [ ] C header generation -* [ ] Integration tests - -== License - -PMPL-1.0-or-later - -== Author - -Jonathan D.A. Jewell diff --git a/avow-protocol/avow-lib/examples/deno/stamp_example.js b/avow-protocol/avow-lib/examples/deno/stamp_example.js deleted file mode 100644 index 2c5a8f25..00000000 --- a/avow-protocol/avow-lib/examples/deno/stamp_example.js +++ /dev/null @@ -1,300 +0,0 @@ -#!/usr/bin/env -S deno run --allow-read --allow-ffi -// SPDX-License-Identifier: MPL-2.0 -// Copyright (c) 2026 Jonathan D.A. Jewell -// -// Deno example using libstamp via Deno FFI (port of the former Python -// ctypes example; Python is banned estate-wide). - -import { dirname, fromFileUrl, join } from "jsr:@std/path@^1"; - -// ============================================================================ -// Load Library -// ============================================================================ - -function loadLibstamp() { - let libName; - if (Deno.build.os === "darwin") libName = "libstamp.dylib"; - else if (Deno.build.os === "windows") libName = "stamp.dll"; - else libName = "libstamp.so"; - - const here = dirname(fromFileUrl(import.meta.url)); - const searchPaths = [ - join(here, "..", "..", "ffi", "zig", "zig-out", "lib", libName), - join("/usr/local/lib", libName), - join("/usr/lib", libName), - ]; - - for (const path of searchPaths) { - try { - Deno.statSync(path); - return Deno.dlopen(path, SYMBOLS); - } catch { - // try next - } - } - throw new Error( - `Could not find ${libName}. Build with: cd ffi/zig && zig build`, - ); -} - -const SYMBOLS = { - stamp_verify_unsubscribe: { parameters: ["pointer"], result: "i32" }, - stamp_verify_consent: { parameters: ["pointer"], result: "i32" }, - stamp_verify_rate_limit: { parameters: ["pointer"], result: "i32" }, - stamp_generate_proof: { parameters: ["pointer"], result: "pointer" }, - stamp_free_proof: { parameters: ["pointer"], result: "void" }, - stamp_version: { parameters: [], result: "pointer" }, -}; - -const libstamp = loadLibstamp(); - -// ============================================================================ -// Result codes -// ============================================================================ - -const StampResult = { - SUCCESS: 0, - ERROR_INVALID_URL: -1, - ERROR_TIMEOUT: -2, - ERROR_INVALID_RESPONSE: -3, - ERROR_INVALID_SIGNATURE: -4, - ERROR_RATE_LIMIT_EXCEEDED: -5, - ERROR_CONSENT_INVALID: -6, - ERROR_NULL_POINTER: -7, - ERROR_INTERNAL: -99, - toString(code) { - return ({ - 0: "✓ SUCCESS", - [-1]: "✗ INVALID_URL", - [-2]: "✗ TIMEOUT", - [-3]: "✗ INVALID_RESPONSE", - [-4]: "✗ INVALID_SIGNATURE", - [-5]: "✗ RATE_LIMIT_EXCEEDED", - [-6]: "✗ CONSENT_INVALID", - [-7]: "✗ NULL_POINTER", - [-99]: "✗ INTERNAL_ERROR", - })[code] ?? "✗ UNKNOWN_ERROR"; - }, -}; - -// ============================================================================ -// C struct marshalling (x86-64 SysV natural alignment) -// ============================================================================ - -const enc = new TextEncoder(); - -function cstring(s) { - const bytes = enc.encode(s); - const buf = new Uint8Array(bytes.length + 1); - buf.set(bytes); - return buf; // NUL-terminated; keep a reference so it isn't GC'd -} - -function ptrBig(buf) { - return BigInt(Deno.UnsafePointer.value(Deno.UnsafePointer.of(buf))); -} - -// StampUnsubscribeParams { char* url; u64 tested_at; u16 response_code; -// u32 response_time; char* token; char* signature; } size 40 -function unsubscribeParams({ url, testedAt, responseCode, responseTime, token, signature }) { - const urlB = cstring(url), tokB = cstring(token), sigB = cstring(signature); - const buf = new ArrayBuffer(40); - const dv = new DataView(buf); - dv.setBigUint64(0, ptrBig(urlB), true); - dv.setBigUint64(8, BigInt(testedAt), true); - dv.setUint16(16, responseCode, true); - dv.setUint32(20, responseTime, true); - dv.setBigUint64(24, ptrBig(tokB), true); - dv.setBigUint64(32, ptrBig(sigB), true); - return { buf: new Uint8Array(buf), keep: [urlB, tokB, sigB] }; -} - -// StampConsentParams { u64 initial_request; u64 confirmation; -// char* ip_address; char* token; } size 32 -function consentParams({ initialRequest, confirmation, ipAddress, token }) { - const ipB = cstring(ipAddress), tokB = cstring(token); - const buf = new ArrayBuffer(32); - const dv = new DataView(buf); - dv.setBigUint64(0, BigInt(initialRequest), true); - dv.setBigUint64(8, BigInt(confirmation), true); - dv.setBigUint64(16, ptrBig(ipB), true); - dv.setBigUint64(24, ptrBig(tokB), true); - return { buf: new Uint8Array(buf), keep: [ipB, tokB] }; -} - -// StampRateLimitParams { char* sender_id; u64 account_created; -// u32 messages_today; u32 daily_limit; } size 24 -function rateLimitParams({ senderId, accountCreated, messagesToday, dailyLimit }) { - const idB = cstring(senderId); - const buf = new ArrayBuffer(24); - const dv = new DataView(buf); - dv.setBigUint64(0, ptrBig(idB), true); - dv.setBigUint64(8, BigInt(accountCreated), true); - dv.setUint32(16, messagesToday, true); - dv.setUint32(20, dailyLimit, true); - return { buf: new Uint8Array(buf), keep: [idB] }; -} - -// StampProof { char* data; size_t length; char* signature; } size 24 -function readProof(ptr) { - if (ptr === null) return null; - const view = new Deno.UnsafePointerView(ptr); - const dataPtrVal = view.getBigUint64(0); - const dataPtr = Deno.UnsafePointer.create(dataPtrVal); - return new Deno.UnsafePointerView(dataPtr).getCString(); -} - -// ============================================================================ -// Wrappers -// ============================================================================ - -function getCurrentTimestamp() { - return Date.now(); -} - -function verifyUnsubscribe(args) { - const p = unsubscribeParams(args); - return libstamp.symbols.stamp_verify_unsubscribe(Deno.UnsafePointer.of(p.buf)); -} - -function verifyConsent(args) { - const p = consentParams(args); - return libstamp.symbols.stamp_verify_consent(Deno.UnsafePointer.of(p.buf)); -} - -function verifyRateLimit(args) { - const p = rateLimitParams(args); - return libstamp.symbols.stamp_verify_rate_limit(Deno.UnsafePointer.of(p.buf)); -} - -function generateProof(args) { - const p = unsubscribeParams(args); - const proofPtr = libstamp.symbols.stamp_generate_proof(Deno.UnsafePointer.of(p.buf)); - if (proofPtr === null) return null; - const data = readProof(proofPtr); - libstamp.symbols.stamp_free_proof(proofPtr); - return data; -} - -function getVersion() { - const ptr = libstamp.symbols.stamp_version(); - return new Deno.UnsafePointerView(ptr).getCString(); -} - -// ============================================================================ -// Examples -// ============================================================================ - -function assert(cond, msg) { - if (!cond) throw new Error(`Assertion failed: ${msg}`); -} - -function main() { - console.log("=== STAMP Deno Example ===\n"); - console.log(`Version: ${getVersion()}\n`); - - const now = getCurrentTimestamp(); - - console.log("Example 1: Valid Unsubscribe Link"); - console.log("=================================="); - let result = verifyUnsubscribe({ - url: "https://example.com/unsubscribe", - testedAt: now - 5000, - responseCode: 200, - responseTime: 87, - token: "EXAMPLE-UNSUBSCRIBE-TOKEN", - signature: "EXAMPLE-SIGNATURE", - }); - console.log(`Result: ${StampResult.toString(result)}`); - assert(result === StampResult.SUCCESS, "example 1"); - console.log(); - - const proof = generateProof({ - url: "https://example.com/unsubscribe", - testedAt: now - 5000, - responseCode: 200, - responseTime: 87, - token: "EXAMPLE-UNSUBSCRIBE-TOKEN", - signature: "EXAMPLE-SIGNATURE", - }); - if (proof) { - console.log("Proof generated:"); - console.log(proof); - console.log(); - } - - console.log("Example 2: Invalid URL"); - console.log("======================"); - result = verifyUnsubscribe({ - url: "not_a_url", - testedAt: now, - responseCode: 200, - responseTime: 87, - token: "EXAMPLE-TOKEN", - signature: "EXAMPLE-SIG", - }); - console.log(`Result: ${StampResult.toString(result)}`); - assert(result === StampResult.ERROR_INVALID_URL, "example 2"); - console.log(); - - console.log("Example 3: Valid Consent Chain"); - console.log("==============================="); - const initial = 1706630400000; - const confirmation = initial + 100000; - result = verifyConsent({ - initialRequest: initial, - confirmation, - ipAddress: "192.168.1.100", - token: "EXAMPLE-CONSENT-TOKEN", - }); - console.log(`Initial: ${initial}`); - console.log(`Confirmation: ${confirmation} (+${Math.floor((confirmation - initial) / 1000)} seconds)`); - console.log(`Result: ${StampResult.toString(result)}`); - assert(result === StampResult.SUCCESS, "example 3"); - console.log(); - - console.log("Example 4: Invalid Consent Order"); - console.log("================================="); - result = verifyConsent({ - initialRequest: confirmation, - confirmation: initial, - ipAddress: "192.168.1.100", - token: "EXAMPLE-CONSENT-TOKEN", - }); - console.log(`Result: ${StampResult.toString(result)}`); - assert(result === StampResult.ERROR_CONSENT_INVALID, "example 4"); - console.log(); - - console.log("Example 5: Rate Limit Check"); - console.log("============================"); - const accountAge = now - (45 * 24 * 60 * 60 * 1000); - result = verifyRateLimit({ - senderId: "user_12345", - accountCreated: accountAge, - messagesToday: 150, - dailyLimit: 10000, - }); - const ageDays = Math.floor((now - accountAge) / (24 * 60 * 60 * 1000)); - console.log(`Account age: ${ageDays} days`); - console.log("Messages: 150/10000"); - console.log(`Result: ${StampResult.toString(result)}`); - assert(result === StampResult.SUCCESS, "example 5"); - console.log(); - - console.log("Example 6: Rate Limit Exceeded"); - console.log("==============================="); - result = verifyRateLimit({ - senderId: "spammer", - accountCreated: accountAge, - messagesToday: 10000, - dailyLimit: 10000, - }); - console.log("Messages: 10000/10000"); - console.log(`Result: ${StampResult.toString(result)}`); - assert(result === StampResult.ERROR_RATE_LIMIT_EXCEEDED, "example 6"); - console.log(); - - console.log("All examples passed! ✓"); -} - -main(); diff --git a/avow-protocol/avow-lib/examples/rust/Cargo.lock b/avow-protocol/avow-lib/examples/rust/Cargo.lock deleted file mode 100644 index e5bde4be..00000000 --- a/avow-protocol/avow-lib/examples/rust/Cargo.lock +++ /dev/null @@ -1,16 +0,0 @@ -# This file is automatically @generated by Cargo. -# It is not intended for manual editing. -version = 4 - -[[package]] -name = "libc" -version = "0.2.184" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "48f5d2a454e16a5ea0f4ced81bd44e4cfc7bd3a507b61887c99fd3538b28e4af" - -[[package]] -name = "stamp-rust-example" -version = "1.0.0" -dependencies = [ - "libc", -] diff --git a/avow-protocol/avow-lib/examples/rust/Cargo.toml b/avow-protocol/avow-lib/examples/rust/Cargo.toml deleted file mode 100644 index 863614af..00000000 --- a/avow-protocol/avow-lib/examples/rust/Cargo.toml +++ /dev/null @@ -1,9 +0,0 @@ -[package] -name = "stamp-rust-example" -version = "1.0.0" -edition = "2021" -authors = ["Jonathan D.A. Jewell "] -license = "PMPL-1.0-or-later" - -[dependencies] -libc = "0.2" diff --git a/avow-protocol/avow-lib/examples/rust/src/main.rs b/avow-protocol/avow-lib/examples/rust/src/main.rs deleted file mode 100644 index 02deb5ae..00000000 --- a/avow-protocol/avow-lib/examples/rust/src/main.rs +++ /dev/null @@ -1,331 +0,0 @@ -// SPDX-License-Identifier: MPL-2.0 -// Copyright (c) 2026 Jonathan D.A. Jewell - -//! Rust example using libstamp via FFI - -use std::ffi::{CStr, CString}; -use std::os::raw::{c_char, c_int}; -use std::time::{SystemTime, UNIX_EPOCH}; - -// ============================================================================ -// FFI Bindings -// ============================================================================ - -#[repr(C)] -#[derive(Debug, Copy, Clone, PartialEq)] -#[allow(dead_code)] -enum StampResult { - Success = 0, - ErrorInvalidUrl = -1, - ErrorTimeout = -2, - ErrorInvalidResponse = -3, - ErrorInvalidSignature = -4, - ErrorRateLimitExceeded = -5, - ErrorConsentInvalid = -6, - ErrorNullPointer = -7, - ErrorInternal = -99, -} - -impl From for StampResult { - fn from(value: c_int) -> Self { - match value { - 0 => StampResult::Success, - -1 => StampResult::ErrorInvalidUrl, - -2 => StampResult::ErrorTimeout, - -3 => StampResult::ErrorInvalidResponse, - -4 => StampResult::ErrorInvalidSignature, - -5 => StampResult::ErrorRateLimitExceeded, - -6 => StampResult::ErrorConsentInvalid, - -7 => StampResult::ErrorNullPointer, - _ => StampResult::ErrorInternal, - } - } -} - -#[repr(C)] -struct StampUnsubscribeParams { - url: *const c_char, - tested_at: u64, - response_code: u16, - response_time: u32, - token: *const c_char, - signature: *const c_char, -} - -#[repr(C)] -struct StampConsentParams { - initial_request: u64, - confirmation: u64, - ip_address: *const c_char, - token: *const c_char, -} - -#[repr(C)] -struct StampRateLimitParams { - sender_id: *const c_char, - account_created: u64, - messages_today: u32, - daily_limit: u32, -} - -#[repr(C)] -struct StampProof { - data: *mut c_char, - length: usize, - signature: *mut c_char, -} - -extern "C" { - fn stamp_verify_unsubscribe(params: *const StampUnsubscribeParams) -> c_int; - fn stamp_verify_consent(params: *const StampConsentParams) -> c_int; - fn stamp_verify_rate_limit(params: *const StampRateLimitParams) -> c_int; - fn stamp_generate_proof(params: *const StampUnsubscribeParams) -> *mut StampProof; - fn stamp_free_proof(proof: *mut StampProof); - fn stamp_version() -> *const c_char; -} - -// ============================================================================ -// Safe Rust Wrappers -// ============================================================================ - -fn get_current_timestamp() -> u64 { - SystemTime::now() - .duration_since(UNIX_EPOCH) - .unwrap() - .as_millis() as u64 -} - -fn verify_unsubscribe( - url: &str, - tested_at: u64, - response_code: u16, - response_time: u32, - token: &str, - signature: &str, -) -> StampResult { - let url_c = CString::new(url).unwrap(); - let token_c = CString::new(token).unwrap(); - let signature_c = CString::new(signature).unwrap(); - - let params = StampUnsubscribeParams { - url: url_c.as_ptr(), - tested_at, - response_code, - response_time, - token: token_c.as_ptr(), - signature: signature_c.as_ptr(), - }; - - let result = unsafe { stamp_verify_unsubscribe(¶ms) }; - StampResult::from(result) -} - -fn verify_consent( - initial_request: u64, - confirmation: u64, - ip_address: &str, - token: &str, -) -> StampResult { - let ip_c = CString::new(ip_address).unwrap(); - let token_c = CString::new(token).unwrap(); - - let params = StampConsentParams { - initial_request, - confirmation, - ip_address: ip_c.as_ptr(), - token: token_c.as_ptr(), - }; - - let result = unsafe { stamp_verify_consent(¶ms) }; - StampResult::from(result) -} - -fn verify_rate_limit( - sender_id: &str, - account_created: u64, - messages_today: u32, - daily_limit: u32, -) -> StampResult { - let sender_c = CString::new(sender_id).unwrap(); - - let params = StampRateLimitParams { - sender_id: sender_c.as_ptr(), - account_created, - messages_today, - daily_limit, - }; - - let result = unsafe { stamp_verify_rate_limit(¶ms) }; - StampResult::from(result) -} - -fn generate_proof( - url: &str, - tested_at: u64, - response_code: u16, - response_time: u32, - token: &str, - signature: &str, -) -> Option { - let url_c = CString::new(url).unwrap(); - let token_c = CString::new(token).unwrap(); - let signature_c = CString::new(signature).unwrap(); - - let params = StampUnsubscribeParams { - url: url_c.as_ptr(), - tested_at, - response_code, - response_time, - token: token_c.as_ptr(), - signature: signature_c.as_ptr(), - }; - - let proof_ptr = unsafe { stamp_generate_proof(¶ms) }; - if proof_ptr.is_null() { - return None; - } - - unsafe { - let proof = &*proof_ptr; - let proof_str = CStr::from_ptr(proof.data).to_string_lossy().into_owned(); - stamp_free_proof(proof_ptr); - Some(proof_str) - } -} - -fn get_version() -> String { - unsafe { - CStr::from_ptr(stamp_version()) - .to_string_lossy() - .into_owned() - } -} - -// ============================================================================ -// Examples -// ============================================================================ - -fn main() { - println!("=== STAMP Rust Example ===\n"); - println!("Version: {}\n", get_version()); - - // Example 1: Valid unsubscribe link - println!("Example 1: Valid Unsubscribe Link"); - println!("=================================="); - - let now = get_current_timestamp(); - let result = verify_unsubscribe( - "https://example.com/unsubscribe", - now - 5000, // 5 seconds ago - 200, - 87, - "abc123def456", - "valid_signature", - ); - - println!("Result: {:?}", result); - assert_eq!(result, StampResult::Success); - println!("✓ Verification passed\n"); - - // Generate and display proof - if let Some(proof) = generate_proof( - "https://example.com/unsubscribe", - now - 5000, - 200, - 87, - "abc123def456", - "valid_signature", - ) { - println!("Proof generated:"); - println!("{}\n", proof); - } - - // Example 2: Invalid URL - println!("Example 2: Invalid URL"); - println!("======================"); - - let result = verify_unsubscribe( - "not_a_url", - now, - 200, - 87, - "token", - "sig", - ); - - println!("Result: {:?}", result); - assert_eq!(result, StampResult::ErrorInvalidUrl); - println!("✓ Correctly rejected invalid URL\n"); - - // Example 3: Valid consent chain - println!("Example 3: Valid Consent Chain"); - println!("==============================="); - - let initial = 1706630400000u64; - let confirmation = initial + 100000; // 100 seconds later - - let result = verify_consent( - initial, - confirmation, - "192.168.1.100", - "consent_token", - ); - - println!("Initial: {}", initial); - println!("Confirmation: {} (+{} seconds)", confirmation, (confirmation - initial) / 1000); - println!("Result: {:?}", result); - assert_eq!(result, StampResult::Success); - println!("✓ Consent verified\n"); - - // Example 4: Invalid consent (confirmation before request) - println!("Example 4: Invalid Consent Order"); - println!("================================="); - - let result = verify_consent( - confirmation, // Swapped! - initial, - "192.168.1.100", - "consent_token", - ); - - println!("Result: {:?}", result); - assert_eq!(result, StampResult::ErrorConsentInvalid); - println!("✓ Correctly rejected invalid consent order\n"); - - // Example 5: Rate limit check - println!("Example 5: Rate Limit Check"); - println!("============================"); - - let account_age = now - (45 * 24 * 60 * 60 * 1000); // 45 days ago - - let result = verify_rate_limit( - "user_12345", - account_age, - 150, // messages today - 10000, // daily limit - ); - - println!("Account age: {} days", (now - account_age) / (24 * 60 * 60 * 1000)); - println!("Messages: 150/10000"); - println!("Result: {:?}", result); - assert_eq!(result, StampResult::Success); - println!("✓ Within rate limits\n"); - - // Example 6: Rate limit exceeded - println!("Example 6: Rate Limit Exceeded"); - println!("==============================="); - - let result = verify_rate_limit( - "spammer", - account_age, - 10000, // At limit - 10000, - ); - - println!("Messages: 10000/10000"); - println!("Result: {:?}", result); - assert_eq!(result, StampResult::ErrorRateLimitExceeded); - println!("✓ Correctly detected rate limit violation\n"); - - println!("All examples passed! ✓"); -} diff --git a/avow-protocol/avow-lib/ffi/zig/README.adoc b/avow-protocol/avow-lib/ffi/zig/README.adoc deleted file mode 100644 index a3de982f..00000000 --- a/avow-protocol/avow-lib/ffi/zig/README.adoc +++ /dev/null @@ -1,397 +0,0 @@ -= libstamp Zig FFI -Jonathan D.A. Jewell -:toc: -:zig-version: 0.13.0 - -== Overview - -This directory contains the Zig FFI implementation for libstamp, providing a stable C ABI that can be called from any language. - -== Building - -=== Prerequisites - -* Zig {zig-version}+ (https://ziglang.org/download/) -* Basic understanding of C FFI - -=== Build Commands - -[source,bash] ----- -# Build library -zig build - -# Run tests -zig build test - -# Run example -zig build example - -# Install system-wide (optional) -zig build --prefix /usr/local ----- - -**Output:** -``` -zig-out/ -├── lib/ -│ ├── libstamp.so # Linux -│ ├── libstamp.dylib # macOS -│ └── stamp.dll # Windows -└── include/ - └── stamp.h # C header -``` - -== Usage - -=== From C/C++ - -[source,c] ----- -#include -#include - -int main() { - StampUnsubscribeParams params = { - .url = "https://example.com/unsub", - .tested_at = 1706630400000, - .response_code = 200, - .response_time = 87, - .token = "abc123...", - .signature = "sig...", - }; - - StampResult result = stamp_verify_unsubscribe(¶ms); - if (result == STAMP_SUCCESS) { - printf("Valid unsubscribe link!\n"); - } else { - printf("Verification failed: %d\n", result); - } - - return 0; -} ----- - -**Compile:** -[source,bash] ----- -gcc -o myapp myapp.c -L./zig-out/lib -lstamp -I./zig-out/include -export LD_LIBRARY_PATH=./zig-out/lib # Linux -export DYLD_LIBRARY_PATH=./zig-out/lib # macOS -./myapp ----- - -=== From Rust - -See `examples/rust/` for complete example. - -[source,rust] ----- -use std::ffi::CString; - -#[link(name = "stamp")] -extern "C" { - fn stamp_verify_unsubscribe(params: *const StampUnsubscribeParams) -> c_int; -} - -fn main() { - let url = CString::new("https://example.com/unsub").unwrap(); - let token = CString::new("abc123...").unwrap(); - let sig = CString::new("signature...").unwrap(); - - let params = StampUnsubscribeParams { - url: url.as_ptr(), - tested_at: 1706630400000, - response_code: 200, - response_time: 87, - token: token.as_ptr(), - signature: sig.as_ptr(), - }; - - let result = unsafe { stamp_verify_unsubscribe(¶ms) }; - println!("Result: {}", result); -} ----- - -**Build:** -[source,bash] ----- -cd examples/rust -cargo build -cargo run ----- - -=== From JavaScript/Deno - -See `examples/deno/` for the complete, runnable example. - -[source,javascript] ----- -// Deno FFI -const libstamp = Deno.dlopen("./zig-out/lib/libstamp.so", { - stamp_verify_unsubscribe: { - parameters: ["pointer"], - result: "i32", - }, -}); - -const params = new Uint8Array(64); // Serialize params -const result = libstamp.symbols.stamp_verify_unsubscribe(params); -console.log(`Result: ${result}`); ----- - -**Run:** -[source,bash] ----- -deno run --allow-read --allow-ffi examples/deno/stamp_example.js ----- - -== API Reference - -=== Result Codes - -[cols="1,1,3"] -|=== -|Code |Name |Description - -|0 -|STAMP_SUCCESS -|Verification passed - -|-1 -|STAMP_ERROR_INVALID_URL -|URL format is invalid (not HTTPS) - -|-2 -|STAMP_ERROR_TIMEOUT -|Test was not recent OR response was too slow - -|-3 -|STAMP_ERROR_INVALID_RESPONSE -|HTTP response code was not 200 OK - -|-4 -|STAMP_ERROR_INVALID_SIGNATURE -|Cryptographic signature is invalid - -|-5 -|STAMP_ERROR_RATE_LIMIT_EXCEEDED -|Sender has exceeded daily message limit - -|-6 -|STAMP_ERROR_CONSENT_INVALID -|Consent chain is invalid (timing or token) - -|-7 -|STAMP_ERROR_NULL_POINTER -|NULL pointer passed to function - -|-99 -|STAMP_ERROR_INTERNAL -|Internal error -|=== - -=== Functions - -==== stamp_verify_unsubscribe() - -Verifies an unsubscribe link is valid. - -**Checks:** -* URL format is valid (HTTPS) -* Test was recent (< 60 seconds ago) -* HTTP response was 200 OK -* Response time was fast (< 200ms) -* Signature is valid - -[source,c] ----- -StampResult stamp_verify_unsubscribe(const StampUnsubscribeParams* params); ----- - -==== stamp_verify_consent() - -Verifies a consent chain (double opt-in). - -**Checks:** -* Confirmation happened AFTER initial request -* Confirmation was timely (< 24 hours) -* Token is cryptographically valid - -[source,c] ----- -StampResult stamp_verify_consent(const StampConsentParams* params); ----- - -==== stamp_verify_rate_limit() - -Verifies sender is within rate limits. - -**Checks:** -* Messages today < daily limit -* Daily limit appropriate for account age: - - < 30 days: max 1,000/day - - 30-90 days: max 10,000/day - - 90+ days: max 100,000/day - -[source,c] ----- -StampResult stamp_verify_rate_limit(const StampRateLimitParams* params); ----- - -==== stamp_generate_proof() - -Generates a JSON proof of verification. - -**Returns:** Pointer to `StampProof` (must be freed with `stamp_free_proof()`) - -[source,c] ----- -StampProof* stamp_generate_proof(const StampUnsubscribeParams* params); ----- - -==== stamp_free_proof() - -Frees a proof returned by `stamp_generate_proof()`. - -[source,c] ----- -void stamp_free_proof(StampProof* proof); ----- - -==== stamp_version() - -Returns library version string. - -[source,c] ----- -const char* stamp_version(void); ----- - -== Testing - -Run the test suite: - -[source,bash] ----- -zig build test ----- - -Tests include: -* Valid unsubscribe verification -* Invalid URL detection -* Slow response detection -* Valid consent chain -* Invalid consent order detection -* Rate limit compliance -* Rate limit exceeded detection -* Proof generation and freeing - -== Architecture - -[source] ----- -Application (Rust/Python/JS) - ↓ - C FFI (stamp.h) - ↓ - Zig FFI (main.zig) - ↓ - Idris2 ABI (../../../src/abi/*.idr) - ↓ - Dependent Type Proofs ----- - -The Zig layer: -1. Provides stable C ABI -2. Handles memory management -3. Wraps Idris2 verification functions -4. Exports to all languages - -## Performance - -**Benchmarks** (Release build, Intel i7): -* Unsubscribe verification: ~500 ns -* Consent verification: ~300 ns -* Rate limit verification: ~200 ns -* Proof generation: ~50 µs - -**Memory:** -* Zero allocations per verification (stack-only) -* Proof generation allocates once (freed by caller) - -== Troubleshooting - -=== Library not found - -**Linux:** -[source,bash] ----- -export LD_LIBRARY_PATH=/path/to/zig-out/lib:$LD_LIBRARY_PATH ----- - -**macOS:** -[source,bash] ----- -export DYLD_LIBRARY_PATH=/path/to/zig-out/lib:$DYLD_LIBRARY_PATH ----- - -**Or install system-wide:** -[source,bash] ----- -zig build --prefix /usr/local -sudo ldconfig # Linux only ----- - -=== Build errors - -1. **Check Zig version:** - ```bash - zig version # Should be 0.13.0+ - ``` - -2. **Clean and rebuild:** - ```bash - rm -rf zig-cache zig-out - zig build - ``` - -3. **Check for compiler errors:** - ```bash - zig build 2>&1 | less - ``` - -=== Runtime errors - -1. **Enable debug logging:** - ```bash - zig build -Doptimize=Debug - ``` - -2. **Run with valgrind** (memory leaks): - ```bash - valgrind --leak-check=full ./zig-out/bin/example - ``` - -3. **Check ABI compatibility:** - ```bash - nm zig-out/lib/libstamp.so | grep stamp_ - ``` - -== Contributing - -See `../../CONTRIBUTING.md` for contribution guidelines. - -**Code style:** -* Follow Zig standard library style -* Run `zig fmt` before committing -* Add tests for new features -* Document public API - -== License - -PMPL-1.0-or-later - -== Author - -Jonathan D.A. Jewell diff --git a/avow-protocol/avow-lib/ffi/zig/build.zig b/avow-protocol/avow-lib/ffi/zig/build.zig deleted file mode 100644 index 7c4cfd4c..00000000 --- a/avow-protocol/avow-lib/ffi/zig/build.zig +++ /dev/null @@ -1,63 +0,0 @@ -// SPDX-License-Identifier: MPL-2.0 -// Copyright (c) 2026 Jonathan D.A. Jewell - -const std = @import("std"); - -pub fn build(b: *std.Build) void { - const target = b.standardTargetOptions(.{}); - const optimize = b.standardOptimizeOption(.{}); - - // For Zig 0.15, we compile to object files and link separately - // This creates libstamp.a (static) which can be used by other programs - - const stamp_mod = b.addModule("stamp", .{ - .root_source_file = b.path("src/main.zig"), - .target = target, - .optimize = optimize, - }); - - // Build as static library for now (shared libs need different approach in 0.15) - const lib = b.addStaticLibrary(.{ - .name = "stamp", - .root_source_file = b.path("src/main.zig"), - .target = target, - .optimize = optimize, - }); - lib.linkLibC(); - b.installArtifact(lib); - - // Install C header file - const install_header = b.addInstallFile( - b.path("src/stamp.h"), - "include/stamp.h", - ); - b.getInstallStep().dependOn(&install_header.step); - - // Unit tests - const tests = b.addTest(.{ - .root_source_file = b.path("src/main.zig"), - .target = target, - .optimize = optimize, - }); - - const run_tests = b.addRunArtifact(tests); - const test_step = b.step("test", "Run unit tests"); - test_step.dependOn(&run_tests.step); - - // Example program - const example = b.addExecutable(.{ - .name = "example", - .root_source_file = b.path("src/example.zig"), - .target = target, - .optimize = optimize, - }); - - example.root_module.addImport("main", stamp_mod); - example.linkLibrary(lib); - example.linkLibC(); - b.installArtifact(example); - - const run_example = b.addRunArtifact(example); - const example_step = b.step("example", "Run example program"); - example_step.dependOn(&run_example.step); -} diff --git a/avow-protocol/avow-lib/ffi/zig/src/example.zig b/avow-protocol/avow-lib/ffi/zig/src/example.zig deleted file mode 100644 index a2b74cfe..00000000 --- a/avow-protocol/avow-lib/ffi/zig/src/example.zig +++ /dev/null @@ -1,144 +0,0 @@ -// SPDX-License-Identifier: MPL-2.0 -// Copyright (c) 2026 Jonathan D.A. Jewell - -//! Example program demonstrating libstamp usage - -const std = @import("std"); -const stamp = @import("main.zig"); - -pub fn main() !void { - const stdout = std.io.getStdOut().writer(); - - try stdout.print("=== STAMP Verification Library Example ===\n\n", .{}); - try stdout.print("Version: {s}\n\n", .{stamp.stamp_version()}); - - // Example 1: Verify unsubscribe link - try stdout.print("Example 1: Unsubscribe Verification\n", .{}); - try stdout.print("====================================\n", .{}); - - const unsub_params = stamp.StampUnsubscribeParams{ - .url = "https://example.com/unsubscribe", - .tested_at = getCurrentTimestamp() - 5000, // 5 seconds ago - .response_code = 200, - .response_time = 87, - .token = "abc123def456...", // Would be real token - .signature = "valid_signature_here", // Would be real signature - }; - - const unsub_result = stamp.stamp_verify_unsubscribe(&unsub_params); - try stdout.print("URL: {s}\n", .{unsub_params.url}); - try stdout.print("Response: {d} (in {d}ms)\n", .{ - unsub_params.response_code, - unsub_params.response_time, - }); - try stdout.print("Result: {s}\n\n", .{resultToString(unsub_result)}); - - // Generate proof - if (unsub_result == .success) { - const proof = stamp.stamp_generate_proof(&unsub_params); - if (proof) |p| { - try stdout.print("Proof generated:\n{s}\n\n", .{p.data}); - stamp.stamp_free_proof(proof); - } - } - - // Example 2: Verify consent chain - try stdout.print("Example 2: Consent Chain Verification\n", .{}); - try stdout.print("======================================\n", .{}); - - const consent_params = stamp.StampConsentParams{ - .initial_request = 1706630400000, - .confirmation = 1706630500000, // 100 seconds later - .ip_address = "192.168.1.100", - .token = "consent_token_123", - }; - - const consent_result = stamp.stamp_verify_consent(&consent_params); - try stdout.print("Initial request: {d}\n", .{consent_params.initial_request}); - try stdout.print("Confirmation: {d}\n", .{consent_params.confirmation}); - try stdout.print("Time diff: {d} seconds\n", .{ - (consent_params.confirmation - consent_params.initial_request) / 1000, - }); - try stdout.print("Result: {s}\n\n", .{resultToString(consent_result)}); - - // Example 3: Verify rate limits - try stdout.print("Example 3: Rate Limit Verification\n", .{}); - try stdout.print("===================================\n", .{}); - - const now = getCurrentTimestamp(); - const rate_params = stamp.StampRateLimitParams{ - .sender_id = "user_12345", - .account_created = now - (45 * 24 * 60 * 60 * 1000), // 45 days ago - .messages_today = 150, - .daily_limit = 10000, - }; - - const rate_result = stamp.stamp_verify_rate_limit(&rate_params); - const account_age_days = (now - rate_params.account_created) / (24 * 60 * 60 * 1000); - try stdout.print("Sender: {s}\n", .{rate_params.sender_id}); - try stdout.print("Account age: {d} days\n", .{account_age_days}); - try stdout.print("Messages today: {d}/{d}\n", .{ - rate_params.messages_today, - rate_params.daily_limit, - }); - try stdout.print("Result: {s}\n\n", .{resultToString(rate_result)}); - - // Example 4: Error cases - try stdout.print("Example 4: Error Cases\n", .{}); - try stdout.print("======================\n", .{}); - - // Invalid URL - const bad_url_params = stamp.StampUnsubscribeParams{ - .url = "not_a_valid_url", - .tested_at = now, - .response_code = 200, - .response_time = 87, - .token = "token", - .signature = "sig", - }; - const bad_url_result = stamp.stamp_verify_unsubscribe(&bad_url_params); - try stdout.print("Invalid URL: {s}\n", .{resultToString(bad_url_result)}); - - // Slow response - const slow_params = stamp.StampUnsubscribeParams{ - .url = "https://example.com/unsub", - .tested_at = now, - .response_code = 200, - .response_time = 5000, // 5 seconds! - .token = "token", - .signature = "sig", - }; - const slow_result = stamp.stamp_verify_unsubscribe(&slow_params); - try stdout.print("Slow response: {s}\n", .{resultToString(slow_result)}); - - // Rate limit exceeded - const exceeded_params = stamp.StampRateLimitParams{ - .sender_id = "spammer", - .account_created = now - (10 * 24 * 60 * 60 * 1000), // 10 days old - .messages_today = 1000, // At limit - .daily_limit = 1000, - }; - const exceeded_result = stamp.stamp_verify_rate_limit(&exceeded_params); - try stdout.print("Rate limit exceeded: {s}\n", .{resultToString(exceeded_result)}); - - try stdout.print("\nAll examples completed!\n", .{}); -} - -fn getCurrentTimestamp() u64 { - const ns = std.time.nanoTimestamp(); - return @intCast(@divFloor(ns, std.time.ns_per_ms)); -} - -fn resultToString(result: stamp.StampResult) []const u8 { - return switch (result) { - .success => "✓ SUCCESS", - .error_invalid_url => "✗ INVALID_URL", - .error_timeout => "✗ TIMEOUT", - .error_invalid_response => "✗ INVALID_RESPONSE", - .error_invalid_signature => "✗ INVALID_SIGNATURE", - .error_rate_limit_exceeded => "✗ RATE_LIMIT_EXCEEDED", - .error_consent_invalid => "✗ CONSENT_INVALID", - .error_null_pointer => "✗ NULL_POINTER", - .error_internal => "✗ INTERNAL_ERROR", - }; -} diff --git a/avow-protocol/avow-lib/ffi/zig/src/main.zig b/avow-protocol/avow-lib/ffi/zig/src/main.zig deleted file mode 100644 index 5f235525..00000000 --- a/avow-protocol/avow-lib/ffi/zig/src/main.zig +++ /dev/null @@ -1,478 +0,0 @@ -// SPDX-License-Identifier: MPL-2.0 -// Copyright (c) 2026 Jonathan D.A. Jewell - -//! STAMP FFI Implementation -//! -//! This module provides C-compatible FFI bindings for the STAMP verification library. -//! It wraps Idris2 verification functions and provides a stable ABI. - -const std = @import("std"); - -// ============================================================================ -// Types -// ============================================================================ - -/// Result codes for verification functions -pub const StampResult = enum(c_int) { - success = 0, - error_invalid_url = -1, - error_timeout = -2, - error_invalid_response = -3, - error_invalid_signature = -4, - error_rate_limit_exceeded = -5, - error_consent_invalid = -6, - error_null_pointer = -7, - error_internal = -99, -}; - -/// Unsubscribe link verification parameters -pub const StampUnsubscribeParams = extern struct { - /// URL to verify (null-terminated C string) - url: [*:0]const u8, - - /// When the URL was tested (Unix timestamp in milliseconds) - tested_at: u64, - - /// HTTP response code (200, 404, etc.) - response_code: u16, - - /// Response time in milliseconds - response_time: u32, - - /// Cryptographic token (null-terminated C string, 64 chars) - token: [*:0]const u8, - - /// Signature (null-terminated C string) - signature: [*:0]const u8, -}; - -/// Consent chain verification parameters -pub const StampConsentParams = extern struct { - /// Initial opt-in request timestamp (Unix milliseconds) - initial_request: u64, - - /// Confirmation timestamp (Unix milliseconds) - confirmation: u64, - - /// IP address (null-terminated C string) - ip_address: [*:0]const u8, - - /// Confirmation token (null-terminated C string) - token: [*:0]const u8, -}; - -/// Rate limit verification parameters -pub const StampRateLimitParams = extern struct { - /// Sender identifier (null-terminated C string) - sender_id: [*:0]const u8, - - /// Account creation timestamp (Unix milliseconds) - account_created: u64, - - /// Number of messages sent today - messages_today: u32, - - /// Daily limit for this account - daily_limit: u32, -}; - -/// Verification proof (returned to caller, must be freed) -pub const StampProof = extern struct { - /// Proof data (JSON format) - data: [*:0]u8, - - /// Length of proof data - length: usize, - - /// Signature over proof data - signature: [*:0]u8, -}; - -// ============================================================================ -// Internal Helpers -// ============================================================================ - -/// Current timestamp (milliseconds since Unix epoch) -fn getCurrentTimestamp() u64 { - const ns = std.time.nanoTimestamp(); - return @intCast(@divFloor(ns, std.time.ns_per_ms)); -} - -/// Validate URL format (basic check) -fn isValidUrl(url: [*:0]const u8) bool { - const url_slice = std.mem.span(url); - if (url_slice.len < 10) return false; // Minimum: "https://x" - if (!std.mem.startsWith(u8, url_slice, "https://")) return false; - return true; -} - -/// Validate timestamp is recent (within last 60 seconds) -fn isRecentTimestamp(timestamp: u64) bool { - const now = getCurrentTimestamp(); - const diff = if (now > timestamp) now - timestamp else timestamp - now; - return diff < 60000; // 60 seconds -} - -// ============================================================================ -// FFI Functions (C ABI) -// ============================================================================ - -/// Verify an unsubscribe link -/// -/// Returns: -/// - 0 (success) if the unsubscribe link is valid -/// - Negative error code otherwise -/// -/// Example: -/// ```c -/// StampUnsubscribeParams params = { -/// .url = "https://example.com/unsub", -/// .tested_at = 1706630400000, -/// .response_code = 200, -/// .response_time = 87, -/// .token = "abc123...", -/// .signature = "sig...", -/// }; -/// int result = stamp_verify_unsubscribe(¶ms); -/// if (result == 0) { -/// printf("Valid unsubscribe link\n"); -/// } -/// ``` -export fn stamp_verify_unsubscribe(params: ?*const StampUnsubscribeParams) callconv(.C) StampResult { - // Null pointer check - const p = params orelse return .error_null_pointer; - - // Validate URL format - if (!isValidUrl(p.url)) { - return .error_invalid_url; - } - - // Verify test was recent (within last 60 seconds) - if (!isRecentTimestamp(p.tested_at)) { - return .error_timeout; - } - - // Verify HTTP response code is 200 OK - if (p.response_code != 200) { - return .error_invalid_response; - } - - // Verify response time is fast (< 200ms) - if (p.response_time >= 200) { - return .error_timeout; - } - - // TODO: Verify cryptographic signature - // For now, just check signature is not empty - const sig_slice = std.mem.span(p.signature); - if (sig_slice.len == 0) { - return .error_invalid_signature; - } - - // All checks passed - return .success; -} - -/// Verify a consent chain (double opt-in) -/// -/// Returns: -/// - 0 (success) if consent is valid -/// - Negative error code otherwise -/// -/// Example: -/// ```c -/// StampConsentParams params = { -/// .initial_request = 1706630400000, -/// .confirmation = 1706630500000, // 100 seconds later -/// .ip_address = "192.168.1.100", -/// .token = "token...", -/// }; -/// int result = stamp_verify_consent(¶ms); -/// ``` -export fn stamp_verify_consent(params: ?*const StampConsentParams) callconv(.C) StampResult { - const p = params orelse return .error_null_pointer; - - // Verify confirmation happened AFTER initial request - if (p.confirmation <= p.initial_request) { - return .error_consent_invalid; - } - - // Verify confirmation was timely (within 24 hours) - const time_diff = p.confirmation - p.initial_request; - if (time_diff > 86400000) { // 24 hours in milliseconds - return .error_consent_invalid; - } - - // TODO: Verify token is cryptographically valid for this IP - const token_slice = std.mem.span(p.token); - if (token_slice.len == 0) { - return .error_invalid_signature; - } - - return .success; -} - -/// Verify rate limit compliance -/// -/// Returns: -/// - 0 (success) if within rate limits -/// - Negative error code otherwise -/// -/// Example: -/// ```c -/// StampRateLimitParams params = { -/// .sender_id = "user123", -/// .account_created = 1704067200000, // 30 days ago -/// .messages_today = 50, -/// .daily_limit = 1000, -/// }; -/// int result = stamp_verify_rate_limit(¶ms); -/// ``` -export fn stamp_verify_rate_limit(params: ?*const StampRateLimitParams) callconv(.C) StampResult { - const p = params orelse return .error_null_pointer; - - // Verify sender ID is not empty - const sender_slice = std.mem.span(p.sender_id); - if (sender_slice.len == 0) { - return .error_null_pointer; - } - - // Verify messages today doesn't exceed daily limit - if (p.messages_today >= p.daily_limit) { - return .error_rate_limit_exceeded; - } - - // Calculate account age in days - const now = getCurrentTimestamp(); - const age_ms = now - p.account_created; - const age_days = age_ms / (24 * 60 * 60 * 1000); - - // Verify daily limit is appropriate for account age - // New accounts (< 30 days): max 1000/day - // Established (30-90 days): max 10000/day - // Veteran (90+ days): max 100000/day - const max_allowed_limit: u32 = if (age_days < 30) - 1000 - else if (age_days < 90) - 10000 - else - 100000; - - if (p.daily_limit > max_allowed_limit) { - return .error_rate_limit_exceeded; - } - - return .success; -} - -/// Generate a verification proof (for display to users) -/// -/// The proof includes all verification details in JSON format. -/// Caller must free the returned proof with stamp_free_proof(). -/// -/// Returns: -/// - Non-null pointer to StampProof on success -/// - NULL on error -/// -/// Example: -/// ```c -/// StampProof* proof = stamp_generate_proof(¶ms); -/// if (proof != NULL) { -/// printf("Proof: %s\n", proof->data); -/// stamp_free_proof(proof); -/// } -/// ``` -export fn stamp_generate_proof(params: ?*const StampUnsubscribeParams) callconv(.C) ?*StampProof { - const p = params orelse return null; - - // Allocate proof structure - var allocator = std.heap.c_allocator; - const proof = allocator.create(StampProof) catch return null; - - // Generate JSON proof (simplified for now) - const json_template = - \\{{ - \\ "type": "unsubscribe_verification", - \\ "url": "{s}", - \\ "tested_at": {d}, - \\ "response_code": {d}, - \\ "response_time_ms": {d}, - \\ "verified": true - \\}} - ; - - const url_slice = std.mem.span(p.url); - const json = std.fmt.allocPrintZ(allocator, json_template, .{ - url_slice, - p.tested_at, - p.response_code, - p.response_time, - }) catch return null; - - // Generate signature (simplified - would use real crypto) - const sig = std.fmt.allocPrintZ(allocator, "sig_{d}", .{ - getCurrentTimestamp(), - }) catch { - allocator.free(json); - return null; - }; - - proof.* = .{ - .data = json.ptr, - .length = json.len, - .signature = sig.ptr, - }; - - return proof; -} - -/// Free a proof returned by stamp_generate_proof() -/// -/// Example: -/// ```c -/// StampProof* proof = stamp_generate_proof(¶ms); -/// stamp_free_proof(proof); -/// ``` -export fn stamp_free_proof(proof: ?*StampProof) callconv(.C) void { - const p = proof orelse return; - - var allocator = std.heap.c_allocator; - - // Free data - if (p.data != null) { - const data_slice = std.mem.span(p.data); - allocator.free(data_slice); - } - - // Free signature - if (p.signature != null) { - const sig_slice = std.mem.span(p.signature); - allocator.free(sig_slice); - } - - // Free proof structure itself - allocator.destroy(p); -} - -/// Get version string -/// -/// Returns: "libstamp v1.0.0" -export fn stamp_version() callconv(.C) [*:0]const u8 { - return "libstamp v1.0.0"; -} - -// ============================================================================ -// Tests -// ============================================================================ - -test "verify unsubscribe - valid" { - const params = StampUnsubscribeParams{ - .url = "https://example.com/unsubscribe", - .tested_at = getCurrentTimestamp() - 5000, // 5 seconds ago - .response_code = 200, - .response_time = 87, - .token = "abc123...", - .signature = "valid_signature", - }; - - const result = stamp_verify_unsubscribe(¶ms); - try std.testing.expectEqual(StampResult.success, result); -} - -test "verify unsubscribe - invalid URL" { - const params = StampUnsubscribeParams{ - .url = "not_a_url", - .tested_at = getCurrentTimestamp(), - .response_code = 200, - .response_time = 87, - .token = "abc123...", - .signature = "valid_signature", - }; - - const result = stamp_verify_unsubscribe(¶ms); - try std.testing.expectEqual(StampResult.error_invalid_url, result); -} - -test "verify unsubscribe - slow response" { - const params = StampUnsubscribeParams{ - .url = "https://example.com/unsubscribe", - .tested_at = getCurrentTimestamp(), - .response_code = 200, - .response_time = 5000, // 5 seconds - too slow - .token = "abc123...", - .signature = "valid_signature", - }; - - const result = stamp_verify_unsubscribe(¶ms); - try std.testing.expectEqual(StampResult.error_timeout, result); -} - -test "verify consent - valid" { - const params = StampConsentParams{ - .initial_request = 1706630400000, - .confirmation = 1706630500000, // 100 seconds later - .ip_address = "192.168.1.100", - .token = "valid_token", - }; - - const result = stamp_verify_consent(¶ms); - try std.testing.expectEqual(StampResult.success, result); -} - -test "verify consent - confirmation before request" { - const params = StampConsentParams{ - .initial_request = 1706630500000, - .confirmation = 1706630400000, // Before request! - .ip_address = "192.168.1.100", - .token = "valid_token", - }; - - const result = stamp_verify_consent(¶ms); - try std.testing.expectEqual(StampResult.error_consent_invalid, result); -} - -test "verify rate limit - within limits" { - const params = StampRateLimitParams{ - .sender_id = "user123", - .account_created = getCurrentTimestamp() - (30 * 24 * 60 * 60 * 1000), // 30 days ago - .messages_today = 50, - .daily_limit = 1000, - }; - - const result = stamp_verify_rate_limit(¶ms); - try std.testing.expectEqual(StampResult.success, result); -} - -test "verify rate limit - exceeded" { - const params = StampRateLimitParams{ - .sender_id = "user123", - .account_created = getCurrentTimestamp() - (30 * 24 * 60 * 60 * 1000), - .messages_today = 1000, - .daily_limit = 1000, // Exactly at limit = exceeded - }; - - const result = stamp_verify_rate_limit(¶ms); - try std.testing.expectEqual(StampResult.error_rate_limit_exceeded, result); -} - -test "generate and free proof" { - const params = StampUnsubscribeParams{ - .url = "https://example.com/unsubscribe", - .tested_at = getCurrentTimestamp(), - .response_code = 200, - .response_time = 87, - .token = "abc123...", - .signature = "valid_signature", - }; - - const proof = stamp_generate_proof(¶ms); - try std.testing.expect(proof != null); - - if (proof) |p| { - try std.testing.expect(p.length > 0); - try std.testing.expect(p.data != null); - try std.testing.expect(p.signature != null); - - stamp_free_proof(proof); - } -} diff --git a/avow-protocol/avow-lib/ffi/zig/src/stamp.h b/avow-protocol/avow-lib/ffi/zig/src/stamp.h deleted file mode 100644 index 0561112d..00000000 --- a/avow-protocol/avow-lib/ffi/zig/src/stamp.h +++ /dev/null @@ -1,241 +0,0 @@ -/* SPDX-License-Identifier: MPL-2.0 */ -/* Copyright (c) 2026 Jonathan D.A. Jewell */ - -/** - * @file stamp.h - * @brief STAMP Protocol FFI Header - * - * C-compatible header for the STAMP verification library. - * Use this header to integrate STAMP with C, C++, Rust, Python, or any - * language with C FFI support. - */ - -#ifndef STAMP_H -#define STAMP_H - -#include -#include - -#ifdef __cplusplus -extern "C" { -#endif - -/** - * @brief Result codes for STAMP verification functions - */ -typedef enum { - STAMP_SUCCESS = 0, - STAMP_ERROR_INVALID_URL = -1, - STAMP_ERROR_TIMEOUT = -2, - STAMP_ERROR_INVALID_RESPONSE = -3, - STAMP_ERROR_INVALID_SIGNATURE = -4, - STAMP_ERROR_RATE_LIMIT_EXCEEDED = -5, - STAMP_ERROR_CONSENT_INVALID = -6, - STAMP_ERROR_NULL_POINTER = -7, - STAMP_ERROR_INTERNAL = -99, -} StampResult; - -/** - * @brief Parameters for unsubscribe link verification - */ -typedef struct { - /** URL to verify (null-terminated) */ - const char* url; - - /** When the URL was tested (Unix timestamp in milliseconds) */ - uint64_t tested_at; - - /** HTTP response code (200, 404, etc.) */ - uint16_t response_code; - - /** Response time in milliseconds */ - uint32_t response_time; - - /** Cryptographic token (null-terminated, 64 chars) */ - const char* token; - - /** Signature (null-terminated) */ - const char* signature; -} StampUnsubscribeParams; - -/** - * @brief Parameters for consent chain verification - */ -typedef struct { - /** Initial opt-in request timestamp (Unix milliseconds) */ - uint64_t initial_request; - - /** Confirmation timestamp (Unix milliseconds) */ - uint64_t confirmation; - - /** IP address (null-terminated) */ - const char* ip_address; - - /** Confirmation token (null-terminated) */ - const char* token; -} StampConsentParams; - -/** - * @brief Parameters for rate limit verification - */ -typedef struct { - /** Sender identifier (null-terminated) */ - const char* sender_id; - - /** Account creation timestamp (Unix milliseconds) */ - uint64_t account_created; - - /** Number of messages sent today */ - uint32_t messages_today; - - /** Daily limit for this account */ - uint32_t daily_limit; -} StampRateLimitParams; - -/** - * @brief Verification proof (JSON format) - * - * Must be freed with stamp_free_proof() after use. - */ -typedef struct { - /** Proof data (JSON format, null-terminated) */ - char* data; - - /** Length of proof data */ - size_t length; - - /** Signature over proof data (null-terminated) */ - char* signature; -} StampProof; - -/** - * @brief Verify an unsubscribe link - * - * Checks that: - * - URL format is valid (HTTPS) - * - Test was recent (within last 60 seconds) - * - HTTP response was 200 OK - * - Response time was fast (< 200ms) - * - Signature is valid - * - * @param params Verification parameters - * @return STAMP_SUCCESS if valid, error code otherwise - * - * @example - * ```c - * StampUnsubscribeParams params = { - * .url = "https://example.com/unsub", - * .tested_at = 1706630400000, - * .response_code = 200, - * .response_time = 87, - * .token = "abc123...", - * .signature = "sig...", - * }; - * int result = stamp_verify_unsubscribe(¶ms); - * if (result == STAMP_SUCCESS) { - * printf("Valid unsubscribe link\n"); - * } - * ``` - */ -StampResult stamp_verify_unsubscribe(const StampUnsubscribeParams* params); - -/** - * @brief Verify a consent chain (double opt-in) - * - * Checks that: - * - Confirmation happened AFTER initial request - * - Confirmation was timely (within 24 hours) - * - Token is cryptographically valid - * - * @param params Consent verification parameters - * @return STAMP_SUCCESS if valid, error code otherwise - * - * @example - * ```c - * StampConsentParams params = { - * .initial_request = 1706630400000, - * .confirmation = 1706630500000, // 100 seconds later - * .ip_address = "192.168.1.100", - * .token = "token...", - * }; - * int result = stamp_verify_consent(¶ms); - * ``` - */ -StampResult stamp_verify_consent(const StampConsentParams* params); - -/** - * @brief Verify rate limit compliance - * - * Checks that: - * - Messages today doesn't exceed daily limit - * - Daily limit is appropriate for account age - * - * Account age determines max daily limit: - * - < 30 days: max 1,000/day - * - 30-90 days: max 10,000/day - * - 90+ days: max 100,000/day - * - * @param params Rate limit parameters - * @return STAMP_SUCCESS if within limits, error code otherwise - * - * @example - * ```c - * StampRateLimitParams params = { - * .sender_id = "user123", - * .account_created = 1704067200000, // 30 days ago - * .messages_today = 50, - * .daily_limit = 1000, - * }; - * int result = stamp_verify_rate_limit(¶ms); - * ``` - */ -StampResult stamp_verify_rate_limit(const StampRateLimitParams* params); - -/** - * @brief Generate a verification proof - * - * Creates a JSON proof that can be displayed to users or stored. - * The proof includes all verification details and a cryptographic signature. - * - * @param params Verification parameters - * @return Pointer to StampProof on success, NULL on error - * - * @warning Caller must free the returned proof with stamp_free_proof() - * - * @example - * ```c - * StampProof* proof = stamp_generate_proof(¶ms); - * if (proof != NULL) { - * printf("Proof: %s\n", proof->data); - * stamp_free_proof(proof); - * } - * ``` - */ -StampProof* stamp_generate_proof(const StampUnsubscribeParams* params); - -/** - * @brief Free a proof returned by stamp_generate_proof() - * - * @param proof Proof to free (can be NULL) - * - * @example - * ```c - * StampProof* proof = stamp_generate_proof(¶ms); - * // ... use proof ... - * stamp_free_proof(proof); - * ``` - */ -void stamp_free_proof(StampProof* proof); - -/** - * @brief Get library version string - * - * @return Version string (e.g., "libstamp v1.0.0") - */ -const char* stamp_version(void); - -#ifdef __cplusplus -} -#endif - -#endif /* STAMP_H */ diff --git a/avow-protocol/avow-lib/src/abi/Consent.idr b/avow-protocol/avow-lib/src/abi/Consent.idr deleted file mode 100644 index c14dc311..00000000 --- a/avow-protocol/avow-lib/src/abi/Consent.idr +++ /dev/null @@ -1,111 +0,0 @@ --- SPDX-License-Identifier: MPL-2.0 --- Copyright (c) 2026 Jonathan D.A. Jewell - -||| Consent chain verification with proofs -||| Demonstrates proving the user actually opted in (not from a bought list) -module STAMP.ABI.Consent - -import STAMP.ABI.Types - -%default total - --------------------------------------------------------------------------------- --- Consent Chain with Cryptographic Proof --------------------------------------------------------------------------------- - -||| A consent chain that PROVES the user actually opted in -||| -||| Current problem: Spammers claim "user consented" with no proof -||| - Bought email lists -||| - Scraped from websites -||| - "Pre-checked" boxes -||| - Fake double-opt-in -||| -||| STAMP solution: Cryptographically provable consent chain -public export -data ConsentChain : Type where - ||| Double opt-in: User requested + confirmed - DoubleOptIn : - (initialRequest : Timestamp) -> - (confirmationClick : Timestamp) -> - (ipAddress : IPAddress) -> - (confirmationToken : CryptoToken) -> - - ||| Proof 1: Confirmation happened AFTER initial request - {auto 0 ordered : confirmationClick > initialRequest} -> - - ||| Proof 2: Confirmation was timely (within 24 hours) - {auto 0 timely : TimeDiff initialRequest confirmationClick 86400000} -> - - ||| Proof 3: Token is cryptographically valid for this IP - {auto 0 tokenValid : VerifyToken confirmationToken ipAddress} -> - - ConsentChain - - ||| Single opt-in: User explicitly requested (lower trust) - SingleOptIn : - (requestTime : Timestamp) -> - (ipAddress : IPAddress) -> - (requestToken : CryptoToken) -> - - ||| Proof: Recent request (within last hour) - {auto 0 recent : TimeDiff requestTime Now 3600000} -> - - ConsentChain - -||| Placeholder: Token verification for IP -public export -VerifyToken : CryptoToken -> IPAddress -> Type -VerifyToken token ip = () -- Would verify HMAC(ip, secret) == token - --------------------------------------------------------------------------------- --- What You CANNOT Do (Spammer Tactics Blocked) --------------------------------------------------------------------------------- - -{- -Spammer tactic 1: Claim double opt-in without proof - ✗ Cannot construct DoubleOptIn without valid token - ✗ Cannot fake timestamps (must be ordered) - ✗ Cannot bypass timely check - -Spammer tactic 2: Use bought email list - ✗ No consent chain exists for bought emails - ✗ Cannot construct ConsentChain without actual opt-in event - -Spammer tactic 3: Pre-checked box "consent" - ✗ No cryptographic token from actual user click - ✗ Cannot fake token (would need to know secret key) - -Spammer tactic 4: Scrape emails from websites - ✗ Website display ≠ opt-in consent - ✗ No ConsentChain provable - -THIS IS IMPOSSIBLE WITHOUT DEPENDENT TYPES. -Other languages can store timestamps, but can't PROVE the ordering. --} - --------------------------------------------------------------------------------- --- Example: Valid Consent Chain --------------------------------------------------------------------------------- - -||| Valid double opt-in flow -exampleValidConsent : ConsentChain -exampleValidConsent = - DoubleOptIn - 1706630400000 -- User filled form - 1706630500000 -- User clicked email link 100s later - (IPv4 192 168 1 100) - (MkToken "abc123...token...xyz789") - -||| Invalid: Confirmation before request (DOES NOT COMPILE) --- exampleInvalidConsent : ConsentChain --- exampleInvalidConsent = --- DoubleOptIn --- 1706630500000 -- Request at T+100 --- 1706630400000 -- Confirmation at T+0 --- (IPv4 192 168 1 100) --- (MkToken "token...") --- --- Compilation error: --- Cannot satisfy constraint: 1706630400000 > 1706630500000 --- (Confirmation must be AFTER request) diff --git a/avow-protocol/avow-lib/src/abi/Types.idr b/avow-protocol/avow-lib/src/abi/Types.idr deleted file mode 100644 index 2189fa2a..00000000 --- a/avow-protocol/avow-lib/src/abi/Types.idr +++ /dev/null @@ -1,168 +0,0 @@ --- SPDX-License-Identifier: MPL-2.0 --- Copyright (c) 2026 Jonathan D.A. Jewell - -||| Core types for STAMP protocol verification -||| This module defines the foundational types with dependent type proofs -module STAMP.ABI.Types - -import Data.Nat -import Data.String -import Data.List - -%default total - --------------------------------------------------------------------------------- --- Primitive Types --------------------------------------------------------------------------------- - -||| A URL with proven format validity -public export -data URL : Type where - MkURL : (urlString : String) -> - {auto 0 validFormat : IsValidURLFormat urlString} -> - URL - -||| An IP address -public export -data IPAddress : Type where - IPv4 : (a : Nat) -> (b : Nat) -> (c : Nat) -> (d : Nat) -> - {auto 0 valid : (a < 256, b < 256, c < 256, d < 256)} -> - IPAddress - IPv6 : String -> IPAddress -- Simplified for now - -||| Timestamp in milliseconds since Unix epoch -public export -Timestamp : Type -Timestamp = Nat - -||| Cryptographic token (simplified - would use proper crypto in production) -public export -data CryptoToken : Type where - MkToken : (value : String) -> - {auto 0 validLength : LengthIs value 64} -> - CryptoToken - -||| Cryptographic signature -public export -data CryptoSignature : Type where - MkSignature : (value : String) -> - {auto 0 validFormat : IsValidSignature value} -> - CryptoSignature - -||| HTTP response code -public export -data HTTPResponseCode : Type where - OK : HTTPResponseCode -- 200 - BadRequest : HTTPResponseCode -- 400 - NotFound : HTTPResponseCode -- 404 - InternalServerError : HTTPResponseCode -- 500 - -||| HTTP response with timing -public export -record HTTPResponse where - constructor MkHTTPResponse - code : HTTPResponseCode - responseTime : Nat -- in milliseconds - --------------------------------------------------------------------------------- --- Proof Predicates (would be implemented in separate modules) --------------------------------------------------------------------------------- - -||| Placeholder: URL format validation -public export -IsValidURLFormat : String -> Type -IsValidURLFormat s = () -- Simplified: would check https://, valid domain, etc. - -||| Placeholder: String length check -public export -LengthIs : String -> Nat -> Type -LengthIs s n = () -- Would verify length(s) == n - -||| Placeholder: Signature format validation -public export -IsValidSignature : String -> Type -IsValidSignature s = () -- Would verify hex format, length, etc. - -||| Placeholder: Cryptographic signature verification -public export -VerifySignature : CryptoSignature -> CryptoToken -> Type -VerifySignature sig token = () -- Would perform actual crypto verification - -||| Time difference predicate -public export -data TimeDiff : Timestamp -> Timestamp -> Nat -> Type where - MkTimeDiff : (t1 : Timestamp) -> (t2 : Timestamp) -> (diff : Nat) -> - {auto 0 correctDiff : (t2 - t1 = diff) || (t1 - t2 = diff)} -> - TimeDiff t1 t2 diff - --------------------------------------------------------------------------------- --- Sender Identity Types --------------------------------------------------------------------------------- - -||| Unique sender identifier -public export -data SenderID : Type where - MkSenderID : String -> SenderID - -||| Trust level based on account age -public export -data TrustLevel : Type where - Untrusted : TrustLevel -- < 30 days - Apprentice : TrustLevel -- 30-90 days - Trusted : TrustLevel -- 90-365 days - Veteran : TrustLevel -- 365+ days - -||| Sender identity with time-based reputation -public export -record SenderIdentity where - constructor MkSender - id : SenderID - registeredAt : Timestamp - trustLevel : TrustLevel - dailyLimit : Nat - publicKey : CryptoToken - - ||| Proof that trust level matches account age - {auto 0 trustLevelValid : TrustLevelMatchesAge trustLevel registeredAt} - -||| Placeholder: Trust level validation -public export -TrustLevelMatchesAge : TrustLevel -> Timestamp -> Type -TrustLevelMatchesAge level regTime = () -- Would check age constraints - --------------------------------------------------------------------------------- --- Message Types --------------------------------------------------------------------------------- - -||| Email address -public export -data EmailAddress : Type where - MkEmail : String -> EmailAddress - -||| Message content (simplified) -public export -record MessageContent where - constructor MkContent - subject : String - body : String - from : EmailAddress - to : EmailAddress - -||| Current timestamp (would be IO action in real implementation) -public export -Now : Timestamp -Now = 1706630400000 -- Placeholder: 2026-01-30 - --------------------------------------------------------------------------------- --- Export all types --------------------------------------------------------------------------------- - -public export -%inline -getURLString : URL -> String -getURLString (MkURL s) = s - -public export -%inline -getTokenValue : CryptoToken -> String -getTokenValue (MkToken v) = v diff --git a/avow-protocol/avow-lib/src/abi/Unsubscribe.idr b/avow-protocol/avow-lib/src/abi/Unsubscribe.idr deleted file mode 100644 index 80382096..00000000 --- a/avow-protocol/avow-lib/src/abi/Unsubscribe.idr +++ /dev/null @@ -1,192 +0,0 @@ --- SPDX-License-Identifier: MPL-2.0 --- Copyright (c) 2026 Jonathan D.A. Jewell - -||| Unsubscribe link with formal verification -||| This module demonstrates the CORE VALUE of dependent types: -||| We don't just store an unsubscribe URL - we PROVE it works -module STAMP.ABI.Unsubscribe - -import STAMP.ABI.Types - -%default total - --------------------------------------------------------------------------------- --- Unsubscribe Link with Proofs --------------------------------------------------------------------------------- - -||| An unsubscribe link that is PROVEN to work -||| -||| This is the key innovation: Without dependent types, you can only SAY -||| "this unsubscribe link works." With dependent types, you PROVE it. -||| -||| Compare to other approaches: -||| - JSON: {"unsubscribe": "https://..."} -- Just a string, no verification -||| - Haskell: data Unsub = Unsub URL -- Type-safe, but doesn't prove it works -||| - Idris2: See below -- PROVES the URL was tested and works -public export -record UnsubscribeLink where - constructor MkUnsubscribeLink - - ||| The URL to click - url : URL - - ||| When it was tested - testedAt : Timestamp - - ||| The HTTP response we got when testing - testResponse : HTTPResponse - - ||| Cryptographic token for verification - token : CryptoToken - - ||| Signature proving this test actually happened - signature : CryptoSignature - - -- Here's the magic: These proofs are REQUIRED to construct an UnsubscribeLink - -- You CANNOT create one without providing evidence that these hold - - ||| Proof 1: The test was recent (within last 60 seconds) - {auto 0 recentTest : TimeDiff testedAt Now 60000} - - ||| Proof 2: The server responded with 200 OK - {auto 0 success : testResponse.code = OK} - - ||| Proof 3: The response was fast (< 200ms) - {auto 0 fastResponse : testResponse.responseTime < 200} - - ||| Proof 4: The signature is cryptographically valid - {auto 0 validSignature : VerifySignature signature token} - -||| What this means in practice: -||| -||| WITHOUT dependent types (Rust, Haskell, Go): -||| struct UnsubscribeLink { url: String } -||| // Anyone can create this with ANY URL -||| let fake = UnsubscribeLink { url: "https://doesnt-exist.com" }; -||| // ✗ No verification that it works -||| -||| WITH dependent types (Idris2): -||| let fake = MkUnsubscribeLink -||| (MkURL "https://doesnt-exist.com") -||| Now -||| (MkHTTPResponse NotFound 5000) -- Took 5 seconds, returned 404 -||| token -||| sig -||| // ✗ COMPILATION ERROR: Cannot prove fastResponse (5000 < 200 is false) -||| // ✗ COMPILATION ERROR: Cannot prove success (NotFound ≠ OK) -||| -||| YOU LITERALLY CANNOT COMPILE CODE THAT CREATES AN INVALID UNSUBSCRIBE LINK - --------------------------------------------------------------------------------- --- Unsubscribe Test Result --------------------------------------------------------------------------------- - -||| Result of testing an unsubscribe URL -||| This is what you get BEFORE creating an UnsubscribeLink -public export -data UnsubscribeTestResult : Type where - ||| Test succeeded - can construct UnsubscribeLink - TestSuccess : (url : URL) -> - (testedAt : Timestamp) -> - (response : HTTPResponse) -> - (token : CryptoToken) -> - (signature : CryptoSignature) -> - {auto 0 recent : TimeDiff testedAt Now 60000} -> - {auto 0 ok : response.code = OK} -> - {auto 0 fast : response.responseTime < 200} -> - {auto 0 valid : VerifySignature signature token} -> - UnsubscribeTestResult - - ||| Test failed - cannot construct UnsubscribeLink - TestFailure : (url : URL) -> - (reason : String) -> -- "timeout", "404", "500", etc. - UnsubscribeTestResult - -||| Convert successful test to UnsubscribeLink -||| This is safe because TestSuccess already has the proofs -public export -toUnsubscribeLink : UnsubscribeTestResult -> Maybe UnsubscribeLink -toUnsubscribeLink (TestSuccess url time resp tok sig) = - Just (MkUnsubscribeLink url time resp tok sig) -toUnsubscribeLink (TestFailure _ _) = Nothing - --------------------------------------------------------------------------------- --- Example Usage (would be in examples/) --------------------------------------------------------------------------------- - -||| Example: This COMPILES (all proofs satisfied) -exampleValidUnsubscribe : UnsubscribeLink -exampleValidUnsubscribe = - MkUnsubscribeLink - (MkURL "https://example.com/unsubscribe") - 1706630400000 -- Now - (MkHTTPResponse OK 87) -- 87ms response time - (MkToken "abc123...64chars...xyz789") - (MkSignature "signature...") - -||| Example: This DOES NOT COMPILE (proof obligation violated) --- exampleInvalidUnsubscribe : UnsubscribeLink --- exampleInvalidUnsubscribe = --- MkUnsubscribeLink --- (MkURL "https://fake.com/unsub") --- 1706630400000 --- (MkHTTPResponse NotFound 5000) -- ✗ NotFound ≠ OK --- (MkToken "abc...") --- (MkSignature "sig...") --- --- Compilation error: --- Cannot satisfy constraint: NotFound = OK --- Cannot satisfy constraint: 5000 < 200 - --------------------------------------------------------------------------------- --- Comparison: What Other Languages Can't Do --------------------------------------------------------------------------------- - -{- -JSON (no types): - { - "unsubscribe": "https://example.com/unsub", - "tested": true - } - ✗ Can fake "tested": true - ✗ No proof it actually works - ✗ No timestamp validation - -Haskell (strong types, not dependent): - data UnsubscribeLink = UnsubscribeLink { - url :: URL, - tested :: Bool - } - ✓ Type-safe - ✗ Can set tested = True without actually testing - ✗ No proof the URL works - ✗ No timestamp validation - -Rust (memory safe, not proof): - struct UnsubscribeLink { - url: Url, - tested_at: u64, - response_code: u16, - } - ✓ Memory safe - ✗ Can set response_code = 200 without testing - ✗ No proof the timestamp is recent - ✗ No cryptographic verification - -Idris2 (dependent types = proofs): - record UnsubscribeLink where - url : URL - testedAt : Timestamp - response : HTTPResponse - {auto 0 recent : ...} - {auto 0 success : response.code = OK} - {auto 0 fast : ...} - ✓ Type-safe - ✓ Memory safe - ✓ PROVEN to work (mathematically) - ✓ Cannot fake proofs - ✓ Verified at compile time - ✓ Cryptographically signed - -THIS IS WHY STAMP NEEDS DEPENDENT TYPES. --} diff --git a/avow-protocol/avow-lib/tests/ConsentTests.idr b/avow-protocol/avow-lib/tests/ConsentTests.idr deleted file mode 100644 index aad3c731..00000000 --- a/avow-protocol/avow-lib/tests/ConsentTests.idr +++ /dev/null @@ -1,92 +0,0 @@ --- SPDX-License-Identifier: MPL-2.0 --- Copyright (c) 2026 Jonathan D.A. Jewell - -||| Tests for STAMP.ABI.Consent -||| Positive tests construct valid ConsentChain values. Negative tests -||| are commented out with the compile-error they produce — each one -||| documents a spammer tactic blocked at the type level. -module STAMP.ABI.ConsentTests - -import STAMP.ABI.Types -import STAMP.ABI.Consent - -%default total - --------------------------------------------------------------------------------- --- Positive tests — must typecheck --------------------------------------------------------------------------------- - -||| A valid double opt-in with proper timing -testValidDoubleOptIn : ConsentChain -testValidDoubleOptIn = - DoubleOptIn - 1706630400000 -- initial request - 1706630500000 -- confirmation 100s later - (IPv4 10 0 0 1) - (MkToken "valid-token-abc-123") - -||| A double opt-in at the boundary (just under 24h) -testBoundary24h : ConsentChain -testBoundary24h = - DoubleOptIn - 1706630400000 - 1706716799000 -- 86399 seconds later (< 24h) - (IPv4 10 0 0 2) - (MkToken "boundary-token") - -||| Single opt-in (lower-trust variant) -testSingleOptIn : ConsentChain -testSingleOptIn = - SingleOptIn - 1706630400000 - (IPv4 10 0 0 3) - (MkToken "single-opt-token") - -||| Imported example should still be constructible -testReusesExample : ConsentChain -testReusesExample = exampleValidConsent - --------------------------------------------------------------------------------- --- Negative tests — documented by commented-out code --------------------------------------------------------------------------------- - -{- --- Test N1: confirmation BEFORE request — must NOT typecheck. -testBadOrder : ConsentChain -testBadOrder = - DoubleOptIn - 1706630500000 -- request at T+100 - 1706630400000 -- "confirmation" at T+0 - (IPv4 10 0 0 4) - (MkToken "bad-order") --- Expected compile error: --- Cannot satisfy constraint: 1706630400000 > 1706630500000 --} - -{- --- Test N2: confirmation 48h after request — must NOT typecheck. -testTooSlow : ConsentChain -testTooSlow = - DoubleOptIn - 1706630400000 - 1706803200000 -- 48h later, > 86400000ms window - (IPv4 10 0 0 5) - (MkToken "too-slow") --- Expected compile error: --- Cannot satisfy constraint: TimeDiff 1706630400000 1706803200000 86400000 --} - --------------------------------------------------------------------------------- --- Run marker (for "just test") --------------------------------------------------------------------------------- - -||| Anchor function — if this compiles, all positive tests above typecheck. -export -runConsentTests : IO () -runConsentTests = do - putStrLn "ConsentTests: 4 positive cases compiled" - putStrLn " testValidDoubleOptIn" - putStrLn " testBoundary24h" - putStrLn " testSingleOptIn" - putStrLn " testReusesExample" - putStrLn "ConsentTests: 2 negative cases documented (see comments)" diff --git a/avow-protocol/avow-lib/tests/Main.idr b/avow-protocol/avow-lib/tests/Main.idr deleted file mode 100644 index 33ec2736..00000000 --- a/avow-protocol/avow-lib/tests/Main.idr +++ /dev/null @@ -1,12 +0,0 @@ --- SPDX-License-Identifier: MPL-2.0 -||| Test runner for avow-lib -module Main - -import STAMP.ABI.ConsentTests -import STAMP.ABI.UnsubscribeTests - -main : IO () -main = do - runConsentTests - runUnsubscribeTests - putStrLn "avow-lib tests: OK" diff --git a/avow-protocol/avow-lib/tests/UnsubscribeTests.idr b/avow-protocol/avow-lib/tests/UnsubscribeTests.idr deleted file mode 100644 index a0f2ce75..00000000 --- a/avow-protocol/avow-lib/tests/UnsubscribeTests.idr +++ /dev/null @@ -1,43 +0,0 @@ --- SPDX-License-Identifier: MPL-2.0 --- Copyright (c) 2026 Jonathan D.A. Jewell - -||| Tests for STAMP.ABI.Unsubscribe — GDPR-critical unsubscribe-link checks -module STAMP.ABI.UnsubscribeTests - -import STAMP.ABI.Types -import STAMP.ABI.Unsubscribe - -%default total - --------------------------------------------------------------------------------- --- Positive tests --------------------------------------------------------------------------------- - -||| Imported library example should construct -testReusesExample : UnsubscribeLink -testReusesExample = exampleValidUnsubscribe - -||| After a successful test, the link is extractable -testToLinkSome : Maybe UnsubscribeLink -> Bool -testToLinkSome (Just _) = True -testToLinkSome Nothing = False - --------------------------------------------------------------------------------- --- Negative tests — documented --------------------------------------------------------------------------------- - -{- --- Test N1: link without one-click support — should fail GDPR compliance. --- (Concrete error depends on Unsubscribe.idr's invariants; fill in once --- the module's public API stabilises.) --} - --------------------------------------------------------------------------------- --- Run marker --------------------------------------------------------------------------------- - -export -runUnsubscribeTests : IO () -runUnsubscribeTests = do - putStrLn "UnsubscribeTests: imported exampleValidUnsubscribe" - putStrLn "UnsubscribeTests: negative cases pending API finalisation" diff --git a/avow-protocol/avow-social-media-design.adoc b/avow-protocol/avow-social-media-design.adoc deleted file mode 100644 index 420343e5..00000000 --- a/avow-protocol/avow-social-media-design.adoc +++ /dev/null @@ -1,723 +0,0 @@ -= STAMP for Social Media Platforms -Jonathan D.A. Jewell -:toc: -:toclevels: 3 - -== Executive Summary - -*STAMP Protocol adapted for social media platforms to combat fake profiles, bot accounts, and astroturfing through formal verification of account properties.* - -=== Key Innovation - -Use dependent types to prove account authenticity properties: - -* *Time-locked reputation* - Accounts cannot instantly gain high reputation -* *Verified human signals* - Multiple independent verification sources -* *Rate limit compliance* - Posting frequency mathematically bounded -* *Content provenance* - Chain of trust for content origins - -=== Target Platforms - -[cols="1,2,2,1"] -|=== -|Platform |Problem |STAMP Solution |Market - -|Dating Apps -|90% fake profiles, safety risk -|Proven human verification chains -|$3B+ market - -|Twitter/X -|Bot armies, election interference -|Time-locked reputation proofs -|$5B+ ad market - -|Reddit -|Astroturfing, coordinated manipulation -|Proven independent accounts -|$800M+ market - -|TikTok/YouTube -|Fake engagement, view bots -|Verified engagement chains -|$100B+ market -|=== - -== Technical Architecture - -=== Core Types (Idris2) - -[source,idris] ----- --- Account with provable properties -record VerifiedAccount where - constructor MkAccount - accountId : AccountId - createdAt : Timestamp - verificationSources : List VerificationSource - reputationScore : Nat - postingHistory : List Post - - -- Dependent type proofs - {auto 0 ageProof : TimeSince createdAt >= MinAccountAge} - {auto 0 multiSource : length verificationSources >= 2} - {auto 0 rateLimit : PostRate postingHistory <= MaxRate (TimeSince createdAt)} - {auto 0 reputationProof : reputationScore = ComputeReputation postingHistory} - --- Cannot create account without satisfying all proofs --- Literally impossible at type level ----- - -=== Verification Sources - -Multiple independent sources prove humanness: - -[cols="1,2,1,2"] -|=== -|Source |What It Proves |Trust Level |Example - -|Email Verification -|Control of email address -|Low (bots can get emails) -|Gmail, Outlook - -|Phone Verification -|Control of phone number -|Medium (SIM farms exist) -|SMS code - -|Biometric Verification -|Unique human attributes -|High (hard to fake) -|FaceID, fingerprint - -|Social Verification -|Vouched by real humans -|High (web of trust) -|3+ verified users vouch - -|Document Verification -|Government-issued ID -|Very High (KYC-level) -|Passport, driver's license - -|Behavioral Analysis -|Human-like patterns -|Medium (ML-based) -|Typing patterns, mouse movements - -|Financial Verification -|Control of bank account -|High (costly for bots) -|Small deposit verification - -|Domain Verification -|Control of domain -|Medium (orgs only) -|DNS TXT record -|=== - -=== Time-Locked Reputation - -*Key Innovation:* Reputation cannot be instantly purchased or faked. - -[source,idris] ----- --- Reputation is a function of time and verified actions -data Reputation : Timestamp -> Nat -> Type where - NewAccount : (created : Timestamp) - -> Reputation created 0 - - EarnedReputation : - (prev : Reputation t1 n1) -> - (action : VerifiedAction) -> - (time : Timestamp) -> - {auto 0 timeElapsed : time >= t1 + MinActionInterval} -> - {auto 0 actionValid : VerifyAction action = Valid} -> - Reputation time (n1 + ActionValue action) - --- Result: Cannot compile code that grants instant reputation --- Bots must wait minimum time intervals between actions ----- - -=== Example: Dating App Integration - -==== Current Problem - -* 90% of profiles on some platforms are fake -* Scammers, catfish, bots -* Safety risk (romance scams, blackmail) -* Users lose trust → platform dies - -==== STAMP Solution - -[source,idris] ----- -record DatingProfile where - account : VerifiedAccount - photos : List (Photo, ProofOfConsent) - bio : String - - -- Dating-specific proofs - {auto 0 photoVerification : All photos HasFaceMatch account.biometric} - {auto 0 ageVerification : account.age >= LegalAge} - {auto 0 locationProof : account.location = VerifiedLocation} - {auto 0 notBanned : account.accountId `notElem` BannedAccounts} - --- Fake profiles literally cannot be created --- Type system prevents compilation ----- - -==== Implementation Path - -*Phase 1: Pilot (Weeks 9-20)* - -1. Partner with mid-size dating app (Hinge, Bumble, Feeld) -2. Implement STAMP verification as opt-in "Verified Human" badge -3. Measure: - - Fake profile reduction (target: 80-90%) - - User trust increase - - Match quality improvement - - Safety incidents decrease - -*Phase 2: Expansion (Weeks 21-36)* - -1. Press coverage ("Dating app reduces fakes by 90%") -2. Competitors adopt (FOMO effect) -3. Become industry standard - -==== Revenue Model - -[cols="1,1,2"] -|=== -|Tier |Price |Features - -|Free -|$0 -|Basic verification (email + phone) - -|Standard -|$0.01/user/month -|Multi-source verification + reputation - -|Premium -|$0.05/user/month -|Custom verification rules + white-label - -|Enterprise -|Custom -|On-premise deployment + SLA -|=== - -=== Example: Twitter/X Bot Defense - -==== Current Problem - -* Bot armies manipulate trending topics -* Coordinated inauthentic behavior -* Election interference -* Advertisers lose trust - -==== STAMP Solution - -[source,idris] ----- --- Account with time-locked posting capability -record TwitterAccount where - account : VerifiedAccount - followers : List AccountId - following : List AccountId - tweets : List Tweet - - -- Anti-bot proofs - {auto 0 followRatio : FollowRatio following followers < MaxRatio} - {auto 0 tweetRate : TweetRate tweets account.createdAt <= RateLimit account.age} - {auto 0 diverseEngagement : UniqueEngagements tweets >= MinDiversity} - {auto 0 noCoordination : NotCoordinated tweets AllTweets} - --- Coordinated bot behavior provably impossible ----- - -==== Key Features - -*Graduated Trust Levels* - -[cols="1,1,2,1"] -|=== -|Account Age |Posts/Day |Followers/Day |Verification Required - -|0-30 days -|10 -|50 -|Email + Phone - -|30-90 days -|50 -|200 -|+ Social verification - -|90-180 days -|100 -|500 -|+ Behavioral analysis - -|180+ days -|500 -|2000 -|Proven track record -|=== - -*Benefits for Twitter* - -* 80-90% bot reduction -* Advertisers trust metrics -* Regulatory compliance (EU DSA) -* Revenue increase (real users more valuable) -* Reduced moderation costs - -=== Example: Reddit Anti-Astroturfing - -==== Current Problem - -* Coordinated voting brigades -* Fake grassroots movements -* Corporate/political manipulation -* Community trust eroded - -==== STAMP Solution - -[source,idris] ----- -record RedditAccount where - account : VerifiedAccount - karma : Nat - posts : List Post - votes : List Vote - - -- Anti-astroturfing proofs - {auto 0 karmaEarned : karma = EarnedKarma posts votes account.createdAt} - {auto 0 votePatterns : NotCoordinated votes AllVotes} - {auto 0 accountIndependence : ProveIndependent account AllAccounts} - {auto 0 timeDistribution : VoteTimeDistribution votes = HumanLike} - --- Astroturfing campaigns provably detectable ----- - -==== Detection Mechanisms - -*Coordination Detection* - -[source,idris] ----- --- Detect coordinated voting -data CoordinationProof : List Vote -> Type where - Independent : - (votes : List Vote) -> - {auto 0 timingDiverse : VoteTimeVariance votes > MinVariance} -> - {auto 0 accountsDiverse : UniqueAccounts votes >= threshold} -> - {auto 0 contentDiverse : TargetDiversity votes >= minDiversity} -> - CoordinationProof votes NotCoordinated - --- If proof doesn't compile, coordination detected ----- - -== Platform Integration Patterns - -=== Integration Models - -*Model 1: Badge System* - -* Platform keeps existing accounts -* STAMP verification = optional "Verified Human" badge -* Users opt-in to verification -* Gradually increase verified-only features - -*Model 2: Requirement Tier* - -* Free tier: Anyone can join -* Premium features: Require STAMP verification -* High-value features: Require higher trust levels - -*Model 3: Full Integration* - -* All accounts must verify -* Graduated rollout (new accounts first) -* Existing accounts grandfathered or verified over time - -=== API Integration - -[source,typescript] ----- -// Platform calls STAMP verification service -const stamp = new STAMPClient({ - platformId: "twitter", - apiKey: process.env.STAMP_API_KEY -}); - -// Verify account creation -const result = await stamp.verifyAccountCreation({ - userId: "12345", - email: "user@example.com", - phone: "+1234567890", - biometric: faceData, - behavioralSignals: { /* ... */ } -}); - -if (result.verified) { - // Create account with verified badge - createAccount({ - ...userData, - stampVerified: true, - stampTrustLevel: result.trustLevel, - stampProof: result.proof - }); -} ----- - -=== Privacy-Preserving Verification - -*Zero-Knowledge Proofs* - -Users can prove properties without revealing identity: - -[source,idris] ----- --- Prove "I am over 18" without revealing exact age -data AgeProof : Type where - OverAge : - (birthdate : Date) -> - (commitment : Commitment birthdate) -> - {auto 0 ageCheck : YearsSince birthdate >= 18} -> - AgeProof - --- Platform receives: "Verified over 18" --- Platform does NOT receive: Actual birthdate ----- - -== Threat Resistance - -=== Attack Vectors & Defenses - -[cols="2,3,1"] -|=== -|Attack |Defense |Effectiveness - -|Mass Account Creation -|Time-locked reputation + multi-source verification -|99% - -|SIM Farm (phone verification) -|Require 2+ independent sources, behavioral analysis -|95% - -|Stolen Identities -|Biometric + liveness detection -|98% - -|Purchased Accounts -|Behavioral analysis detects ownership change -|85% - -|Coordination/Brigading -|Statistical correlation detection -|90% - -|Reputation Farming -|Time-locks on reputation gain -|95% - -|Social Engineering -|Rate limits on verification vouching -|80% -|=== - -=== Economic Attack Analysis - -*Cost to Create Fake Account* - -[cols="1,1,3"] -|=== -|Tier |Cost |Requirements - -|Basic Fake -|$0.10 -|Email + phone from SIM farm - -|Medium Fake -|$5-10 -|+ Behavioral farming time (30 days) - -|High-Quality Fake -|$50-100 -|+ Stolen identity + biometric spoofing - -|Verified Human Fake -|$500+ -|All above + web of trust penetration -|=== - -*Platform Economics* - -Fake account worth to platform: $0-2 (no ads, no engagement) - -STAMP verification cost: $0.01-0.05/user - -*Result:* Spam becomes economically unviable - -== Adoption Strategy - -=== Phase 1: Dating Apps (Weeks 9-20) - -*Why Start Here* - -* Safety-critical (fake profiles = existential threat) -* Fast decision-making (startups, not Big Tech) -* Clear metrics (fake profile %) -* Willing to pay -* PR-friendly ("We care about safety") - -*Target Customers* - -1. Bumble (safety-focused brand) -2. Hinge (owned by Match, but innovative) -3. Feeld (niche, willing to experiment) -4. Her (LGBTQ+ safety critical) -5. Thursday (new, innovative) - -*Pitch* - -> "Reduce fake profiles by 90% in 90 days. -> -> Proven with formal verification, not promises. -> -> First customer gets case study + 3 months free." - -=== Phase 2: Reddit/Discord (Weeks 21-36) - -*Why Next* - -* Community-driven (not algorithm-driven) -* Moderation pain point -* API-friendly -* Open to innovation - -*Value Prop* - -* Reduce astroturfing -* Protect communities -* Verified human badge -* Reduced mod workload - -=== Phase 3: Twitter/Meta (Weeks 37-52) - -*Why Last* - -* Largest impact -* Most complex integration -* Need proof of concept first -* Regulatory pressure helps - -*Approach* - -* Don't pitch directly initially -* Dating app success → Press coverage -* Twitter sees competitor advantage -* Regulatory pressure (EU DSA) -* Then approach: "Industry standard emerging" - -== Revenue Model - -=== Pricing Tiers - -[cols="1,1,2,2"] -|=== -|Tier |Price/User/Month |Features |Target - -|Community -|Free -|Open source library, self-host -|Small platforms, communities - -|Startup -|$0.01 -|Hosted API, basic verification -|<1M users - -|Growth -|$0.05 -|Multi-source verification, analytics -|1M-10M users - -|Enterprise -|Custom -|On-premise, custom rules, SLA -|10M+ users -|=== - -=== Market Size - -[cols="2,1,2"] -|=== -|Segment |Annual Value |Notes - -|Dating Apps -|$90M+ -|30M users × $3/user/year - -|Social Media (Twitter, Reddit) -|$500M+ -|1B users × $0.50/user/year - -|Total Addressable Market -|$1.4B+ -|Growing 20% YoY -|=== - -== Technical Roadmap - -=== Q1 2026 (Weeks 1-12) - -* [x] Core STAMP library (Idris2 + Zig) -* [x] Telegram bot demo -* [x] Website + interactive demo -* [ ] Dating app one-pager -* [ ] First customer pilot contract - -=== Q2 2026 (Weeks 13-24) - -* [ ] Dating app integration -* [ ] Measure fake profile reduction -* [ ] Case study + press release -* [ ] API v1.0 release -* [ ] 2-3 additional dating app customers - -=== Q3 2026 (Weeks 25-36) - -* [ ] Reddit/Discord integrations -* [ ] Community features -* [ ] Analytics dashboard -* [ ] Series A fundraise ($2-5M) - -=== Q4 2026 (Weeks 37-48) - -* [ ] Twitter/Meta pilots -* [ ] Scale to 10M+ users -* [ ] Become industry standard -* [ ] EU DSA compliance certification - -== Competitive Analysis - -=== Existing Solutions - -[cols="2,2,2,2"] -|=== -|Solution |Approach |Limitation |STAMP Advantage - -|CAPTCHA -|Turing test -|Bots solve CAPTCHAs now -|Formal proof, not heuristic - -|Phone Verification -|SMS code -|SIM farms -|Multi-source required - -|ID Verification (KYC) -|Check government ID -|Privacy concerns, expensive -|Zero-knowledge proofs - -|Behavioral Analysis -|ML detection -|Cat-and-mouse game -|Mathematical guarantee - -|Blue Checkmark -|Manual review -|Doesn't scale, biased -|Automated + provable -|=== - -=== Why STAMP Wins - -1. *Mathematical Guarantee* - Not a heuristic, a proof -2. *Economics* - Makes spam unprofitable -3. *Privacy-Preserving* - Zero-knowledge proofs -4. *Platform-Agnostic* - Works for any social platform -5. *Open Source* - Community trust + contributions - -== Regulatory Compliance - -=== EU Digital Services Act (DSA) - -*Requirements STAMP Satisfies* - -* Known trader verification (Article 24) -* Transparency of recommender systems (Article 27) -* Protection of minors (Article 28) -* Risk assessment obligations (Article 34) - -*Compliance Value* - -Platforms using STAMP can demonstrate: - -* Proactive bot reduction (80-90%) -* Verifiable age gates -* Transparent trust mechanisms -* Auditable verification logs - -=== Other Regulations - -* *GDPR* - Privacy-preserving verification -* *CAN-SPAM* - Proven consent chains -* *COPPA* - Verifiable age checks -* *Online Safety Bill* (UK) - Duty of care compliance - -== Open Questions & Future Work - -=== Technical - -* [ ] Sybil attack resistance at scale (1B+ users) -* [ ] Zero-knowledge proof performance optimization -* [ ] Blockchain integration for decentralized verification? -* [ ] WASM compilation for in-browser verification - -=== Business - -* [ ] Pricing model validation with customers -* [ ] Partner vs build decision for verification sources -* [ ] International expansion challenges -* [ ] Patent strategy (or open source everything?) - -=== Research - -* [ ] Formal verification of coordination detection -* [ ] Machine learning + formal proofs integration -* [ ] Cross-platform reputation portability -* [ ] Decentralized identity integration - -== Conclusion - -*STAMP Protocol provides the first mathematically proven solution to social media's fake account problem.* - -*Key Advantages:* - -* 80-90% bot reduction (proven, not promised) -* Privacy-preserving (zero-knowledge proofs) -* Platform-agnostic (works everywhere) -* Economically sustainable (makes spam unprofitable) -* Regulatory compliance (DSA, GDPR, etc.) - -*Market Opportunity:* $1.4B+ TAM, growing 20% YoY - -*Competitive Moat:* Mathematical proofs (competitors cannot copy without dependent types) - -*Next Steps:* - -1. Dating app pilot (Week 9) -2. Measure 90% reduction (Week 20) -3. Press coverage (Week 24) -4. Scale to Twitter/Meta (Week 40) - -*STAMP is not just a better bot detector. It's a fundamental shift in how we prove humanness online.* diff --git a/avow-protocol/casket-simple b/avow-protocol/casket-simple deleted file mode 100755 index 18b4147c18add22747d4f536e0999496542b2674..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2057416 zcmd@733yc1`3H_qAb~-_2?{z=&}gFu*Pu`nHJZQ#?!W}2fKnEX8zOEI5{WDlm;`d2 zj;7jHYO6-8Ep?^ZLbO)HmPFhlR*idbohvFMDh@92`+VMW@0~lz3?%gX|3AOy`OWhr zGoQIWz2Sb2S~TzG*r?;eDt=F6-T*knb7hHT70#BK1CS zt!mGDcV()}thcxRs(-HtwcefeIL3}&50-{Hu9}kYKJ{Q#uXUk0P_sWG){D$k^&;1* zde(c?9FX;H@r5+<&r1f$dtt(Rwjh_wdS_X__|Ct=DXPE1DXKr~Jqy?P%98&sSLgo9 z%z9;JJ?q^nZ@pXnP5Pwb^8M+r)U4OuG)O3EZr z_LoY2S!ScwyD1joB`KsB#!Z~!s($?bzTeheoK>>xc&}dZhl>v0aPMv3c#il%3x46& zLK)#}2D`M{rixyB+O*(C_XeBHJ)>^Hr9H>|2LC-r7UC1}Y+g4y_TY8QGGcaXv@POd_Hks;&Q>`i79@gOz>#pe#E7M z&mca4xKQw^#0L`R3O=5=KXI1eqlpI)X9^xdd=Rlq@WI3$;^=OCam)e46pzs%xEJw2 z;x@rQTn$VkHkt(QAU=e6wcyW*DH@|e@Q1`ydZS+O+r)C=L;LXHd;xfVO zi4P|(75p?Ywa_RO`~>kYh;s!$L`=72WC^~Xco=b};Jb*AAa)79otVzki2ls+-$I;4 z+#z@w@lnKWf)@}UP241SF7YpkR|}p)oK4&y_)_9yi0cJUBR-b6TJZVA#}Stc9#5P@ zTqbxl@o?f&!DkR3Ph2SYRN@nea|Ityd?Im{;G>C8BF+>%g!p7)m*9hmPa%%}B=RTD zCGHU1i+BWao8TYj0G~?SBzOn$X~e4qe@;A-xIyrT#G{Do1;0)FE8=RwTZm65E*HF+ zIFGnY@Ot8W;!?p+6Q4m`DEJBDGl_ErKSX>MahBlwi3^A`1>Z${HnB_a?ZoF0M}HLg z6BiP92wp~9MBFBL0r6m*9hm&n1rjAo3?J zCGHU1i}*a^Ho-q!1nM%*EI8Sy2=ZGsmNUrO90crNi}#H$6*A-KcBEFf}CHQvY zCB)J1MgGLq#2tc{5iccf6TE{`*AO=dzLdC@xL)uy;^oBEg3l*j zL0m3)JaHXync&gHI&rDsGl*{?E);w!afmoq@bSdIApW7rdExC2^VH^~8T9E*1PV@m<7)f}bG%6LGHKhlu}7oF({v;=7461>Z${53x(| z?Zo#IN52#K6E_fd2wp~fA90)D1;qCgHwm6g{1@WYg69xFK-?hsQsM`R>jh6E{wr~{ z;PZ+9MqDmJJ5I;uj z5_~Z6#7*wsO?GMPzU)&{yQgC0 z#BlbH+dQ5lU0QI1TYL3OfBw4_M;7kflveqb7CLRjmVmz9yb>Azy2pjfm0OWGy01?S1@9 zx4K->Jxf1pItS(Yy|Q!MDe09**o41dG07slx0avr!n(s;H$LSLEq0SZTCg?EuWt8Slb@Eh%QpWk4$7pxvczMK4hRpp0l!>d81GGSY- z{>#SwRNLgK@q-Y5cw}Fx6S)qB1Nq>BXT=1i=9&KB ziu|$hAPU`-U+Bh6#nTQx$m_3hYHuMN6AidruJYet`TI*c%YJHC*}pCR$EQQ?&1t04mU|xf5VZ`45{(g%B-m3oZxO1?*m)LSK{(De98*-^?}(r0a}kSNnCrOHLpz0&hdfQ zS!~p+nyO?||7meF#p+%k6ckOd#T;WGR&a8&bbZVE4?m%49D-a&kORN3TQ}dSTN;2cF zq|gOFQWC15K1CA!h?f6)3VnL@sqX5N|JARweCSir&SnXG7(awiyYqZz>(hCbKCvd_ zhrR1l6ZGlzxIWPlM~sIlBRin8^(T+=R!T&9Ly0g~Rh&qnw{B8GC--6DxG18e{-6qF zn`c}G{ZTSsuskmFJSicirJl5~w;69Jnu!y~I7j9?zy4j(MPNI3Sa^ZejM}Xf9qMsj4+UYj1Q$e%bD&5^p8sP-B^o%3moQj=U@7% z`1y}iT=$KZKPJmlyDi=2@~jq4bGdeI?B%Kb4j+p2^|OkCANKOp90%95 zbEDf+^DGLla(imm;JqYtR(5gd+*nC?T(l^-tI)H8dj_!UJ=w3<-xQyBhi3aiV`72u zglJK?@CUls<;@_kC>ZPQsd+|yI>WQ#wG38n!lb=&Ap+;6KgRx0>hjcHj;^=ujD%6uq9r=!Vc&nZHj@IPt&TKzgo_(Bt+#kJ2@99KL7 zE|dBl4d{F5diwM z!=JygVt^J(&kp40cxn#kMA0cmuP@Pm4&*|d2f4a3VOR-#h$f=2YA-{y+xkKTeZuc_oqEylKCHiN^L$H+47&2Els<#}t@F!2r=Wt8C$9x+a@X55p zFoA+!n*N5c`fE?kOSq^7KZGW}47O_hHv4rl^sgJi(9k4sev7B(? z!L7KsbId8}p4vC@$=D`k3z<#?@*|$wcYvuenx134g3qKHu?Hq5dYX%5dO^g=Z!qs{ zj|9wbviMCFzd6JFhPuiDZ;#~Q8=5Q(l=fLXV$UpLbUDNc>#Sk$i(JrC^G_&)78;cU zLXDTO_#DuiS>KI8Ay|$|gCm+4UgT1jF{^^AAN_iZ1|I`*KJn}SHTA4T+z4I~dDIsm28n03*Fm3gk<7I;~V1)OqnKMqNtHb z&9gESSQHyeP{HH}C=or_xiQ^Sa~r6$*(8yb_V4bSM$%V`-uqhU=S)(2=-G&td8xACMXEm9kQxB|0ec#x>j6+6I* zxC$CoqV|xJrf0m0HnvsU@oDpOQ5Bb`J$jI<9y;XHUw%&eLPGVg9+6NT^)L=UqH8yj zCD?|i=6Ey+)`(6*t+?KzZ^HaY%|lA`wkTpt8rK#gUU-{8{$lrh@+Nm=4@||EzYz19@gbBYKJveIqUsqqhmsK3Z&_wQ-yK<( zXlO+{TlzxPQBr0|PwfhPG?w6BqD|j|YH=$vCYS}{F77H6C_*Sbh^6Ff`Z>rea@!Y) zT6K(BH|{V`GVAuYd+=^sZ?_{J^Z@B!@_8t%G2V2#_Rt~*%v=qjCZB2xHI}iP?$mf3 zD}bg)IQu_pEOFu=N$?TIwehkCn`ITT#!qIyHtihXb?iFC7>+s^S%Ng*sT`x?t!;dU zOgdM5bS8W>mYseB4M^pqm0eg4x+RTHI^sfa@Xvw#*!&J-I@*T)tinV!4*L+G;JGYi zgjfCDkuM`wLxhWXs<^hPGF=Nz&y>J#5UOaQL$uKOnEhdjuQH(2%!NV;D7AhsFfzOk z-Dsf+rZ0NF;wnuqvV0M~)iwH}`H!XWMOtVy+8=fyudj>rgJ1ITV_L>2yqOMZ26hpO z5FxlN71-!Cu7aY#^Bjj#+is6f24+0%*LQOXspy%PUVQOIuHAlvklGtLZxDssM{7yX z#)Qe^DxR8ViHPXOo~5J2t6IyCR`k_^5v*(W@vOOew*I+pXjtyUD#uP=Z*Sj<6O1D< zdzyBrh0fGM<2YhZO#`ZHdT)dRaJcTsdGjdzN$yZDxZXF>V7M|(?rvnErk(5iR$KtS``PoSSX12^^DpgSJn!-L6L}bYmTpy% z{W^XX4xEOD2I}iI{U&^Xz_xKvGn&5MF3`VPZyVlpr>$On9;X)%^ej(J#Ui);bxKj)D_3N=fXuxX^AsR<~0kx0dqo&8qOhY?{ zTH){4gn*&YiX3L74VlFd_*Ce(&$DLOG3OqJrLqxUj(9#0zVgUz7uo!6_Vqm&ncwF% z&sUy4OCOhsM#|l@iuA$*pmvB|UiPe=IK;E|MkXKM1=6rdu{EY$wo^;{+7H`)iiT8N zv!(J_4Vo}3e}iZFzwr&?RDF{#Z${sPEAK7RH~+^hRq-}j*WBBNK+imD*Za;ufr=Q_9ot0lYWd2*A#_L%#pylt#hr(lb>8@N(8R#iIHU_il zeGK=pJZqX**Ppfy?fXM;Lwa9-=)6oVzpWBmIyb@A3LZs68m8CU2b9XVmCA6lr3Ovl z{9w(Ol?O(S{hPq^l$BPk*nO} zS^x{0rCDpFoC#{btSAhGPRvHA289Nn{6PdEST_%TkybH;3+G>9!jmr$mwa|0LSkI0 z{8Un-aC(G2%I8F@#r_mmvs4e2_h7$^J#7wzMrId7d3P3%_}KQlm=QGH@aZ3F!@t(B z9uWvFYRi>R7xf+PP5?}bqRvT^<4f8FH z=|8KLD!m|5!^MqpIn5bg5ny$@m0sKF``Ku>`xsTj$H}>tFYAU;omLO;22i zsYcnGhHXJ6l!yBBuR$JAJIIY(_Dn3hdxHJ=F?4!S=tfKxH%EiJvE&rSI+gx4)-~#C zCZml)S9O6$#^do{Ht{D!O|=)J7VM=cG!e1XIK>GqJhWBIZ=dJ)GpDGARwKVeVhhy_ zpus@?w)xw&mUTR?;SbO67Z|=vOM6ROXJ7&1n`hA;_EP%4B=4TlFKcN5?1Y8Jek=Yy z5I%9eqT{T`+Nfc!|3te0^r*Wi+~Nqu5Vq zoP32{hL%habmMU)`d6qAjiqu#9zaQ`>-_D3;XlG^x6|vDgs<7;t}a-_jvKxAl)9eM z@K5s;uk-7DjX5A-R(*5EMZApdu*Bwbr1?U-eP62fnY8q+E;x*>Jk@x2sjDty06sTH z@KN*l*j01Ju4TCDSzDYli*eA;P*h94p0(|mhF`{YEz}<$2Wp`rWGhebd^sX5PjDO7 z0kv>B1a$+#X$SILNl406<{kiI#t zJ&|(kyi^y=Wa+2sKrW=;I91429MVu0<(f0jlx~Wo_{mZ{_GeW*Cq7D{pe`d5*Fj%% zMg|MoWA2Bx43EfM^h?qI;Zl?VU0IQju~v%jG9&M(58lWYd{Cn*Tgg%Vi)HIFR^zR) z9^aVEHSR~G5qIja|NBucu1`my8T8;a7O))bd(V9d*N3V8D1C3_A^_t&7PRD3UGPd` z`GZyYOeue|SvhhHD|%6}y5L@`{8(;y)?NzvabQw@H-Paq@)o;&C?1ljC0Ixp*%EmL zdwTo=irbQ9Jdbkqice2hgJysDVsGRbHWyry>8dyh9v|}o1HVmakq1Og7P=#UQXepn zZSY2J1t`hCK68G%aIz%)_)3^xUB=aD&-gV&Lj7mkMbLkLXbFQIL}(2V$n zJs52rd{gAtFJR4bk$hbUy}XVUle)jrFaXQ%O-6VBv)@zf+I=(F^@XsD{&>l~=%4zj z^y5{h+TVT;=<(FFgFus}niuieo-CCBMSag*@Y9jLs>#gAZdf0_@kYMG z2bfiMN%+JTIp=Emo9A!=$qS~?$k#YD!tHRl{$?x`AUx0b>mp`0Uu*hEOci6@#z*mS z<+scqqn%KUefbzyME}f^h#fS&*ejt!#erDj(6GpI0M7nsEg9#c0AHPUZ2a8Q)rPN= zL_=B{kAgVH6VMmCx80Ly)!<-e|z@(ing|})YDy?h{!R*Bj9biR`*7DW>l)v3m6NfdcY$AASfVd*Ym=; zU7VHZ`XpW(i%MOF?2VkRT6RZHW}&0H6p9?m@85uMV9!51=lW6>cL&~y^2~=pm9&_z+bprp~1xq4s+os!m>wE5Q%PIZD}*3QYamw=qj-9X0LYU%~_rm z{n?X_U125*d!?d$;f7c8_i@=PVZUzUR~f<{jM590t;Te z2{Cd0?s@z*0&AC4q1u_GiX=180r}B@7%v35E@&pXxSllK2kW z5YK)358?lBe-HkL7DllT_HA{+maEbF#BjxtX~p_?p4xY%`-~FlzM0*RRo%CMam^Wd zR`)(wpT&y{z>Dd%6cf?E|3_cTu=<_rGEPuHdJA1NwM(QSj$p zp5;+|QMt3p&`jL@(WgzTf{KsbT$4ZTD*UxTlq zf+yxfB}FkF!6zuj`Jx#20El7~CrD;uc+lp6egSmj0_esYFi1@|CBwD80JJ1gGSf`S zT!5?G0Stneo=GQx(*We75|xAPI3PuVDCu+(B8mm#((x>Rf$_HpJv`l%&=`>rl>kge zaV4R*Ap;6!IwX|-1LllPwuB(=_2WZ}zH^P&&)NY&z64PXqJ-YVHzQR=RuTzGNT}vX z%pIB41&{K^xInn7cd@=38@d3Yg5z(rrcNnjj@gh$RD2H{_ zmEiWd;YCB>upo>B!SztV-4&KF?!+eu;}meXIYS2!Vfb*~+3BwOV}*Jm+|@)F#U+Cr z!Wbm(su;q!ad**Ew!a!}3gbKQl~z%WcUr|&^jR0uXBE?DokpK^6n&OQ7{GB9Jw;*I zD(4TbOPfgMfU%nuSVVA^05IkyGR6dOBoLDc0tEd96z9Ku1_+AqJH3YHFP5z6GDBFODPUSZU7%kfj2{4Qh6WFq$9a>}M_+t`Jfu0qtvuzdnzZo8t z^Zv(ZUgmwywk=xl75H@=Mhnfv^gk7Uixr)HEIOZ~N=5FeMJje7zO(Zcj;y+%m^77y z7pIGA7Yb?XZ?H&v2A{}Eu&6oXF#yxgI8}RMxc~Y9R68K5eWOqZe@{PC19_3J#o-Io zOpHS!eKmcqsoGcIvK$xDL19twhqQ`o@xNEaH2m*fF%JLJD@Ni!6deC$RyJo_nUxcK zIMgaW!@{)b&`&fcVrUhoay273riXyc!RB01l>feG`DHKV`iQJzrQe@ zvjepMbzB(3nVEVmrQmJOGF?e{x;Zn`7hzU_9l_gRMu3Ba|1rIxRAeP|2yb(V5{VBo z4NY+e!V9nzxxF`blzLSc{QXjJU*wVxuKGfQhnF)%6D2jB@7`y;h=yI-z!YXwYPD<7*ac&$t%R|uO54ZiR?%WIv7PY~$+;ylIxB=G|9NR}74 zKzRXpEQa06YfVK|XnH9(ZlE&r^y-33RF6+U0YZa6xz_6O1AIb{cN|0&dKDnCM?`Sp zhq!1J(657WUkBGSe1NFXzp)|^TcNMN+kV))T2{B2kHQ!A!~VyyUQ^SDIhkPmQ}p%}J0laofK zAE#BY#(36-K>lt|@HTA6nsMBNK9rge?!N&?LFayLRPvyb>weUrI zf*;|e4Be|1{1NUI|KVQoAMO?Z;a>3{?iK&Vy;kBz8ajgje6(#8er%xHeoTRD=+sWc zWZ8r;&&O#zT>xSZUKwNp*cpsmfFCRBH5ITVL<7ogu}%_#WB}4!QYHTT8aP?-N34e}sdw zlg>R+1|eJym}v^+Bg7!qa==zx<#B`{m`oFyO$)hz2I8ZAoJ#Y^GOYu{BX3NBfbC2y zl5pBoPF_hZDmX?qrz9!@xd5cVA);AWM{s;=B3Ic)HR8%q*)*+Dy*9d4G_8NgE z0^$6oBm~LWsg6{(E3%Rj$j93q@nC35|LTHY;WRSNGt7ZweH}~;WvoH&qr%kH%z|(p zAB#QM{sJ)VV!J~OaH|l5mHR)0q7Xwdwy{mu^fL_PdUT3i(>=k@Y}d3$T+<$LO?$*O z?Ge|sM_kh$aZOk?FkRC$xF+xpdSyBw$ORT}`W#aSm1}~GFk171$U(q$e zU`k*OC9np+xTbQrCI$+~QQ@ax4QC^(+DaVzNY^r|e{&&@^=>NBPs}zld2UhdBUcw(HB}@Qf*5?EQC}ci^5yTOMSY?Y zrxDmXYtDERKtyTFkt>b$T)NdDN==q=jwC@`Y`hjWKiiQVO~EwJQ@t~@kbPi|uf!Bz zo&(#?<=QzGoiLGNnxBbTerjGIw74*!S7C}T#tdJm!7NL$W?70g%&AzzoQe>u42Oiv z(9LXgGaE@*Ig+q)_|qzMQ>BIOt`@RZs<%p&>il9GMStg}dupG==zO7! z?~vg5lm>sL@~`@b4DD>DJ)OhGz!{D%tTKUA0kE|O#nhoaq>DLHcu`hkbXpkHcng20~B)D=u{ z&>1NhogN=YDnVCn=_0OJW91=hA zX54=JKo|E*KR51*P(7{ueLHvVJvB27Znkv@s67|Lfw-|nGdC98J#>CQeFyI1DP1$! z^<1k;wtY(ulJgbCp*i0c_ns52E?9~K%UDpp{7c>sgs%NK+ZG!3OwM7h;Ag$HejjMT zJ-ET=JM;~G_&dJFod|1?TlxD%#_JVdLZdVO257v762+kfKNa(ob2C77!Le+*@^UC> zCMKn;P`3y-oRsu?-;Wg-PtASO=71^EX2zw`CXQqlBMKfcnN3zplXIdz-6%S6Jnmt+ zo?rBygD~WU$u`wB4ErBDo6{>F-nkw-5N{x)+u4kJsrH}lF(IN zan9PhUA^_q+G`!_KJViX!`}r$eFNM^{|_1q^lQRdF|h48(h?~#H8LT~~FpWu^m6-sKsZE5~~@6m0APC6HL^1t&e zFU1AF{;sBO1op4{0^2MftFxpZ;lR#>9AExRp5@1*RCC4=sFP+KfzPrYqrYLi_^Cr5 z5fK~3a#879ftYqD}_*k>VCOa=+y-f4l3z6Ge_Tc0GGY{sX-xCnN zD|vp3Z;Sz$D(WNe@Z%H&v?{+~`Bt-hHbMvDMiVbU1>#jEz72*-ywb!wKriX2GqD$Y z^girRR+)G#RwY<|wuz5G?xi;y2g=twjhC@-19m?MhvUQhGR)|BdmTjk^!JU6kUrz+ znz0;1#@A%bg{W&%jS+pC}Bt=V`G90hs|{09074Ws6@h!+(X+QI`} zhUXJNScVtH4xdLCpZXS7@uIhSV`*7Ec8nu5$E{<$k-o+F*xsT;+YTt z2YS7UN68qzk6dixA`nDIoonL1f)R?O0(@gsn9b*!myg3}*j$#0cgS_f+r(2j1ksb- zzd`kfOg4WFKmE;E+&jtle`1KXc6!d4!yZRD&$2q0iSa0ELOCzO zHJqW(()0y|#%}Bv`SdNu3Gn0o(DEjb<-EhmAG%e(!rh$oeC5~2c#Xf=q&^858&Mcg;LK6; zZw8&UEg)xBbm@eXT}Z8T9yjpRJc;kB3l<8f{j2P64f`V+lhOa1qmMj|V-H3Mm&6Ym z3-7?RZ67zOFPiMvzny}^mE1dz9D&>518EPgMm=hsI^lpv#2Ce>CH46X&Jkbw^;a*_ za1u87akO-DF%Eh^ueG#%bwiPB&)^@ugI(XoJ79U|dC=#ya{toUH-~3rZ{2f+%imI4hr&6it%ZlZH*B!0XwMa~9<;xzC+*i-?IXy} zLO_lf9;;qFOc1JsNH^tdJ6X*$jo<=b$Rg~Q^Rr{Th1Ph_;donHO?uim-gb_+qXg%Y zA|*Hi5=A%+MfPRK7#DMyjcmZl@=cj>RurN`u;Rm^gQ2FC?V4WMf&Gn0KrfEsa04Fk zv#FgdQgq_9K*IBf9dzYdbPXq6?Gcl%4$=i-EXu~6#-OA`?=Mum6{jFqQ7{`6uqUb< z0vdS^Gv4H7^`nK0W4OU-ZlTsv9E<$A5G3R7o=vfx8~RrMLJReV&Wc@F^^Pz<;LfJw zwBSb^4V)*6VZ^SU_BVA}Px?EubAKy;(Zlhz_Nc$ZI`@~`)Bf_N_hfvY&i%Cx>EZZR z^{78Ay(G%7tf&2XXY^!zr+4lzc6blRSJ$KdPU+lVeNX#~^{Brt_K?%l{$|hY2|v5o zLldT^9@%?)kNWFk4^w;EpLS7C#@EFjqKEZxe2qQouZum@^|Zg7i+eJ@F7nIjX@4tw z)L$3*H6GeSe!9zgGQKYIEA452RXysji~J&kdpN#GkNWE(zv`a$H}#U9@Ux5jyglu& zwMYGRk>Bb;J>+NJr9By67x`)X>Tmv`2((oEGLZ4hD)h(T#rV~q-3-B&*a~NbFD}L} ztv8}xOR=ks#r5|C;ZbYxjq&R3ZWmKCd9hrBSuS=d%7sVGeeh7ke(xKH|EW{CDwdOW zuIDF2L`E&zlDKJKao72zyX>;=^C`Hn?-`Z2Q)1XN52(Hn_5nSZfYz9rF{_@7ntb8J zg)0yK1^nU-?Q;)DztQpsaVlM(8IxNVgPWqpS167dB-*JSTHAZQ8t>@Zjy|a_n zYlYm=Upwi{angy;k^0La4BTo7slCc_!A%k4+?8%28~1ToFUqf)*TLQm_P=rIi4kr5m&JYzm# zy*S>EPJDY5-?4JxtbOy%$^VsXhZ{=zTfwdH2D@;FdpUAACog?uP*Ve#NZu$0YG9xr z58qMDYbs93yd4}_JWUejj7iTV>wbTqZB1gg7G1O(7wHNYN2rfSVPLl1;B&-#B{;-e ze}hm&oL)8Uht>EZf11E&I1ZF>8^4i-ib6XVWBc`v_D|{DejVD^LRhy7k19nwQ2VFv z6;dO{Y+LOM(TaMpKW`@Jwe`3Hw+KRSJH`6ndQis7-C#G)@pdS^=-_y}(BqwL)3fqm zq33vup7uK}Gb}WzQR6RXdvSVxN!?h<_!guuJKFM?o_@Foml0)=p2u$m(J_VddBvR(&HS}BQ+$! zZ}S`tQM*yzh%#m8wimEd1Hm*Ao#gCxO=a7`+<=L)yEGRYCaolJlb zRB~L6FOtrOIZ94V^m`Id=3WcgpfTeOcx|+Cq1}edT1%uq;tOX9a8Lj~2z#zrlf;>W zVysV=|^vch- z!zQhH?g7~&Ol-elZ+2OZ_RV>&O4-4dm8Kn3|2DZD2;bxLN>aQ0&mX0cq;?r`jJJzl zcU^DO(}Z&H6QeD9qV@Yv&q;fsCwFi3)W_*@D|()|)8tRt|3J^(YEVh}Q$-(}%5PIbi=MXI_MblkI?-eKExz+*`7PK?l@(uKLYt{?g0a$El#9uNIx%prkNcU` z{0au7{7fPE8TT`7g1DUD)wRR}#wrj1H{il}l`BcUuHHf4>�FZve08N5;}ag@=8Q z0;&NS6aQI$1mm*zUvfCE4(^Xgbj!g-=?h@|XQ}-cG)l=i_F#+?exP9|^>6IQqD%75 zcF^UB?w$Dz%kpK>#T2GY^3F5=U|ST1@~Z@NvN^C>^_JXJD{;9c^gnfOkNO`j{r~&- z&i>aVq5~9TyV-wx&-$OK#-GsRuM*JNcK_HClNU~}%M0U{ygM;}2rbOw&a<6=-;6Ce ziQ1R7@vVF z=J~|V{W$G)Br+LH{(N}f^enO6)(YihV74-64~5xcE{C%mTXV3>c;(pxoVLr6Kn(J- z^d?37*uf7?SNw|8#mc+PC)^3*z+0+ix$ev>YWjK=FKH`X4orb_`_c zA`GNYd?2|Xp93-ZW%+H#cvAH@55dy(T=K1bb+SH3%D@l}y>A>5A6TdUI?JbfcGm~y zmO_u5dhh|pwqJVCc4I0%7_$uQYkB7XKo4S_`f%vM_Qo!Hfb#j+oR@DKv-4cmUjo+s>hOg-X|xxU6G_OX6u$<1m9 zdT+(Vo)r(17TjQrlee&~DG0LXA^YDwWA0V>U*@TOAJ*~x{tusy_tah;@6w%h6We)>lQFv; zYA%vhled;XwZ;|CBRw^jvNbLzN&R+s4s(eShXmAONVH3PmVdC@!@LY~{;isFtzuK5 zncgn-YEXbLyB^L@sI|7Yd3PgjWAxO-)R?lYxav6CVkArai=A@d>;V|Ic*((xXmX7H zPur@Sh31WKqj-#pIucSy{4ud9n!*LbC(;HnLVXaYB$G>QG0Rad+j~JSS5@Pw#-OCt zJ5N~=TtI*c(PZa}AF?G`DQ&efBQEx3AvmI>8`(4NHD%Xo-FF#?<15Y&=elFXIiT5V z@!@Fp9<7$%86qMK18rB|EG+OE{hqQ};6;nZ*V|>tcJ+^>`qWO?;Hh~yM9J*w#X@kFF%>R?Kt{=Sn8}w)_1vvCe4hQMvN{@X(y6;Xi%t11d?mCtPw`Gfk-dKk4`M-H(wn} zsyCf`Qq@P7v8Bs!C^!rwajJh#JU1v*<8|k8yy(I>!LSXLQ>by~my$Q^Q!Wpoa0EyWC%IIdOPN%$og^}G<|m!yLiW$BsIsMzl9QSlE~Vt;h;DMSjb4hJ-1?b^T7ZZ2 z7Q1tnkOdno8;+|i#2a{W4Bm`2IB>4k zJI(1!_MchBT;khPD}`ftGjtSAlE)=`ZzKHYXL2rYlyCN#?=)b?MN{({cV?Z)%>$kce-W*o)r zv*BTzV7uKkbifzXPF^YPPOI&a9`HFk`_zMmc$?kT1BNci+U+7Yk=bl?;M9ZgJg|4* zV>WyDDz`+vvg8(Rk~STB;D5+wYrH+q3s716<;YWcKE$((1Hq3r+J`pG2_o9K93+P> z>VuywJjmP>l5EPfYfE0X-*Coty>L|~&Cmpdi@Rpby#oJ{XP%Ak!JszyBv7g#BCpdS3Zy^ihn7fc;{vHFuCnR;R;FH;% zyIOT;1r~PxWHH7Xha!=2& zt$OLOy<7RQr7IRcocfICCn8y{JXTa%TL$7}hL5Loe=9drx?ep^cEABPA7P+ zRVq_T$?XqRSR=O8WACR~{fim}k?>O3B_hdd^JK4t})QAaXiJM72`dJqOFCegLNezloK4txkq3U2H` zNh@oyQlt5!*iO4!Ogur*)Icj&Nf5RiYElaa)HsaEoyjpV!d~*Ot&Lf@X57}nT%{Tx zyYiEPIQe}SE~emjo9N~K@Egw`0k6FwvS;t-!8-Gs?48Mn{-@$q!?G?$L0(ze$i8@0 z%`uTzlirDEBaI|9o{c#D)V}m;x|xT#ev^ExRvwaUoH_iFKQ&I{5Vm6`M;hCTlar8t zbfE`+vtG*6Z+;Mk|G4BjmuVQF$fJp8jV;Eg0 zLvsbYuRL56Ggp61L(42DgP2ns`j%~IIiT4%_C4ejUC+aDIH}_3oLf1z|BJk$*8<5a z{(F<83LEieT!hfGT+vBu$H*TuIxrStMQ%Zj1 z-PR+1^f<3r*|YY$l~+XLZFZM0JgilOBA1cM?6=@4O=O z4mAJ&!@OcP+V5swQTKZm<@~tT!2DQrrQ{VaR9JaME56-VUeT_)`1S^owT*-mjyBtpX_N7-=UNMzTBpGWey<+&BDz9irBxj#_MMTQeZ?5uc#N-UXp&dF48uzi$EV6Gs_!DBx}8^y#6xNrn5kJTVZY*`YbCE(gg2+yoD*-y48)UH-D$@l`;%A9mNp%E#eH`qi6ePkNZlN zF5si{T%Fpl=m*Y&Xlnt-v*JsX!X^ba8e%i%UWotLXedyHxX}=;z8B2mt*dhQPWCVy z`=6E^k6>qbp@yseKGxv;cJF(b--b^|UJ#67Yhfh|1Y_7*co&~Q1v`kfn;l@)G=4sc zZSiHd8$Z`q`y#$a;4Xp#ps!|+rd!1XxGx8tL8-i*hOb${*l{X*7#h$rG%mY8K;dPB`J3Ht#}_!8^( za$imsCjsku7`QR!0bH|h%XwT^w>!e#lhIkF+EMfSc2l6ae@md%(r1p1FU}u@tk+W9 zQH`R|3G8pe#(H58lBEIzg|UdJ%mc?b*6jF%L2=wD$fd z(Ary9gMn&N^5M2pd?QcyGtZ4$Y2Hz8Ji*YhN`q}GwI`1stKZb=NU4#&0q!6?>~3_; zSsaI~sX{E(HNUGPeJS{T4X)YzKBsQ4{4P}OB=Wmq)js*{Wol_9Q_-a(-KEjvq1fx1?uN0P=XnB>eu}I^p*f=sGFCMY-^AF#b9m{63S< zzvNHI>+g?fiu~$kv=YRVukmckq160Uf8ur(GQ^$2SP@i3S)4NpbjK|99t&UVY+ zjLR{x-S-!#Zg&uCvE8MNN3C`TpkXTpVIK#X9hrJE?|3LzA!>54yq~Pdyl%x`)^i^) zF3mm#RDly>V-Lc^uG8>|cKr|qzQG?JYuz6%Ve|%}0v)WJsg}$+mEnC zEc+QQ<1(M$gGn*d<+-QHv!)3T*YB-`Rz|OyBFqMrlwRWbJn=i>VtKyDH3{v|I3A|T zs`GWwhzLX`UMI=9sTe7a` zUfzkGNYx{xXRqr%rJd+N@h;ChIZ@GpTZaIl(Gr^eLnYvQRM*qd?6Lpo}XEMCCYOi zH&treFC6nP54?&MIlgJis5nzh^w=aqBF}{F7wXZin#Y@QB=3 z3Z9yCH191{55mbceyFyWCnVOI_HV>q!HuO>MBryjjZH8ww$#d&)SdCA(l`#lvp}@# znpe_E7GzcX2Gulk+!gj2tb$nm)hi+&eD zE3LHx^~~u=E+`V!wpLFfwp#xZ_sBcwmX$s1{>&{ww8?U?gwy2B4NuwD8| z{x~*oe}JDJ!f%44RTMkfW;&BdLH{N!>=ai;5^6zw<65%?P+Su`#O-A?}=d5Lu6_S}|Ycdk@}e}4lN z+{Q`fGJb-8Z$x>Ae>d{*aCj@fV(dkh(7)HSU3FhF?)YsfZf%st9r|wt@E<52-v$Q5 z&o2hU6a0K@+|TolZ@%c~bJ;%Zpaab+J9z(W%MP67+%i5q&&TxhDq0L~%Cr4^&cDd4 z7SqpfJr8zp;2B~E&UTt!B%jcZea^7rV#qYl^33XHq$q8QzmkZv(H&F;$~Gbbq7m^! z3?FRI-=HPD|`Jh|QKM&!hsaN9s zzyGJbZgv=Y?i@e2z94dxdEh!QJW{qsbKaISOF5AsDh)vG)&D(FF{j@w>9>iFdFbM0}VT=AbsS2<2xj+C=`i0{+{%vdoOFWnd7Qqw?gb zR5>##j^G2tLUV&v2=ih*BnBVlweq$sV|?7`3PHTF<4NA1W%0!tmz`Ibao!{lVlOD4 zDKl{UeWf5|WHvdrdMy5J!{q_-7yo!utqN7hpb{P-n1BtMQ$?8x~1AD#K332hcX&fjG6!$9n7 z%Y|_PU+{ObE;R=th}N;ocuqz`+2=kGBxpYKu;LK>s2N!Ea)GS(Wg1f#;Er?oYMu2} zF}{-c+tN#m4)DXCCKB(v(m<3rA?NwX`DoCH-DGe2WML@Mt|e#6oiB5Io@Ms|I6CpH zsO43A0#y%EiL}K#>rbtWu6!E3!}=J;?}93((Ty1 z>+@f7NToOm_-^qLR8=1Co^ci!^-7h^D2C`{l(n8`wQuu@XUH9$c~*oI_{2cNdLT@v zP6r9YTK}yW*5PE>Ue4Kd)t|*-lV4ttt@!1$zRKu262-3+bmy&ugGQvp^QBJ3a&r1 zd>LS*pe6o*nx?F06g`-91AIW=WIm6g%SP0z&tD))+GK^XJJcK_c^c)^Jz&q zkPVJuUVBs1Usg*6QDaBqyhEb_9l2PB<7+I5F<*VG4|pdZ+thq#XTWnY&4IDI4_u^j zVb`-ZM}6ezB1#tKsua&ohDqW&k_h)>a&$&Eb76TDTX5s*fc}DCUl-6JcF^9eWbQWd zo@?hk z#Jmqx;AyexfHgb4SPlSN>Brg-+RTk_S=5Oga%(GIMaorL4mj`BR5_o%usL!Q%6< zlyB4_G60MIfnrLkh&!ylGo=+;Ub1~C^+2_(Uzy(R-nnX)hF(}a<~*&rZGSd*mea3J zB(oF!s=5igJ#QWTSHdH+O99(bVKK%pH^(jVpafS&kG-)*k-%D022 zgw=vLgPb&39{rcP&7f5DH1vt{rwaVB6OOX3{E5@kT5r+=p~z#8QbK}T^2yypx+dANMr+mv#Vd=p$<9?nC&Q2>nY399+p)rCSPHtzGi-kK zXr5MaP*bBxTf!Wjl6i2}apuiC)nwjD*W1iXoTsfhn*3``-#iK*<@iYH0{jGOUDq}1_*o8`^>O(mYto>z44Bc5n$>dK!a@q~e5c07^Nt~MMX zak|Ba?!+6bPcpsVDRYv>8|{1K`Npz7(am^c6-J(Nicc1A{CBDC&=TT}o{S@MqB)K$ zuSz?JkMb4xV9-k$$f%F597= zY$dcsMBF`S|8lGSXRcJDa`I>P&vAX5fx*}dF223RO&xjQVDiNmkLoRIOhj*H8lHpE zsMx3)pAzDu$WQV9yA!ufipNJ&UsN>gM|`y9X4?V^K~R#otu#*8{=`S^CT;r>A8pMs zEo;Cmn}LaOhciA}^`p(d9?|KDkIG+Cd`zIV2kR}hi*076rqku5^A_+tadL0zoJ-L# zDeE|$joz0Pod|a&h?;CKA*2jE8=ZmYUB{V>{paO2V;M*(=_7CK1Hc#K&e9(oeC;8< z3%MyNPorpTN=fsgRMC8#W-FS{USu;kCA|&19Q59S0f4_#t#!AB$!*!`C?nv9-sna${_AW1R0(Efc7@;MUwU+BiF2{s6)7t-;r z&T88W?ea6j$ye^;v|9{+5}}9bx>C`d>!iCu@w?3Aw`WBSzStMfowToNH))6P1N=d< z$z;APJz}AZw0G=<`Kz4F|8KU*{Fg7WnO_ES9RAl0$QSuP`+Eof8}J46rsw0p3QZy8 zppn6=>R(lINIe#2L5@vOXD%BbizSR>Z?c6^2KpT1pdVz+(ieYxaa=2R%J0L?wp9Nn zwFox>3v1Tt--XA4^{0Sb`8}A1saq7etC^ssrg<;?Z*cOz?3YN@&M&ihKO01WX0A6{ z@dVeEqTktkpPRTZ*;Q}Mhx^5sob5H-3apLFJpxgqFBWJ`o%O0Nqgi($Tt zfOlCx1RW50m94tJ#RZD7KIb(CN$N(Dm1@({m)#)Cy3of}lp$Cq%e0HAvK85_xG0;n zzmmN-um2*9X)}ubgoYZiN1Gbu7y`Ili=81=_IKSM#sE zr(((0bxTnP`2zRHJGsfE{nqOPb6$h33@A4OhuxMq%H?qyV!!Z)lj>~+1jGzmS-dlWfQ zypx=mNe*{iqsGT-ZFQ7MPSU*1OM0xlZ2*ALe9hkSw$>-(^j{77W3D&5mABQSUb1yy zML$jr2>l!f*%_m#xIT<=M2w+o9APv;w$`W2=cdDxz)pLT2X!22y4#CqB+Y}|JK}cU z&3vv397*YIlI3&h6}E@m?|jZ{jpNSgNykz6b&tnU*xti&oP~!snl3D19L{{DF)DN< z=5wWQiBa|>pDSlO-OA^xWf(okw{9FND&aK()9hIw59Vu({B5#)u2IC@gZ7WN+W+F$ zUGuq>+v9TTK|bdO2b1S>ul~YR@SD-wzVo@V)v|79r;(0*`$<`tbLC83N6y=c-8p_w zV_c=J1UXzW7qv~;+j{VKM-0vtRVD{UueeMC}Hm5X@MNW04v+XelojuHB)DOlq)|+%E&udJt7~bcIDD&Q@Y#g+A_34f&KqdK;R zxU&5ND<<1#Tv^Kc2v*!3PF!+O4=T`uDxj>x>g)#taoF{){T5-Ts|Dixw+);u#I&dc;ZQIUZ|lv^Tyi zI(dlJaYP{gTXfro(OD;rr_K6u|HRF#pY*Om@caCk*ImX{Lu^-(Y)3*3ymuK7+Kc77vwAyRjXCp>9ND{|YLa#cS-O(u?hP#kQO(Z0ajyvn~K$Wp+ zg@jvPiw)|hh9vov`nVgEDT0-EI;zvL8Ou>UwLa#p5`C2OEawOVKI)b}x>yg~kD)kL zIE?bUdy&xt@wII)=v`jqSKHs%řM$>Nar`!Cer1-M*?Qk?~>zjSU@69Mdb&H=L zw(7CSwo6ldKR(6xr>6LR$X@;lEDb=FVlmvtP{v*KAcB!Ry?fBx*b3-CbrbLJgSooinS!qhrN7zp)n1eV8p zmuE@{lWE*Eky9?NdF_%w>UbTdq)yL2G3^ENz5Qq$V^F8qfKL0Xk~VriZf+s|pH=yg zv|4Sqn%Mt=R{y(7>?uDN12MMNz)pj^j-59W|Bv?6@@JZ*rP35Fz34GV^0>5wk<3m} z^3PVuT9lNyBAFit5!65NS0_S1k;tbI5RcH~(D+VuZhTZ02JbvWKgo@|pTomOKB(A` z#6M(O=c{LntXlBvKcBJPq|e3cEN_tEDn)U1zsYs|t$C$OIjTYJJ4*&ZGBIfzHz)@; zVdsH&HK36O>GLgK(o5tBU&8YNia2<@;`;i&z16;Q{T}W%%4;zGXJM?CohIJ5+^3Kt zOn$%k#s|dgqsC3Y=ycyQ8)myzDcgPQoYd_OWvw8Vc+MN1PA1s>Y|2%kIfb7(Z)Oy0&59`!Q@2irRA2x^DAInl`PV?CV!af3w< z`CCVdAum%eJT)uvCE9csvd!drffDj!eU0^Pe}W&gf_SThoaqPc?fhYs5{TCu%zBxh za~Sgug8%GeEWykPT`v0z%E7=b-El{RE^!{_&)6E-h?7zD6K7H0&uP6#XU=WxkIzjx zlAq9`@#Q$)L} z9lOO!zYu{Ocs~mB;S4k7z%-H#b0K*_k$sz*#4=CgnH00^=iRZNR#dfZNyir;+Fi$H z@e7w!6UTjs%W#=5(L205=F|B_DruR3IeZeItRgvXdqjR$8*5sM=p^?R%*cKVy*Oen zna&R8vomO6U&{D;->1~Xc&ISF6a5{yWYhm=5JmbmR@(>ts0aErD=3_7(r@k$Df*kr z#KJ2PD{~Ky^SwPHChQR|9?1=AO^g=IWuz`c(mJu(O$-dutSCvbu5o1AJ>(9+y=(gMB2im%I`ME zwdZVFbC+?|-QpORrEjr)kBj_Crf-(Kj!Y>XhGUk^Fvd@&Z}%_6AQ%Nu`M1kJKG11X z>d6VG$yn^%)zW{|$h37Y2X~kWA6Q-eW|0-o?#pg4h9q{wTl%PX9V!s*v{spX9B(h6 zeOqx9^U$1o#c#?vvSFYv?$4dSiGDxs3YOeJ<`>Hkaz5b8idT})|7WKu&p#_^9@}w` z^e_8u!Leu=bHKOwj$YSV&nG_{Sq^IC`dYX@=P(?fMOrj)K&RhBtT)T$u$;_y7f0~> zwKt`AD);{|_a@+N71tlAl0YK1SnMh^RDc1qD}cc)0foe%lmrAJUtM$WHbP<~4zpz)!zJc*=7loSG@JRVmi-!(v2r1f%G@x^@hi-PY&4COga#a$g90$w zG`F(t+sKXS2lA&AdL?+G3<&YQ#x=hdY|FQNLUt6PfblKBIh>t8wSA?y1O!wJxjQDB zFLdRd2Q~;Z;2MpRpu^i=978+K)h+J+V!MB$Y#;rTBO$`~fBlo+a~=i0uZwyHSKLZo zr;+6|YCOPTsaODpCVAmp4w-=<%tRpyg0>R|2I-9nz0gQ6KQIMgO5LBL{Y>rmH^;%k z2)kglNf!f}lJoxhVVInRPft6qckRsr?8JkEhEJnjXT~jR1&S(@0mzXwA?ssM==8jO zd!&gM@k#<7+CLO^$zA|+#vxrKdSmpCU6o1qHFGE zO76b{Qhenix?Jot1Mf`2yQ~~u|8=U}xPrGoep2qw+aGct)K58<*Xw5`f6;~pnEwMq zhl+>0bUVE$&ITen--pMlN6X_>@Wj?B`A%9fdgu|T4VB=YV;bj`j<^QymI#UG|QoaBN2yh$Hk*m!y0WsHBW^xbUA{t?a-aV|U99d{Eq zv6*f>#kiI7X6)tBHsJjkF`I>^Vo*}jz;|WmXyglaEBD{g8Zdy9S$yY~VnvqS8)u1} zy@z=|aHx&|GPQecqU7h*F_0fypXzkEMrnxSikIP=BR!5}?}TPkbVo5Tgriq0$h z`G_O?%IrPkjDaO=zxGM|5k2ifEh8s<-=f~1XWpmre&B1FZh{DVmwhkmnywML)cG-O zfQVkezgak^@5za+?~Iw!x@yGy=4AU<%tavDN=)TuQXFjZbh2YAe-&*d-dYs5R3fM0 z!;#M$3;kd~u;M6dG7NH*i+_!-ch95ICrq|Jo^$p+53y!uqXyI*s@ZAnf1QXAZcb?} zjhH`iN;~pWIC$l03z@2AZ-8t;DCZ$G!XPxI{Toz~8G|QQY&tcw?!T}jn*zrZy1tp( zz8s($%;@L)1k=+XV7zsQley@V3r#4>Z5+yFWQ8Zf70y{g(0I~w`$1y4d2ppnu&Fu0 z2H*xZ6uX2CIEtrz8ri{lsiL!@nJgIh;nnEu_61<}f;{%W6sF2)VY2*Qw&s>`v`K+N z(FKTU79y_*t@Oa=oHx#;+9cfdyR?r@XoDK)JLjikVa-&Y4a0ML#=&uEc^s|9i1i|> zUL5smv^o;xOx$w zDgR>YL6$rV$k(@+=Vkf&M)SNZU!OG32g}#vy~eL<@hIvIg0HUs_+kSSr)suId{iX; zZl27`*B4M#f;FBSr~|h0_`=XhK6V2RB-G2-_u--HNS&|01etD=uTKJcP`>_^(#8_v zIZy6O>o>VN*AF35CGl&``TAAA1UU#v%mFtW11)q4yn&ms?-sc6K`=PMU~sr#Ag2+; zL5j2I+0X$iV?Wzu>_dY<+R8xsZ>^>!I!MV6zSLB|h>~UN*aj|g`*m)x+>JdgD4!d@ z)Tx%Gb^TtBbmQT%j`uYLIJ#A*mv zruJA5PQf|Zg9CQUwGIAn5Hn{|Ozs zT%6@(d~y7%h`-MJysTV8mupb)Hqr3z{cl;hs4kaw;f*1@ZOh>$uT=PTp&Sv5U+K+n z5U(1(&(v;qcLAHgF>0wBD)GC3?|gCJZ4Wuvr zP64jzH?F648{o&>J)td&#S8sHjx^|f)I;QXOJJ`Zk!jHMGvkuRp9#Gu;E%*Dg+2Un zOW(!v{$Bi%_x*Tp#($JEUIt%&__i1si4JAV$@5tCFklEdlloTtTta-ULM;D2eY>5t z;LE@Wc5@J4R_{I}Uz%m!sP+f=BXkd-xXrf~_5M8bzNhScw|Q~FD%U^Td~1{X>O2P? z-svW5_Nwe>y>7k$&YFdOh+Wi~3w0hDWC3S_*uBuYf?_+W(7arO(muP_#o4P& z?KSvg_^<$FD)^wv1)cYisa+zuckQqC^YGy~h%#p4IgTHAK|lL>?(J+_&JLs7FDAa> z_H#++j>5*Hhj4uJTvbbEK>)#;gc(g7PS*6-uqQDIQ$B={qY$xEkApD2E3$M+ z&STfRKRA@IQmYA|?}Sc6xCHr#jS+H5s+ynYI9V%z(5d98&@AP0NVs72<#c4&<-C88 zYR>wX;Yiew>zmKF#{r^uRy>~MV50SCsz;PriM1tKW^%isFNW9ZxqqH zaA$&K1=O||5^kOMDDy^R<|x9WVG{l*2{&PqtZg*?#-=}Pt~$tyo=-x?w&fVxw2sv@sMH1S~r zo4(PyBS>F}a_9ELd|LTXc0;n{Z7ABUZBVpK?MvLmtTMte{N+HS2HF;PKKREd;SOqr zo7NLXf*~@uX~l2rYC&gv&6p*|7|!G8*NUIvZmEvrr&V>EpG&Ozaj9?TuLt922_|HC z{8Wq``r8G$M&V~9wZ5TJy4@$=cE2}bK8|u@_xl5&zp~$ZAmhWsb2$AT2cA|NRm=W` zEV|f@*teH2%NBJA%;s;6J0+)U1M<}Ede{Ce(F~>Bgy-6FTD7FFjF;*gAuZ^0V+#Cc zB1n&h)9?A&gYmQXTgw;q67tRuj)(^chkZL8@@jCJYSLly7G#$@M{d^ufpu#|yxr3oQ;{gmBbJxe{hdZo(n z`l|)?%KB^RVxj9?{HdU8$_J{yqE#+k+oq0Co4ohpxuq}S1<(uE5R*aVSx@NDKGvxEzymg@ zV@8Z)2gFMHeEX^;SF70044bQ#%>tehzV*v68G8dV>)r_(LF(Py8=gU=&d+Objs%OL zlO2<*6V8=@;`T`*RQT?(bG#S zL0a4xuxd#y_=y<8qv6kdfXK7hgR}*(i0C~Ik?f{q+S6ukwFW&SVNt#0b=LtEyvVn> zv?JdGFnt)tA=tM9UrgHk8h=*oqQg8XA5!H}7T>VTOjxYSUCci+9>}>uJ^<*L^!Nc@ zO=*8t^HI&w;3G-kCP;CQi>oIYy)ntY9IK8$515PTm7qI#F2))_rPwmMp&#AgoO`?k zh~Y-X676NHmh#*H;f7kjk19f6j8@FZ4+b{q1JJrq<~3G~nu-rT*&R?sE$M))U@k(` z@~M^{AJxm10EH#%?Vh6UeCIgdUX7|{PZ)^Zo>-0pM2O}04B&FHtYl=JRQ}%>8TXbW zXhuf5D9;cfXFH_hFGYTO+p0OwMw?@5iVM}0>sXgrsCV|uvz2@&=MG;=LMdj5L>(vbPD%8MQ zY6QKxNV?rl4caldAt?gm4Pc?~2(W!DU||ico4~N3%O0<`YKGH}#4ZtfUA#91z8m71 z!Z+shMS-uo3^*qEEJi(Etlz1;Q7EG5x#M(|4{JxYtX-~``DKl6l4aZVHU(MeMC`oy z*_Ma2u4iZ_erMsC!Y|^)41O}HtMXBHy9uk^zO`sK9MJA(n3FQ?c5kWqGDy4qoWIia z*0FnrNpDuyv+2FWYBwIxuE_^Vr{F*41Dj?3NS|x|7d*hKyVie>N#Z+r3wDupQ~Kj} z*1Q}0vyM>%eFV$~^c5z`-5NhF+0h_cN6RVm?6m0WTpTx-VvhkKn#IPgm~5P1{SLFB zdYZtQj?sWNM_fn3a=pT%N8Ocoy(yUg%(y4vhLu^F?5*7+o@u;5y-*hLhhtY#EN{&} zB(NqUXq{OD%jtDy8>4|zkqxwB)!w345d~z%9qwWTEYu}>#CmFe>)-IHtypijP-fGC zcThX5Y1%oK?KEsn%eKb#Y^-NwgZmU7`B1e6PL?z6N6=zF?FXn8!+_se`**Q8IGv${^Ape5A_{FQyF8C7md`;zLU zewV^u*`^8@4W=CKxzn$)a|VpTlIlZQ7Im8V7w?+!xAQr474BPbU#H8RDCH(sr`efp zbu59}bM@0KpLVXi_c+wU-h6Y@ea(|-1y6d+O|QA>GiIva+zgnToVm%Hn}WG18ptJe zqY|6co!Iw8cTRUU4{^11yRs7t$v_De$yn&bKIj?hA$iZs^qVcW-yz1u8g#glSB_%P znO;ms@po=M!o*`HW+6P<`vJ_A8NC*})lJ-Jx5mN@0g1O!fJngJo6Ew(-Fq!~ltNWg zTs*$=<3S_hY&9qzEojD>haN&ZM*d8D#IuHTdYRgLF>mI~mj%g*z;cAM;uYo3^{_|2 zlSf!aKL_6@@JQ20r7MyLB(JD*M(@_cecSzF@5VU$ojt;gd)L056MgL%_+$|;Oy=+t zk0-qZLsr~m{fhZ?yZ^-wx^^qHt&sy+zV?K(f7Kf7mbABab}J^0l-aF6yr}KgAwXD* zaSXs|w@iPo&&F_-&pYxvw1v9uAa}CD|DF%QVtg$Qk*~d(cHjGC2l+i0xbkTDPI>IY zV}J=Y3K*{c&2#&#npxi*%=5?Zze_wMBG9qIC!@KU;5H_CCMw)xBvzV~tc zzF)uZnc;sQ(eI0R&nVT7|82Yr=L2uVd(PgFf`D~;{rWv<3n#WGi`*qP3vZwV>NtUX zCElGV5BYGHg&a)#P-sS%p%u(kqTASW%Gqo=EZK1aV$vyc1Vf=A#!l7}O<~LtyG-rw zAAp$|@XwV+EZ)?U$j-w^Ns0%%zUd2HwCzq7!$KWe$lxQ!n|Jy>-4s;0)T>JUl)K*`x8$4-9F|x+X8plpFviT zAH{hh2c?JzVC|!*C&LHx1->Kz7`wqbyl6LiSW@%`wxSl_0`C$yWUA}J#+3~k1ID^yWzfHJA2y)3SH?m zTDtMG+TK35VTHY|z(=~S$wD1>?7PhNfVyoIpv^mUZ7qG$x1JhHKG^W^57}ai&+Qw_2ThE zwO-h8vw%yLY)0*J`)ikLVmUYGI-j2mbZw^`>{-ZDz%1KolCGg5K*M&nyzSY}o6m;N z+5H;7-P{5AK|-0ZRC3iyCg2kKn|=Cw!LFjaDKb~gw6fPQ-0H(3Vu=9D>BAm-%gs7{ z6RScMafI&o7#QJ=4^(jR+S6Koe!9MU4kGoRvSZ}O^3yWTNP#&f8GS(=5iKTno@mww z6~em+KlWvh!e~MYp5VY#HuT)J1Ptb}9&dH>w*uW%qldvX62uMa8%<4IJEY;qAw3 zo%f9kW2}!MN)OS+eie46+IcU?uQw9;Iny5b-VeKAd<4h!&Flx}fXvwuAJiEiz$Dkpk8ATiu#W5gO`=QosgqyE-Wjq;Qjm>U7q`G1GiG0E1e9+tf2YP{8U%HU7E>!Xf&e)AaHHPi~q1$Kxv)QH8Y z&=aQQl)Gem^Ulyijjw*@x=hJed;%9w4Tj4M$U9J%8Rr}Q13Ge%&J^*o?QRR3rQQ8T z$;D9~J-V8T&+!8ycN;mNzz4^N5mYyJ*Vttvo8^3FoK%dC7qX8b;7skxa}2L9INjp) zSJ^Ra{cF5cyiOB0o8SCx##h1>J?=Ao%=c`+7a*LARUXCEr#v<*z67tE?h+hp-ym`( zZMgayl{PHne->p_-tfn~1FM`29Eptc?DmKc`a#+|iF|PP(_nZN-ixAv_5ZDEF|Pi8 zJ?rqIeDN}NnfdDVUU54Hzt-`7fnR37CHsLm7(AG-$=%|~1NZ5d+R!$L#E=m(F?Z$& zVYrIRP+Tt4zAe)#&(;q{4V7m*ppJIJ$c2fa%jIH<4Oo33x&eUoI_qL`Z%RyU&+9sl zlEJ4;K^C3yx47dfDhgO}&)G(1T)K&W10JK9vhijL#1nroBGiRupo34|#AZ0&Tz5}@ zTz&R_I<7YSB;5R2;3sPLqjq^*ZI|msIn#d|$;b}s>}>L>97}ZD5h6NDy%XX;%jKBu zI8Q@mE&1a)U`0xuj%)qri~a7?v5?2$^Ti%evRZV`dyordaqJnz2H@l(+}xmWj~oK- zVgq-?KlSPY!ZmVeXtMfW{MC+>!CYS6>lkg z3~bt$=uq}0w693?CB)L$mm9wdv@da#QTAm=-qF77K7DQNOB35$JNt6W^R|8YjrVH} z_C=pdC;ck+rGU0w`?AULYiD0-P-$uPg0RkEWZJrLIow()eE)yL9$0e!KMYUIBI~sqIoD zY7b?XVwPRPLJ}3(%;?|!uH%J*K!uAO{` zQF$mneHAa4?;-h+I$*8&@YiQ-K0M(4S_2=laFZsk6g?k6+b$n=nZ9;>h@kRNeE0;e z*ste9@}c3twdTXUf3x{;r}t|OeBk+OK0f5ow#$d@j#)cCL{WJtK76ppAbgPXzJl^v zuiT>tM)!QV9$hED>u&2+?hwIW>Id7)gE4E(ioyOf@To1(oOr2NHKIBC^(homdX$P}fKWGON6T}Yg+-dCK={xxC;4`~xJ19Uk z+-ATfS}mxJAo54g3tA(ImPxJu`-U=qN_^@9@#)lZN_++sKG$4r@Oin~kIw{ykKwn( zi)26?4_>c!z&j^hXU`KkPDqvoett&Mtc&(^XW=RSlA z{&g-b`=PzexVikJ$_MLpBj|LtM>4l;yb+=N297uO{ny~*jW@KEIV0{EWV}&g2|YeO zGuiqf&g=OYaqsxP!dw6J;2sSQ7rTF-LWg4jh>>%0BDp$4$hij}Uc#9_qvA3=5y_efVT*FGnqi^*24* zxtzFiJ+!Kak#2lw!KZ(yTKp1`v-@_W*GAQn`}nr3e`_WQ-Ct2lhNQcWbWr_Rp=0J4 zawtfDBf4CRD)+s?$`#O}r{|e*=}T06AXGx)lJ@T*_?su@f&3l)zSrO7{Jj;mz~8I> zr1|^R$Aj`$!B_nKX*qvye$Q*;!gAiGCktd};Wj z=F3z69*i$Nrw+xJxmFt$eCat%_;L;*tdTD{7G5)7kam=FvDav)T2y~Zoa(nz59J5v z%b}t?S4&n{K(FRI?5s^06dnt!1o~v41VSm@RaH+5}(IW(x^9f;% zb|%5XYqm4Pj)z2l2F3fBH#{Cz;60%5eux^eM!ZYI!+Y5Fu^@V==1-^i`u&F2J)C#( z^?PQ*UVF2bYCBLFTJ%z_U|w`?`+=3c_xJ0-pzZ8CL^~Hrt=dtloyn%1NrSgT`(XT_ zpPpx58=Rg~RXZ0evo(3Vrss7mkaxpV&mNiaYv6oD?=(u`gj??u1A3vt{Dq{p`zOp7 zyZ>iA4z~Nvg2{v*sp?y)>OWW2!_HQy?%_e3$cuP1qNJIRFgBC(37s{<56L@nbWlnh zDS|I!Sq8DzxR5Eo;NQId6GdQBG|+D2ESa!WX=2>=Q-m0NP9V+gT(bG_Izb7 zCv9I`gN4~K$j$YXB6VzT9)FoAC;)QKnRBMH4`u5D#V<-7m2Qq41yXo+DZiSs6JOA{ z?1;+#c@@@c;A@oS+9%8p?J0#L&Z;x;{S%YVH+6$ynm;XW$ zzTo=u|NIu~%d_vV=dKel>l5v9pnrXNBQRI_I=#O9)x7VBCq}F4KIAO zpg~$H&L21ONO*BozK}wB$e8)W=1#Ev*pSLYwgx}X%A65QIE9nFaUJK;x4m05I)TIq z$O~l!`~n;oyCCko@g~zBiO?902!^&v8DiO-E8cM~*6H>%sQ2rX>tRpqI{v@@Q6n zD`8fR6U)2nF=b*Nc%@LlsfkvFmTAEvK7F$!uaz)oiJe5a{Vif(^s!pZ&T+kO9yhXL zAB#TCF=7eoMg}!B7B$V&`QVc3ufUwUPvT&7K^LwcONQ}6m=$?<0dX+fbP^vOOvsk0l$n6 z;8yH?C)#u7s5~3(m$6;ueF^W4y*LEDTdF&j3bV%jjpVBc1Bz4rLc2@;{YgAl+6{cn z#eT@D@}dkDf#Uogb-M$^)dp?|oPah8g^hI3MR&Da|$v zO>C$CB&*&MJRp*tKoa$TbGWMS{6*^e>h*Z_7Nl5bK-HWrZ&vsRo4zRc1NoA;VoUI+)Op-Qd_WH&zC;#I&9BBNp8~sNF7{)7rjoBd6i3(H zdIuB%Vs_!jW#`QHvK;Ib{@^_%BkbHI;sp7#@yJTKVXyydM6>q#zniYpmG3+rx`oXORuGeSK7!^bKW^|9y9K$UIQ60m3Gdo@q)QLq zcj@9cBRE0Fb?3`1)?9_U(iC1Yguq>p%<6 z>?WUihwYe(wrErh-`W3Bwhw;g1#a!9cZ#`*IO)Y6y)0KeL6r-ii1uaQdmT`4rc5Z? zr`M&+#aS*>`)dU+?8M99HRy6Flw$|<@9E!%7uD~Z_51KP{`a{Cg-@r8&(+7nL%nki z^xCE`&2rwj!go|EzYT}YWJkzmvSLA0Rp$JPO*4hdGydq!`CWP-`Rnc@D>~nt;qq73 zzJ5`KxxVE%2z)MQr*LBK`Am)F&d4ypkk5(vqa+HIu-T^3%^? zh}(bIe%QJ6GdCbgpgm9&sRK9EGMk8#0F@>-5V<%`;}6PPNVzw|*(4)2#OJmh>5}r| zdrK=WQsX8Yo_epwTb+J*bq1czzh=M_qXhn~*hay#->0nilmorzke`r@G|nPjUq~1* z@VC{g?RrsvJ)6Z-?Q=2uQ({OP8KvM&vw!?_My?9dNEaa-yT!c~4%;(gk& z!YOFJOzP3@qbSB&RrYv??|6}qyomRJDmUo78q1k^HIBa~-lAB|@mFTtLB3y8(KjU8 z$T{P&Ch4!*Q}Bl|iqrJ`C|3{ozFFQYzF$Ndn@$$Q*OVuzV?EEFO|r*2>I32t0CHnF zn4V{@l#nCr%zDWeaya!HREcu}Jy$}W*e#-AuHPq~{dnVRgE0pUN--|&sO@ds6wrJP z!p>DM`q~iR=h|b&2`y~N;b-*u}(q6eZ4zC@i{Ag;{&C@URxuEB2- zXD?#-d_A4#HgHLA+jQZd>(+NQbc#`~0ge@0M0fld7}@iJ%g7kOuq_`S<7IG>U{L%M zxY1L};WDUy|5-PvH!wv{X*UecxRvqVz%hQjWgJ~-23$8BFTB0- z!dIDBk?%HGV>t;oAx36=tIWlUi0)Ypui2$p3T`iXyT7ty~)lW#hWdfnY7xH7GS zQyBTAFG7~+jL!g{J*>J)vsDs=cMXSXyd#kS&eAl*=b!j z?_~H|-mfuo%9SsboSw+_OO){AuP_60pWhoeTI5s4@zlCf(-|Z{65AP7x8z*+wAo{j z1}g4FzJ!lb^4W%Jl+T6^6Fn+E7YGA!2L349jq{P7WQM0~9N(ny5cwSXI~`fO=cFrEhiv$Iw-&2ThG94!dG4R!~A~ViT?b4O7K?SrJwEN>+<@1_Du2!_B}JM zhUN6f&4-fz5X(W2`&d=RYZqWas`H(nn_jW_LB0+kLCf+5lphLiH_Dl~i1>7}9`a}s zIe_tPO!S&0!H>4#idA3#H?se9yg8Bm-`GUjWKWqS)(4p%sxkeJ;^V(y&+przNb%mk@o?R__@d{6tEW%-_*@VoYT{4sL!`0@Zb>5+27&iB-ySv%hoYuEXn{8O$! zck?~Q?imTT?4INUxT>g-{Q)}=%QtI}|1DT6Ga<66tl+#cS7Pozf@C^cH$EUAS_~gh zo!n}Q`Nz+7`u%`@-#ym2i+L|A<^VF54J!#6p#E0 zl5UnRKlKYUkH{_}ehq|=1hqOl_cbF@Qz;T@!pcneJ0WChXJgYD;H}=3@McihO3vcr z3C|uE7bu6wyQ_0xXE3)LZhaRa!dD~aGk$;PdQ?}3IiQKifS}9ono@Y3EAcTOZ{0re zYXUs@j0R(W&!idXDZp}bNZrR@{XH}au&+Hdrs}x-7}ST0T#@I;r$oebBt&`nO%b(! zujxlDa!K{OpzQ(7hv>P8`mpo<*>38;0Vp`XSv|HQpWQT7@N)OD>@IEOM2YnAK$!`@ z0@Pu<_<|gr*~}0}C^?^)zjn z+Vgit-fP4RnZt_2*pzjAlJ9#KHlCdp{NDh6*!kUZGjDAB{RZkK^g`pJKGZ;5(z+!w zL&t4)y_l|Ne=lPx5J1&Zzf@HrkB();)S7X$=~wb0N2YoFJc;$gWP=Wwg6i9P*yPbU ze?JfsGra6QS30GI@{6%Z3wNo5to~+sy#IROE!>7v)CcSr`5X^8;&NWc!!r4(p}wPj zx9XzXu8}T!8h_A5FYbgcnmrvhq9PAbMEk6lSM}zpdWR|-a~iqEU zYI8wc_39j;%g*k=?p^esUB3i8jnQue0&-qQ6RUX%L?fRj{-k_%TJ_xXkn6PLOt!l(_TFNYJ|Z3nt$5s`|z|MPd`&nKUYr&@HB^~AE~DwtEYK9EiA83lcx~z zHqwH>UHHSlo$|Xw@b6H>w0_u}Y|kT}NJACclI`JSdjk?=)3W&4nQTu+@SEXA7k+o+ zcMQL4@Vf`Ud+|Gt-*x!ihu{79oxtxTeh=Vx4!=|Q-GJX{f~RjK8}Ym8zPblzgbJe? zHnR1Fd4VMQ9Rmk^R|d(%>3C2USNCD(&d}rSw-5qzc%t&eM)pWQT z9Kt+FsX$uSJPzq(J($So0u;~Gp7?XwM=-{zdEN}H5=v=dFzPVFi9W5yY??hhDe zBoscw9gp?^Tf-4Xd7mxSmEj4`Ca*v zhKuzIlDJW4G3UXI+n7K-_d%BtHM#*~Cy95M_FLzt*7CdZsq>Zanug21E5GPomon3^ zUSGn2A8o0@!`OX|hnnvIGn?EKsFt8Knb_5XHm5;hFx0pNnIFsu_c0IK&zA#T@x!H5 z&Kz8v-|t);k_@fs@-jc_jAnF$In#()?yuc( zLle+}f_;dxR4~$Fd;)I8j_|LhXWnrrThwLC*X2k#?e-g6XlC3`S3z{3t!43^ltB2JO z4sj7@({fRtdExDqSEz_e{Op?G&!BxtUO24$w!oi*DUH_B>IEFQKJT@JU-$Wb9q8hi zW<3)xm_FgUQeMW+$vo2l@PKZj0kx3PitkiuH7?^lMA1EmW)DuYU`t%GeL40zezFo! zab^p}uN3<@8JZ~88K==>V%GbNt<>pL4JS3k*P>P9>_rTxJM76E!4$(G~@c$Q>~ z*v$(1MNumN6%Kei=M=hiFJL(d;*dZ_IQaMPqA_b#w!1t!^}Mo&P^%tv2| zhp6MtY0N>+eQDo<9UvOnq7qSHZZ3lt3=MjR-%fF-n0BKY6+-n#Kv|(r%1-VLH=UVW z?Wn-*B&_{~fAthArdltQ*#9D41?S!sBE&ciW3q}JD3ipU7wvo3p<+)&-%hXApz>?hc)DsyM2UAOD|Kg%F6X12$5MGcxWg}V$vJ)G;`~j}9xQ!n)O z(MRCxcQf(TJ8mu#Vq|TH71tYnke*)Qx5}$i@SQEOr$g(jX;+J@_!lcZQ$DTd5@cf&le7q@%j88`}w>_ekeY79w>B3 zd?|d6Ec>7MoFW`Oe<6JS6LP=9;q%*nclm7k!$DMMhq|dg^;7F!Ay}NM8H)FO%0I8{xX^GP`gxTG9Pxx06QwZ)X=4-5~P%!x%7@eOre@>Oeqa&LJA0z)aZs)AIJ<`qK|60s6BP>GEOek47}k4_!39d zik?ZHig83KmSGoPTm=um!^LV60CH1us*o|)dIJ!0xppZt?!=3%d<^+o-cB0rK$hKn z4D;#U`sO?+qf8;d_--{~`uFcZX^8AfC-kz*A2VQc&oeQ0i{qujcl3nC1uu^_^1KzE za}Ln-vz3<~;6ChH&^r*nf=a~re+;&^BmSQz-}%B!R(&42T$qZnz*O#!X?=Xa8HtDn zG3DMM#?oiKy;uBBX&>4fHSOCdpeysgwA;MMzkXBRn_ptu-W?U}0zQqVa+kW%F=kZI z56EECzv<+_rd7_Xo>ohUJ`o3HNZe@JNtkxvcS?icW%8HAD`LufcpMv6t{O4_2m%RZ5o#|w8sAPAJ!vIVaIyWuUK(G7=VqUc{l4FN zZ_95D`vg*B$t_xnHlZaET!>55Iq*ZD@Di0g=y6)1^n=U;z_+{cz95PJD7SsYL+vB1 zTKsD~0I*UYTC;MjCJ$ihk-j$8Ls%XD8P%F9$FO=jimrLzzTHm=#RqQTjWz(*RKS@k z@D^egashG&Sd27@->BwJkBHNW@Ee*k9@UhlAf7Q7@#2N|+nsOO4fQk>V!l=QuH$b1 zc~eJT<>gz;&nNpKnuA_UAhO6oIgfm8rCqZ&{3PWi5dKHM931`!3jTuz{;59r#vV}v zc>zA-?W)B`;|&<+<=@aD=_}bG-ZuxVagC~Nh}Y!mrl}nO!fCoR?~=T0<6Vk(S>849u9J6-yz8QNbYJ_Y;~*!f z&qqDefI#mwG~PE2fptGKcLTKfInHzDr{G0_^M6Io1d1P+lDWS6LQYz>+EXv&gmWsQ z1c+5p>9dK04gcv6Qd>i?bpOgOh|Q&w|=a1V=x#cVpow> zvm(yw$?m>^#i-4T{AflwNtDsvfBiT1ohwIdg_pJib0<~U00HjVfPj4~tZx=rRKF`B zSdsjoT-fr%a**vY&i59(-?IwRiYVo#89*U8xl{^e1uUyCaFl8xK1-|46 z*d9!~T3d+A^J#YfmG(e=lb0S*wd4xmO+IHe3gk7N2w@n1X4g;q>d!yJmIKbBs#vKP z%C2LjQcWjaGEXFt^No($9386@c+U6lcULB}vz+x2M!_r1+YLx^u(U~^5)C{%WOx1S zn}>}a+i_1HUIQ05-!O+V+1Ce|gtkOwyo8$=Zw9D8%JQL1J^>-%av_y!=;p5sGvn<_ zlzRnz43#)uLY`q(OoX`;_}b%!)C*%ntrP-W;$L@>eu@-OUFAm~7oOVrX(K-@Kd`fu z4@IwG`HR7NwHM9Va-}=(YnNv`w%)5fnr;GLkrr!5b@zw+c=vO!D;rnQ5kmLH-C-9@pzao8mF?{PJ_|_xf zTc^Xf&O9Fa2DhsGE8ME`ujfJ=E@0=&cfPf=J+?YQ2bWED99x~_T_^8Syi>07*XCQ_ zasxNmOE(Bli98h@=KvjNj*c@=#|ck~=+j*wLsg6*9M%QF(5{R(Gn!B)Q#>kUqvYaQJT9CFrvL{M~-NV+H&X#fsgif zCy!!i418Mx-Di+)^ilj8M2KP)`&H%qh+QtJ%9R>W4mtyWKwnVLeyErqF>wsxM_AA6 z&smT`H`YoRJD#h7R50VAWFDjz`|(5;Z?yN3N@QQvc97f-fJYy^>{WMVUmWc?`ytTK z29R@OCQdRmpoq(F*nu|uG%4d|@;06LbqWp6ug>yUXFn!L_^X@0dN^IeUw!=5pSwx@ zQafgH6ER1g!DFgwfpr%dJDKE6s~MG(s^0-_+MW{!^vaIl5PQY@PK&{r@oo5S zb}i2d8tt6*Bf5N*|7IDx9DY*2-FyO8Y3NzTh7Tq~$CZg*<+V;@%w`eCnD~J(cu_91 zcZr{K^Od`h^g`zi>=h%9ee!FcYRcUQ5`Q`SKkCL_F+c%%&uQ||PEb6Pq(9Q@iRAkx zJvWN3VpNZ0)KhuomzDkipj;wX+K=T>ygUxE%N6|cw*ll9`l`-m?6`Ogl;_6VWh^;@ z1)&I>-*QHty^b}H$aSY(cy05S^ZytS&y12Ur50d89*YJ#4;<+GKn1w0);|Q%Ph9=< zcUkmb^x$Chv!0EQT2ImzX;=_f^RbwxzAr+A@HOOc>yD@>_1)%9>DT&7XUH#RZEhbKcdqm zf1^ry<6}tEYy5hlqAQq=UScz7{xKviQ72XY@w8tl+*dm3J{M;<|7i5W;7xt31AO$C z@JX@~O*gCYW~TPdPQ0?GWUqfn^`5Cux(8stfS+pv*M6RG^iq-6qwf@X_2y%b{Gor| zWiXUqG^?KFQIxiI*WUS2-=O#RxD&reWUY*%1^*6g!6pkK5N9+rG20LYThjgYzzq!;pez??P6XO!3sDxY0~ zz9*lLU2Ehs4@;nN9#TF#xA*uY@)`cEk|g?v&@c`@%%*v_NZ|DAAUx76YS8tGz_bfaEt57de^ zzeB$w@?D8QMlGV4>&?;_E?eV#@}~~%fj_Qa+)MmozkoJlyDV6421cH51QR08cOG!N zF$QSPWl&Pr9-Dp$)VqElON9lPlJmhm|F?Sg72I~PJ&kPZ@plNl%aWC_sbp*0??vx& zF(td4GgsXGF63=(^sX0xEWP_BrrZb9yGKr5gWh!!n?dz1DlK_>H}z_T`%0(jJ{M;r z5pLez?ynf&`}{(>+vwfnSK^iJ7nbx^`i0)_34Y(gFMPB}^lpEIGd{iB_cXuWeFRG~ z482=+m#cSX+ya4>i}4}x1-&vaF6SIK-$Ht=bB-T^F2N%H2?ceWY2pp)Q48y1=-7#B z?l$`aA=WxhWJ4^MQhZ6cgLa;QN}cPENuZ=NESL&H@&);2&IwJ)99!Mbx%G2oZhaq7 z(Y)?rJ(|vN9c$}j{J2r1?N;KzH78u#5pm8!jzy`p4i^II6w2zkxF5*_Yfnk%Kb(l7KLIxuY<7Cb=aQajMu`P`?)()G8KZ3)`Xv zcYG{-4}@QXAjX4V#IHf%pHK$>uSk-)_6rTl<&A5{?Si9$G3HS678Fm_+ybf9hT)SJ&v;;_}a|kJj+T=3WAYs4uH^`5o zA~n>B`e4A5k3j6PE##UB>-*2Y>}EOg-m7dyk^^^a4ymO+>_(KgrVkr}#P#Zi10h!vZ|0V)`n(F0Z%U{&4 zJg(_eu|VuGcUN8vt#gbV=vT9=-IhX$>*vAAfI-*fvqa!vjJ>!{rG`oPcEj}lNV-1g@m$|TMQImqpP5F z#GK+CuAoYKs{wI{64aRUhPdWL;5p}wzz6NSc_7&jRq8~G%%-ss%#VEP{LBN-ArKVx zC{)yb+Q`3=1Lg-3q*Kd5jQ!Af2kk`Vdc%)(`nk-ng%n;cU)FxyJNA4LsS|z+MC@_J zanMHX@`O`k!5x2mW77drNQbP0V%$=S{n-cxKjw$ndNjUyNk&xW&wY7b9j8!tjsCiE zJIB=zW4o9hR|oO47%k&x5Ag`#=Z#3g>wYoqP(FK5-|;VpN2$O^B5 z(~L=C#a6#xY5*MY)x?_@98ZnyZ${_Pr_#g?Fi=vt-#XCBUj=$7&;NAtab|M$J2bbz zC6om&RK2Gp58-TfyQ|v?bft62-4vBXXfb~9GJb$ndr`GKzgbaE$09|PRlb-3&Z`pA zPUAA2uyX>k;}w3!%ooBD`23#D*W?yua@ufLu$+GBGSt-v(h)}eZzrc)%oRC31cZUK|F7IGTB+hP{=e(X;FCvtjJx2yL-OrF*Cs%P{03}RjE6Zu8N zq~zC|#*I3m-@7u(aj#Q^6|nJ$D?G~dBnsgO(33nK2k1!xr2F)w7f4%r@*y~(Eqj7E z919!<(~~@^4p&d2;KLw#G9C%?HR_4Yhnh`;>_rUDF@O&RJPzPP64u4Xhdv-^@!@?$ ziZ&mn{&{dd6i{`ze2CpUC?9r)h^&zhL4GZ|NtwN9Vjz&?AC+xXksi+`Ri z_G0|6%Iw7+)BX11pBOV%#=DR+H_q{W2Lb{k^F1)9Mdvkq5)jI%*QFVMWc;%)4!Gyn zu006iS0PfyuipED`E@l?d;1j-lq8&ejej3<>%86D803}J4Bove&?#M474(E|Ke{AU9P{^e!Lf8g4X}z zz-Osv_rJ)iKEQ7%Kb{_2CTFn+gXL^bv=Sg^3Do~~a(3hoMb56drcBPRI?69+N5b0u zuX1+iHp7;)-*>rs8RVx^8+mdjemeCK`DNuduee$K^vNiw`DOQK1dqY5HTvlsz|v3W zIcKW+jKsNFl9)6ZUdMAIv+>(4ojbnzH_85{L|xCt}`v=0US9YhWSIC zKdkE2{_t=tW1XXqp5JGwI`b<4zRYhA<6P-(w62m$YI)Ac1NAvxJ#*dTtMt5yIvo8N?0;Cj}7om8qm1=*Y=82zEP^7zWm2gOwRPz%ZS~_=NpIyFaj=g5S;Z$WLd+UD1UnX5s32_>7%j;wDN6Chb4gfw=)RL+qwsS-vmNp z-o`*c=P`&gFByltE_jC;0JoeUs+201WjQzRJ%0vpcXLy9@Y`Du<5Cwe)=sn(d5l_! zHLzIVxMC7|&5UH3SH}J{43@R_Q6HQ`I8d>Gz6YRst%?OSZUMcj66k%*8LctiHS*~B zYyUo7LpS%e)Xk;5sdXa$eJ$tDf#2YnHB0;E%M5)tXULfs#ezt6owx-jtp8KuD2UyV*+DH>jJB4T@ZtUdi!A`zj?Bwg4iqkcxw$B=X+Ui|? z)0kUrqqzF!X*Se!uwVPfK)=fN;rt2D?Y%M-+4RI#98rgxwpZKLO?G8Q-E?;UZH8!L zmvKGaxRLx&4{o5A`1k?!k~e+0so_mOZsNQdz)c-*a=1zGCXbsWZcHJ>nYId_M7>hP2FGPS3y zE9RW5SSJ&5PdrFzgl2`jAYLHeX~ z@fVa&!nP&Mm~>3K6n{Z?D|as87L-rg34f_5oz5xSukYD!;|JKEHKT!_Yk#ViUd6t& z;{FTShk7ohzL_lT=M!}%VP+g>nPgr7b(ja!$WV$46!yh>Zbqh4Fvl4Ut=kQ)*~yN>7T+j)8ZBS%Cn~+Y+V( zc~D47D@^H`t)oqxZp$wLlI5|dD*aecxfIGVUV-#s4K(aOPDOLRR_hij%9oAHg6L?W zf7E_L=;%WO06r)kH!dEMj>0hMh&~-a$KJ!EBj}ujno&ZB+Hd42rWVp@B-#G89dOb3 z8ara*Hp+8hB^&hk`M%O2$`vjeCEx1uA5P*IwbFJ@tqOYJSP z=LPNdLa$lvjhHW~p6uU*_398#GmriIUqCe>U$JN8r4lIf@^Ze+j5`9zGkOHV>&)e$ zm-9vdI##JeqVa2n^^4n{)C)U^x#$MQA4a~(kH%O1ao$N#s2Eqd$mVH8ZCKy3Ko(`^ zThQg)QCZ-$Z;@+HN=B{TL0dJ>K0lKXDJP}{WK6*}cq}_;e+5VDIY*`a@!lAqqT@Xq zpMl)4@#%pk4vEiivK~J1XUp(;_)5+ncl|O z5zZl45uoW^ll}(44K)DnaN5rf*8ani)J~J0HMRfB?&`!p(=VpHIWK*sey`c&!ZYtT z*hAGf^^884_uB=$XPIQ{qoW|n*#q@^#(TUB98-UWesA6xJk0wa1iZK5r}cY-7wKdh zXn!QzCtO~PuahCMH)8*%=rbd6EF_M9+@isYuXmy5dhzvy+izs8+9f^WpWj-IW7z2% zHl2XAD(2KqZy$y)i#?r1O(P__>F4Q>$<v)~%-?-%12FY+(U^~}rb zBmG2@=lkFTJ-`x>BF;-^j*z%W3hVN`hsoW}Yc04xd$5kz?a#e+f7ZOP#{O(!J*z+8 zWP4y@BdQM7pMn?qvrEdYeSfk(I?VLv1r3Z5lB@gJG161)4!fHsvzye|K|;LYc9q>D z?_DjvFO+%_#ARxa+eXypcUY3?G@LPleE!aVRX<7|i#YOPzopnoP?0uOb!%01CaSut zJvRr4!2B2Jbk~U->`5Ld&HpTOJf&D<4*t%pxDFINYk^Z77&)7R8flO7FvfP_R`i>H zArG=H3&M3*;@{wGIPO>G1_t3#d-nTmPKgcM-yIz>}ps)GYEA{nyq-FtNG>bsSor7BO8-PPBn;ExM z1I7@t^7|A$cuBbN0JxI@x7@y`QNB|D!%&t0{U5+%Pyb8&<-JDXF>SJAjARq7Vy}^H-dig;oFGzEPU(B@ckncv!Z?Wp|MwG_&zA? zooss9i!0D)AE>V%GHMRCR|B7--)w(a0&+qA@OZQmpqE+H|8{zL{`W;M|9WAWUOu#^ zUoX#ZA4)I#KGAx4^(VvA%L^_em(%2$(Mw~;1N~w6Em49r+8N3pmiQiekYMpLe|V6Z z@&6n}$Vs0+B>t89(2LFpkgxQcwtRK-m#q(dXxoyne?X0GeVF!>HON;H^(}um3-j_K zk4C~Qe|UM#8vJ4N$};(Ccsp3Wz65guJ4 zTE6xx4o|*TFLdQA$R9QUo=@+Z^TB+18(HiCzC=;~+wtX_!-OwWuq++|>%|F&?dIpp zH%o`&OY&pQm+yT%JieUk@x|z!kt^z54)6?L#2=>LfeN%@;&%3>;+_7E0-7JD9_6u% z_5A*@mo+ovp8aSje@OhPuf=yO_4Ox6WdguqEJA;{+a<~$Mp!m8Zh;0I=nso{DRv+L z?mm(t^^bS@P`*8*9KZgfOv*{9J-_~A ziBN?8NPoM_6GaI*S5Fp zm60Fj19?I20>;OqC!^Q(e0#b_pT#Fs!{y!@*i^8jQ1EH z??pV#XItKo6t-VpSQ+y2Ka7v}SZwq;$Sx5s_%I-O%F*zM5aL4QAMDmi=7Ry|{J){j z*%vrW7rOiIs+P=vzyVybQNXFsAtu}PaqZaoH;t?;G8?|Ru#)*(UKW2sS%nJb&nnM< zTcV14;l=wHHgZ0=o1OPZwuwCT{=kQ$)I;kHu%J)k9djAHuB(u1+?{je_J>b(3;M0sqa``&X^R?^$qfYG? z$^!+?|EDpkg1pE&5`KKTQ1>s96+QRw6BU!EHgOi|POv`47>%f=zH2{wLv`4u|2rH} zl!Lsxc``X?v)E7d({s=zWq6nvx}^G(hd9Zb{Ofz8re@}`qoU3p6MWe+)2MSC!XuSu z;k*QKGx(Lqfm3XS8_$GAsRUL}!Nxd1D<%u{;9o#{k1fEMBO>E0qMAK^a*Eq{goxps zK*#lCwjEB5gyLgYCgvglsGh%&;&N6UjPG@u^P|oD3HaVCdO8~z6NBd8awX6#Zc6XV z0~_cp1d89HoDPAVSA&V|IHa-;t6chl+5lF(U}ejUJXDV>Tly#_)_I<^54=42biY$l zwPbI!c|S2HBWoN=JSDDunh2Y3eGEpBa#?W9Cr+xCj3pd$oN$^gI8kEbhf|?1^)dH5 z;Sb~G{j?Z_(`&(rRl;H5fy=_D#)Z>NIMPRe6Z*iTtELhT4-NOj@xEKWE#Zg|0#4F` zBgZTH=z6>i4om&ZE*lXJdE&Uqm@ z=gH)pzT|rS^8bMRUzGn#@_){JZ;Br*jQcaFU|^{TgpK?8@5Q43#q1MW@C@Hzf-$Mw zF|DR!M!aJ|lu`>@lZ2yBVAh^rKWl#_+5Qy1!j|lqT%B<0VXwx&?mUeX;_+uc_3KUS zEyu4b)SpAtpCXEQ>*?4Vjqf3z(st%FU}(#Fp=$+YeaQ1sW32DayU4kKW#{f?#{K7A z73h`waV>Ts;?cu0W*+Z%cu9kKRq53If07i;eh#@f5XFhPDCS~(K-qz5*p z7xtwO_C;(BR?_9LkRy*(bvP@ZX9$aF?50-f^@Zz`!MKckQIpfEY5My(Ojex5jUQQ` zvmRyTd%W@x!uo`-JkvpCOknCYCLYTvLrHSxHK(RbT8H#={_xwHT&yS^M86sX zuI!||_MbV5gQf5EYP^g*gFi7d-y!E;7jn-Mn3)2H;bahl=~gwn#SgJ?_FE6$VgTi2 zFH*{E=To)X0Ma~sqO$f6TjKN2&6C!1;~49FiD9hECsAZ!F%3%1oFkS6JppWrPS+uB zAQJ^X7>Rr5E*N?_57P3s*hy(GMjobC2In_cW11@2%6aSffgiQxX(d&L@RyptC8&+%Dw?F2rA@e?sZ62i-{0mv@0KUXf z|J(6pG(JiKDLMMIGQJ$Sm7g!8=MS4NPs<#Un@2VN(l~21k#WRy%1ioF zZ3r{tK6{hCQbp3XJva5KUtyL(;L>BNS@V#OA>m0@nto;Z+#AA2cRhsc-|MeIXBd4P zV8%kN+%4iUe-)H=LN~<5M9~(#ue(n_@tI0wAmnjB_Z4wYKgZ3#B+#<+%=tQ>VdH}r z(lTfWw*XAQexH{yF*QgY#J`Wg_;mxH`dE0qOz!e*Bw*hAT(lA(cipJ}?d0wXd<+9} z_v$HSa`(!Xe!08iykX1TbeV%2TJBaiRp_G`*D>Cq93(SKxv*G5o+H6D^g+7&3lYCH zhdfv=nLzw=iDXbZ)V>!u8_q?c$hzFVTepPX_Y$xHF;g2eOim358rj+_q-;20Bq)H$cq^*$d$av0%S$UoE)66FWxM|@H$Wprm^0;Z@lR~m%X__tJzDV1A zEhhzLbCSGjDR+JVry|G-=Ycn}FxUJYY-*P(Ml39O4lB(O{^wMGB}N{K{xa)anw=(@ zyhSD`L1)m84RZkA{2w|7{Yh@;^Es~lZw3a=KbrAdqtW!0ps`6M8de-xW#Q4ylIWK7 z2tOWq%+ge~dH5!Dxn49tnYP!T+2x|TT%L$v*_m_rEZ1Jz<%+MUcEew@+yeB&Th2>c zk3zTO94V{aZe6a9<(LB%xoh_6ZB?5}c#y9xEH64ct=Y)kMkFu`0L~}>K!&sZ=@k={ z{jloA+l zJULz!vCJxY{yu~5_WEXL<(oJMWGv2V<3+j}pELap`wU}*W+F{szN{OANky`gCn7>SSd|8Eff0!bbn}$`_v%JLJxj>_%kOch^g1t0KXKz5$p_ z?XG{`Os1k%IbS~Nejk8V)!FiFPVm6FWX7%gz-FNp`=61u+iCN+Q?+dM2xad|vbK~* z+tQ4|D13$H!VPTBY)ox5rbpwy;iqU27wL@yu8-a}*7Vc6;g?cejWhjtTre2DMMdvk zIAxhrZ>yX!W%TZZag3&S^ZOOOb~~NV`1o42?0ZAfn_O+tn<}HX<3JDp1mODUZDCD6 zy&Z>m4TPM%u{*7r#4{+NypmYfpWDy`=I54cgI!y3w4F zgP5Vgxf4rT>^4plbCsxoOL^}{O=l)%TH&|L+vWQr-XmJSb+pVw);SG;-Jt_X$|W!G zBW3a#v&fI$eq@UvG{A4NY)BQqO?O=TR@HpFjQrnUbt-|qNOvRr@_S`2Ngf$Jd z=^OjOF{qi*jh?|UYX)|Hb62q%g!N4`1=8aBqNj!Zq^=EPO1IpT#Q5$0Fr> zK$sl9R!y!px|+Xm@&JbT80OFDgDlE0AL17@XVS%3#~L4O5C@XDj9sSQ z_A1mkzK;W(Z{B2sy2|neuRKsuGa+VPU<1klE*pMy%%OVTq;ei)gHmPrq+7nBy}p42 zc;l=MN|Y);{1&%-<-AEpK>2QzS7KK=Z_=@<5`NAr9|OHHVr1y;_`0%uIPAg?qr4;# zO!=n+%GaU1n#QTAm^XQvv7tq;6<1U(`vqP=Lm?_MZ-TK_s$*fpAoC_El&qsG_khzKMjK_%7di{-h6-{y)rp3!I$O`TvMWMjP3Q>$rr$ zVvsVyvT0o=lGKDO>k^hEwW`>^YAxBYm1svcsU4ePwJuB1tyZn-Wn0QpjUgiIQXTr! zE^V1=F|Q~?m5E#a-|utIdEfKSWp_#1-|zi=l6~iW&*gcZ^W4t!oO9l?{7LhkuD%JQ zOX!=*`IGub#g2OUlkU&JA*&Fteehy47QXd-#ns|Z#EgIT$@3>K;N*39fP2p=iP!Eq z#viYJVV@T^>Dc)O7jbDDo#3T@0O-76}BHXX#gT@$x5`30h&LC*KX6 zp|fNqlC9@Ved_hWRVcFt3qMRXD}SFULq22Az#%w*W-8=Qu0=vi;z%~$s@}-? zlfH*b_%1TBGT-fwUMlci3+jVj8z7IzZZCXy1D3NB$&A_8b=}9VMxh_z9E<(yYW`~Y z#L$U(AYQIK?mLS7$%Dt0$s_$+(vW^p5BVm&oX5n7YqSKNCDuqjB@hx09N9b4p5U-4 z6gYd$um&zzx1Qj&q)H)6JVE+~9lTCo%alx0g4q zxaotJue~jv^RxioRznsZ82slsoDR_2w~{KCt!93RqT`E8g{(YDH~9m8S4<&IzpE8( zNZ`}>2_Y*#(#-M*V*?+QWe!C0DlM#DnpX)0yu3kF>Mc)#^!ITL)=p+z-g_VP-lJJe zJI(UcHl!7N(jRj;CeLzh60hu3OOLe0RLe>CL#UW) zxtV302kukZ7Q4M-MvcoLE2%uoMAXuGmUgETbwYtDsIK}S)a8q+d<4Bbb)Q?l)oGIQ zwQl)#RlXS8k_dvZ!{k|Tw4qxsj(R5EEqRtEG~m3whItmdT=78#e>-2#JC?E-u-^~i zJ@kq33Vv%4h7<_5{NOmJ5;$4`N2t?_vuD{N;Eis5WLdt&F4w2aHKH7(u*Uh*3|GI}<&wHwyOdjm z@p!@c${3YzvCGx#a(yi4@}Gq3!y%e zUF>qX-w3@_J38-Tzt33j?YztRM6R94G4CR}uiWlfeAh1RxcQd=*&sdnaXP0AHD2%t z@-H=yczMCxugy40vPJSQdFc-O_LZvDDHv~lKJg_l&f1ImzW982I}+BHf0_7-SH2bH z!4Dxb52==qNV1u9-JSRbs*2BF{1bnC{(2r$LB_>K zhD`qGU$m^s9`xT`f^RTfhVK^ddF7KRKN@^n*-X0bSNKq%!uRq!{P^CEd635U+8^kA zlhsey-_J<-mqB)C@NFu=cg12sSK>RFyGrmamgBqPTVDBYlphVg&D#sU4_{~Sy}r+n z@4b+99r>RV)w%y?S87{U$X25;VUPJsHL3?X+rb%??lP(di-9Y)PNi3vitMp zUz$z+CAx!BWB5kpf@bF+1k&w3{?SPF6)$U-BA!4^=g&xGKtGrE%lEB#kJ85Ueh9AVJvxrdz8$`*sfKW*eAXKTF zUfhVh_2DMWGX1!z=gk0aLcGb~Mx1R*sYqZJH!;2%!i@-L4mZtwlE;mR5HP8b!@0tr z!?|oVfp(4<=Y|F3_xW>NKhw_R7`_N8d*aO_9!4W7p#JIeIGCR|VFBbhaCFZn;kx_4 z{lut;2_4W0L&~3h%<6zhI;%6ltPUuovpOJ=&gx_vF!M)h=cL*kvpRWZbqWorTU2pY z8l2x{|Md_~4tJ>I1N=K&1LsJMuc3lp!VT*P3f*7-s{Sl7yMiK|$)Qrab z5sa=j1}_#NX3@sr#UjKk+8Df8gqQ^~nYcmB0+NCo;dgMcWQY*I7(})xt1?6ja$tF| z`lVnHi`D5k`qq5`PhRwMEQwtN`NaUDaFafdy8+@VXK~MkSOQHhC}To z4XLLRT4=s=K+xz0nL6$^TLts{d{Z?qh-G6`&b__6jgoKv`+32v0*&Jx!+4LF7Yyt! zsIYtjP`UFva#Jpf5%73c7pzK8&F)s*dtEaRzstr{eoEE%c1~_`OX~B19DQRKcnU~S8 z(5uz+fvtN80Ym>w`M|h>dANMw{Fjgqj7;3%d|(!smgNH*KjRuH?Tu8<2S$G)_Q}h8 z_3l|Y|L_Z><0|AI@^^^--hlkWQ&^1-)4F}EB>%82R$J;>kK`YoI>O8kM$A8~8bv97R6RqKlz3eK}st2lgtuc=^C=R4c0V;W2`+B+d|)HXm*)f9S$(*CU|8xcPeKGM<^zkjv0Zu3kbh}DFfZ+6 z$~oG6V4t*CH6Pfc;2kj^*z`HUYvg=jz4T|M8O)WIjZs^Ly=1JL=f^zyV!8xSy1dpqG_i`Bo<(<-L4hiz;7?v%H&+sl4yX z&f~>U&*WnyAJ~EhoR{t_%?IXxsNnD9>tha}Ec)_+gLv{7XgW-?+`i<&x11#tAU-f)ou@`WvX}mul7y=EQ3;V0(1AEph5Fk`FA1 zD{SQh2M$n{UgZPtdTfj_VG$@c(y;)1oP~A5?{^t|%b z^MPT72c{>L^MS?htN!EYpL5G<`M@m8nf+W9@`3%<`?7psCy^UnKCngFar1#8vO#+C z{d7*54?LrMY}$H!v~e&Yv%)7{cu#>pOj=X z>AG7N8+B+$H_tE(^h9mVg`yqt|! z<$PfM!Agy(d|)j??sgyla}d>6<$PchYC2CK+*lX!6>GQmGftfd}B`u`(SrVri9|$I_vjw zi5=$vpX1F_Y`79PDt+At{a-mB_;qlKiuc;}VyK7lFTtlEv*R*+1~3<_j8BelY<$}5 ztKhSL2|m}0ua^XBzI)#Cg+)n=o&XxA?E;1NVPzj8R5pBIop&>t|NV z2L_Zq@$x+nqmnq@T^lhUH~{V!TK$Lffy>|BD&YKjtxJK*`9S7%7)xV5kQd~lNAl#8 z@DxJU(|IVzc@+6TUtUM;^;+NLV7QOj9whsJ1_>aez*Z+@NsHUKho6$uvfAs z8M(bI*CZqNhy0%J)Vv=WJVtrmWG;et6p5^5uD+6&1?&p}bapuwU$r0@X4-)*2x3o<1{0 z1vQmjQP_+!-_v}A5Hj??l<#TWS0EoQ-*es|_kX<;bn^_K^8CCEFfGgXG#6YY6viMR zGF&;|Q{OFi*~@Em$1BH|A4K%KLVUS+mG~P@#PoxF#ZMk zfH?@07bx3ra_1=WJ!^LI*`?BaPXu`R@;!aiE7RrnctyJ8uG~<%Jo>WGWzse!beZ^s zpDvHqj+!pt9Ywy!qKlz3Y0ZoIo_<9aFW-|nQY$R%{{qg?al__&2Gc0R{a>bHq--;5xi_EOdcl)E43i8;3`k>ba$m6kp7rwgzOPerIUcTqLK|kLe zyW6PwZpTsNdmh}rOdgrS;l;hwJ+oFQ-# zys2+;BN(=GVI$bg+V(kIB{nCej`HK$F|3hF@*$Q}&B6jJEF8iO7FZ#3gc~fd!cr;R z^zx=1H+{+hYZ$;9LO5UzgK)mEmT)ezBXh7cv3ye)k+j#7OtSWOCCM-F!{Ukv^uv&R z@vpC%WbNB(WOGkQ8to>49Rj(66q4GZw?jQ2@Qx&_UUA{Nl zxZEvaHOrRqF{HjIeE?BA4WyDhdS{ruj%>?-av((yNc(BkKGQT_ibih{>rwFQl#mqc zkOTN?mY->F5o}JbpFvLUy@qO5xGV*9V3vvjO{kKi-$l zU$=w-VeX_e`voGQQbXOish2q!Ze(R@FK%Q;%lT{E%wI*v4``Ob$a`by4fuBMGJZ%@7wZbmuu1Gx(N;Uk6piotDo(1ab0de z%E`KSZXw(C$uWU$yIk?xs^2`z8NL*H5emH@)Y@+}$nuge67^tMQ?`)Bj{)x;ah*;X zK@VB=THSggRBLx;-qL#C=zkBQm!ynx;!RsAqXI^bkwBF)O8&z2t0NdWk}^VY;yX?Z z*yEDW_%@<8@;_SD`13_}`LHe@^p*GLizWrth8XI@{BofWrZ--`$bLV__W-UH?UBNE zzQ``uYqz8GMfUro_1?}GUBbo(2(09bG=3%UT6|Y8?YQ}(IN2aQ`3gF>dVj=zR~mmJ z^oZJkB6|N@h7Zi9G1*EMYhcez9kFNZGm_K%wB4$C$=iq4g!;ZbN;7Nv^F}qVc;%xg z52hF~Z#2ke(sgHk+2j@W$5(RfApCKY-8{-+=czo3-B0G5zJ5l^8%2&KzWP%;JkU@U zfNFdv{>z)^x1e1gzKyKu$9Lj;Uio@I998p118gQ;cP>sUJo9@MSe>7;i!slADcWkvBTyTrY2A_rv~dKB}^hEZj&uXEi$Y2$S0E6GHR$??B1#!VVJy zX{8R__?q3HFK-0PC{`%Yitc3iklSf-UZ3jk<0iDpyisYp6!mV@biRue4D@NG_XBv3 zywOYdP@oqioNlz8K7v&6;%$Jhv1A{a1ZkAzrY#p^Pg|Z4TTUx#&hZm7Peb0sR|VXN z(@?&TthMAEzaMX7^va~5r&k7(!jEpAMGgWRY(((Gay6`_gkj7$O{&FsA8IvWoNw&e zWe%peGQYAEuR+@yYUyjZZ&ZoQn9oQ{%^HzPN*aeB#vKz^89Ge9lySW%kQ3Z)E0u z8P-pG=cb40OWIq>K1AVB#mX_Ei;r}GIykEtjmh2_GGFPQGJzv@5@oinwnc3#Yb9;o z=6n%TL-z3r&IrMDP@NHCCW#2jmmCz5nw5h<<<0&w%nuP@Q3r)M-}`=rloHnI*z-f` z_sbq3+qnD7?!ymamn>qaAxKe5R3~mk>bh|g;gcTR#Cg+;8_6g2;YNJ+e%yrk3XZuF z+6-<)ASuQ%zM>e5tb%)$lb*9!k&@ibVwB_--V|}uYR(H>TDsRv`2G*SA7hlF{N8k1 z(MNV($?#1d^?XSl?M1~Zm?Lk5)Dj?W2CJM8=lEh0v$Fs((NP1O0>iC8-OM(Dia0h+ z@=n|n1QO1v1)=8D_H(lk=!fI{`4a@h!F{|N}i)eNnpz0kUt+wF9+fy@sz$Lez}UPcnZ&-X*`8oF^cTdCy}Vi z@f0Sgkaj}&L~Tn$_(W|>ll^Ikqp1C9&A37M1R{qUgim;;jy^#%wFu#plEX6*XQ7xB zAY4XN=mLjL9xG(+H|t%j^i!uo8oXgNEosPVUj8T)h~b&CXDz5#%3rVJ9hf)>pFD(= z3i?|V*(h7p7m{#%+4NRNFxz}G8^TpA zmvOf`4wA*dZ0LY5hPZhR%!cU>IT*~gg!^gvouIbbl-j{2qL=+(yb;AD&~}=)G~r0^ zyjG@gcm?sV{t`dGO@#}p&u_|{`hSz(sG6bB!EGD5Jr|@s*W3IB4-@Wu@?0u(6q5{3%o&CHeWj%yUU=)x6<0sf1 z>Vgab8*YoJ0CaxQ6);9Yo%IuqfCY@7WcIyLzJ@NMeChr6tDxoKbR`1|{sWSQvBb$} z-2RK9i9;|tWsGnmL)nO%9zFp(%@Rt1oe=ZJ6R?vy`xx3ggP`{yg5g;N!-p92Mld{& zU^tZaA|{ZMlpr&o2Y$RL2ZcpS4lo(+_!~YUunt@|gy*GP*NN<4xnvl z<_(~2i0}r`HefVmqj*D@H-NSQJO~?&n-FineGNh0WN_2Mn?c;v^CpX%R^ANZrkyuA z+<<4XaU3^s-W13-MPsx}_%R7ko#LZ@eheYpMhi~gIs7GnuVmbJE?f-<9vA5{)FyNZ zqQ_8)?b!f1PrcajDu}!uL?%H?4c-boGeqvp>_Q?#JJ4oy6Jf;$A~B!H8c{b4l^7yA zK`sHW@C$SjU^w@#b_poIfB#t#=vFh~yokcwQyfbmwaM%yXc%j)e_$g^&U~KFQP%ng z!whz34S?ehNVJFW<~62wCR66e>I zeoJY60A+e(du5bmabCmo$znL}&?OE=P())smGgWajV=Dfd@5(?W$nDqr*fWOn_)E& z2Lu!6m5LaCtEgmiegbKQ5tKkgq1eoE5S6fslTG-snAUWtuX39>H!zkYK!;G0Xs5D2%nm3<18iUI@2pvRY6bd# z{y$3pq0>o!tyG)IWrqI7pVRdB{5hFCl>2j}dX|F#`uonW5c&(v%^$Yt2#$gY9WOvwcFz48F9AfCFl=TPkd~~dj85GWb z#{r+93qBf)!_Z|J+(LXK4U;g;`?xqxPK)VmIs?d)&Lo(nsYoW#3E*?AprkSzaFqb~ zTq^umjyPerNhJ@PX~A29C0i&diMgATSo@@qUC9TAwG z?wVoFeqRhCoW!+&C-Ovi`J_R2jsp+udMM+iGX*kQ6^vo*v}DhB6(CMV(UQHBd=dRS zmTq=-%eWZRiBTB4_)fqhUc|Tl>w>RQ*EN^liie}YmkwzhpTUzQj|m*DeKOFLRU$q4 zGZmV>M6-`jLTyz=4iO6)86!6M3M0oJ$XUm}+-M^=>p>Ses&`Mnm~}HYeobE!{94=~ zj5=q536T+k5nT(9GdP|C)J~_q?j8DyLJe5KOCf3l1k}f$

dbAcQHMaYb&m5o%lM zBGjT0l6*A%OqDUf4KB)S-+7k4yokDS&8))U+0AJZj zVM+i)K1!0%`Rtm3uQ?!q0wSJn*!&z238w%ptBoO+(TcCrH>7T=jpKfHYDH~A{w}L+ z#NUS0-L*~f_nO*f`MaW)>q}UdOD>w_Yu{SllVT?Gc%%e}gD`Lw0;ABhm<1S3p$9?5 z#0F=l6%?$JrJ3vG9X{EqI^d5SjV3q^egti3fx9itF39NNu(+ zieMdPaMjt}Yc|^fKNuPs;D73=+uGUP(@&X|`aM38Ja=~L+36?EPQ5cXk^1PwnKZMn z!@0b>wij*BUNa8=2Rhb$T(fLnw9>I|ea-R{*c`ruQJZhSReG*j)`Uk;qEQfV0)us+ zK?uKV@ptQv4^TPC${(QeZEoc+n94iy5lf?Xn6+s$cbeX@9`)|QJKUk-3SDt*evGO3 z63e3ESX8Vv6{FKn?pjvci&t|}ugyull1RPTxL#qS|IA6xshv3o16QBG-IV;1SZWCJ zM5d?KbQIC&mrb9`I?+nU5};JG>{>j;Z5X%jtJ_-K-iuqVd!3mo&RZ~j{`3XYzcl@H zJw5d?S2>&`EFs3PnzZ1}E01^;#GANEQ*kSz%3XZmE z0z=y|_)|M(`h%zk(p-Z7;iFH<2fz0bZ=(72H-5Ca* z=P+OYs5d45CltX=)K~BA9@bk{n?xh18b#HxufItC`>NhfzIyjdJuC-9rJYb|2riO` zFXeS5m2Un!-~VX+@=VP&8OmhMJsHI>Cr*6^S{9{32}I>4B?e%DELMq#l`&QfJ zbmJz;_c!_G9`6mMHpLM=NNCSn1!61xP;<{8Q(LKLq8|px8*86;-_K2bgvKLuo`U(~ zpfc{Kg=SyD)SF$D*q!q2c$|9kergrI*eQPw9z6Ih0{uDMdB}i2=BA!KQ2`w68izPh z+s+-uF>SMlZHR(e zvur$nqI>@As?YZ*$yh!G9LQ3lcxskiMM^`RMDRE8;1}^;pNR+e;DM$NzA;-wA^j^-v;0>4LZ$)T{Ih1+WKt^i25egXS4!DUSvd~ll&?h# zj6Yxq(0gFzIM8lp>b?AwYcxMDMom1RNzT8DhX5!vJ@v;Dp1kTjXsgmT^52y=Lr_WEgZx)t1fOiXYJy^&OIeC4whcFi!@yh5LEI9`MVy%`SVq$t@9#qv zOU8R=u(~(i;ruP20o{a9{-B%LK5*jjhao}Ec#3kj>C@%vZ9pxD(^jzXOpyM29-G3F zpF{ND#hBd z{9{%jj#YjD51j1*F7!=)$9J*7H1$YFanqVB-$VbuVG&Q|PMcplrEPrb#r*CZlvSHd zpZ1qUYn`WDe83#}7Q-16$r+zPsKl#JPLEM&UG*MGbgdA<7vvJDP4a`FvQZRm`*jq@ zw#_qS)M{bsGgCp1-z%c#n;?bGGam^2RzXsF?X#LM%yV}f9s>tB>j1Z+=_6<-$OedV%k@HNV#JSJ3==gTLM{+Vr5~ z`@88UO;3FYonB(fcBd)(CUoQH6KghUyz9h(7*l1q=;gs;2f8jAI}HxqZ5SlJn3_?% zj91I>C=i%6H8b_G)W`Q91R&vq=65n$2k&NzTbkb+BZ*Ejv)5orA55k)**%J{x-JS% z`?zh_)cdSl174--p(*ZK804eZzr#n15GxzYpMRB~HOn~1VS5n+wKEG(0IzE3QAi`T z-E3W~$8_uLte+IzClmCOg!|-uuqqqRxKHwwHIb+3r_fkVKWXlXu#NT9R?xle{QFr< zjPSQ+`8uWElK25-w-&!dA)GYQ$RezgO5S{}WYU`hnUU@Xj9% z?j#W=vC-xKY?}m@m)iM&V72HgzXdc@r|jV~ZJ$#wJ0N6k8~1?ZP(Oq(mAAAH^~H+X zPCTB9!q6s|Ipm)M+tHu-Em~c__Lo}TffmcjLojG32)*`NufDGRhEn*jj~u1nn%4E( zca`>US8u=Hb+>@r@k*qvg+MpwuLMS^)nczFf(Bw()tg7a3i=IaWGks9)SI7pZ}t$n zVNdsiMG{sF^wWcbj2GnO-3yz-}hYPCb`T z0WvfXUNA&|1?uR{1pyi3dJcFZ~9?r8>mxk~9R zXWF7oFjHUN2@vZ6mBg&v?@$t6UM3!kcz6!^h=m6s%1}H_MH%Qnm~xEE=kQ!F&aPR0 zGakr>sE*ZP#Dj|2b}os*OhtY5$Hev72QSv|MSZLXM+P~;nL#6~g}%Y$z>JBY$vET% zpfvsUNn2j5-^}``(~YheJCbb}s*3aaN#ys*J70xZbjRu-)&;878F7BStJun3xP(}j ze&d5J^!Wudq;=JP0PQ0V8!_WnM;hk`E@p4$OhFa0Va!L88=)bzOmaICws{wcTTSu^ z8g>qT%k*R8(Q~Tc5eQtu1od7owIEMP6f1u*4r9^?1JJIGeSbo z(BdNl(>v9wmjdu#ds~S37o5um+=H7*Ptc%nc13!&2;3q+HA}Yv6znFCW+@M&h>u2D zA5~&Y6kkJCKz!!y&o%g6_>3HvHj#5v4M76tTW>N$GmOaRDZ;<*y4y>^CQ!c%f>(@{ zMMMMjg6hoLK_Z^*jU5GMomo5d)_o_-P40;E)lI(fEZn4#bt03grLU^c*joMtu;Dy_ zCM@CPZem%W6`Ti@m_R3+F?&@-u-5meIf5PT1$OiI{&XN_I`trIg!;9@TNxzEk z5}-#h4}>h8XvfE;68& z{%s6D_TxC`Z64^>Y$5G8{SoE3R?W+&9s#ik89gU@rPv8zjq!LNZH6y94Dy zA328UU~I2Q$yvbj@khjO%(un?YMe$v!Rxl$Z>0Xz=kxm8|9M~a_ILVF_PYL)!UidF z4tS?p``N1PA3IF@4}2i)e~p#d{xkow+c*4Y#)W*9=XykCcP~7G3=mFI0nj;6M$pR7 z8vMyG{dyf^3yO2Vn_pGdo%VWDOCPWf#6K)HrfX3M&4$-*>*-a#H}VI5aMzR1rdAki z9sfn~G_uTdDCZ-FM^p<>P%R*lF<)e4D>*Et=r8-uqvR5!vZam7NTY=zsGSSGETqmmzd&_zNr_%*J_GMP ze`AvP7#)A-+Jm5QmIxbuIQt=br08Pg-`Gq~Pk8pk6`ZLgR5AB0riKpU_u>mhK*ulY zrt1#FZW6T#P_K4yeu>zSCJ3>Fh}{le)cVly1;?XF*@Hl2X}LbM%f(pE!|xmb5NJXj z;#q2s?RrI}ZvsgvyKp>hv$OCx%*FivM;7JCJ9^Je+y40c-q^Oi0r;ypK@C)-$D!@7 z-F}a*2cBwn6MmdWkX(J(Dk*$5z+ag_&1_+vKC)CbyL6PXOUDOKkwyx+|CuW{MKMcY z$%n-uOV=G-6e(PzRb%$ojne$nP%=U1h{8BC0?ix&&}#rRaL$K@E5U;!)VNgSQ_jn{ z7=?=i9YS0RQjr9%BA;Q_L-B$XXO44Tjd4AP8<*T=9M2a-T&Z}o#~HSc0~&Qvza}_- z=~*HlNBi{a&wuFYzkLCMr(Yp`$z^~Z?$dEXp@SOHNXP2DbM!Yh0mqc;S@L0qM0ELU z(NVT5wU0R97{NjkSZZ%LP(&AW3Mc@3F2Ru}hyB9mLpgiA0s!gi+hRz)WiIv`m4079 z8^yT-WYAd@q}hd?F?`1H;RQN~A3L7}Z(2U8@sWBiUTs^E=IOfk9u&VX=%jugq;URW zsXLWWx+Tea75W$cINB!80VKVvw7RsT83A-8lp)agOSGdIMu%E47)Mj)X{ImsYw024 zTeDOmOu#wuZJ&=(Y2L;90MGRc7jW!K*CJq4_NPP+^a_|K*}@3X9OB}Goa+-p`TLg_ z%&&c#YSq*Ejp)=l_#YT-LI(+L-@;&CgdUyPkK8qRq$>b9TLa?F+YOCrj{{$#z5@(@0`L{|LC*=E z+?Cm-q07m8Vwawqr$uYKD~tfMb-BpjgZ_E&Fm~y>BaB@#a8~5|#?B4k`}GfKzQ6iT z;rl;-Ya{c07|_{#zr)3v?<4528s8gyIWCdoh3;y-;+04d=NaQ=jy3#x!W>i` z_{KYTu7hoq$-q3>N7>yi19>Ut*GsSx5**g2Y?Lf?U4jKT6p|jnX_P|3<>~2}wLeir zP?BOz*4qJ%GXd!|x&qbw55VunCH5f*`BuQG7Wv>;F$i+d388Xv7?4=!O#Ok&{t+Ua zo_sk7S>kV030Y}bzQoV`Kbla+5B|)BF#_PzUur00?1|bh_)M^ z9_{Yh$a*v{V2+YS++|vo_2?Tfh#sv0BkS>_UZjjrPx3PUz&u+)&M37*Q2Gc6%!`nL z3Uu&w5NQIP*L?2^WxfA}Nrkuur_Z9#CJ{tqm{f1xyutW}TZ?Zv5lr?~95<{@0X44o zOYFDN|F(R$U_Bt@*Jg8qGfleQi4|M*103CeguYGJek%I* zu^lj5lGQbR|AF*dDSexzzq-w5SoA$fmbG|scxsteL{u>DLRTKI=h`hOb;gPc&d;aG z=plb(#)Id-M!x9bGsUil`+V#=;n#?I5{VK{*!)e_HWA;?W0}Vt71Wsjq}blVu0X@F@E6`1o9n$1$x{@ks7GG9L3; z#=^t!yCDeqJ*w!d=8bpZ0co7Po)%p!UYLn{!ZRG{%-q(>>Z z0zq?fd%6jDy3bA&I?b;Cckw;?z=fuM_6ECtFY05+t_B!nP4S-%ejM)z;q%731#P=) z4vtZJN6B!uPhfO+AkgJu8d-V&>6!eFo*)ny0s>Gee>z_sh4i+w9mM#ANd*Yoyx9qSvfoWL}~crm8%HpimrMj5o-&?B|- zV`ut@?3Y=r1F+%fI}&i9UV&qndSUuX63@ACKJA*JBlQ6<=mRglI>3&)=8Y8pmU;5!S;>x19bf(9Q^Jhjnr<|NYc~xY89!?pfC1CY;yKd?czL@G){QoBQ8@-u)He@HpR+%sxEbw>l{Q+Bylmg9G}y!?3+#@me(e1UpAmjJP-P}Rz;R{Ww4 z5*3S^FgcUH?@OFmy#>_*fBO;F|7HBZ3H}bFDHE%Rvtp1FE5tGIqI8^k4#L-Xe6Zp{l}}Io7b|ogM$KhE@9&hA)Ip)NWIbP^MCtrxR!|(Zg7Nl7TS4F zv_O+Nf!u$!4w3^55M6eb(N)k@Z+k;5~_7c%dBH zGd4-SW;^6NUXTybJ9|U#+r}j@+u;zP}M@E};xNKSiQcyB(q%o`kL_&65iJ{zR%v zFC)Ly>oGWKz;lT4)uX6iJJFvAzlt2VhcQ_5QKO$J|AjB0KKz9tRAZbq`LLoT;Tfw7 zvRs7g5pbYfg*7LxU%_&+{(!pC(kW4)Su8f(SD62`UK>p?djZ33?SfT=9t`h6&x zl6aG$hnWYX?-Koz5bR3y%Nw7Ee#u{6s$V|FV{+37`X&Fv4bU&={6OoMbytagnemm4 ztY7*8ovmMD^R<5IM2G$esQR9W;Ry_(9k=u6qlbR9k@ZUq4Q?!d>Bp-@znl)&MC%uW zQ$>Hb@3svXzuUjB$8Xw|GJYL6KA6)&=p?ET&7T$eAFaRJ3h3|$oQ?og077^elb92k6*S)k6#cS zerow^>f6ZU*DqjhoblW9VHv+S>qa+z(K|L^{Pwy@kKcV)$oOq~`bHkV0w`^dU+pP+ z{1WK!Q;%QxCmVVET0z8(r9aQk$oL&{P{r}fsdZ_?#6d6m*u)Rbe8uQL&I22t4Z%UGzWoPI08X z@9gY%#-@f-VjzGs?m@F(q!N9SA87j2+`F0aZz|CzdEkij3H{WgPap0TeJ(h-ls+H* zdKC1@AF!eHdGr#Y&!nG}&}U+^pFXer*3hRC-Z|pUMf$H|8mR4SMLIGvq2u+_=A^fH z_%yCO-|ScTlSm(Sr~IiqZwwwXDGPsjw|d$0P}~*EPhkQI&P9hR54iF=vgA~uhdV#n zgT6L-rr7i|qcWD%uH%tf>ADZ-VP2VV9b3bOCGZ>nmHvD}weQ9=rx{cy|${QT!xXisxdH&`0 zB($$qk|RE7_=#fB4SQhZv~pf;&!P|o^KrvxratXSK=S*rCx;BU`k<2D=q3HMKB!_( z;=d%bDSI-6d!;X@QxGv_hbZfe=kNMmDj7j8w#$-LEdRG3$-sN|!| zPPQLavnP8Vtc1HVAIJ6;dQ`9{eRnCc&&D=qZBOomv*H|nbLww}7 zCjkPBN3K0-zh^Y|WIqp+VeCn7RKzCGi#A<*^1Yvy*^?%ev+1eqNh3h3Xioz75@wbB z2s+1LE1fk-az1-^nLTOVi{q;7Neq>3d-9i8M`urr-n03jNc?nO~K5s-ZHQIMZc>@E9u)X$9s4?GYC={JKTJqu`~BkuzhxT z7B-rWXlG)33jc1vyl&#x#m=01GXRIjl;LhxI!h;?=(jWb{nF6Y@S|-%`u?fubI2XT z+Tp%EMx;+3G%@r^-f!r00~yFipFKS3t8Rxw=x@XPlsB*f8Gg#Nn@Z?&@CknUOoZE1 z-3|vaPBO2n!R%)kJKP65Y50eB__aA=ho8qENb4WuPu(@|C}Ly0%I9^r>^Gbp?xVb0 zc_(jP7yFGOyJd%Whxu^s`Mj$H44F&dH*(H-U8`!piX9G0AI1)MTRqYapS{-D;d8eb zV^}|eMu)M((Y;(deD-dDHgNt3c6j`)!`k8et};$)UiZCMs?O^I=*(8TemmU%0BPyj z;lGdzX*QhJ+gzbGD%JJ-&3uUSx<0i3DeQ0v^1{@$n%5PCz&<o|xA~(WYyMx4Ny&4re2NdMZ0S1khaFj~iKmKrPjY=7gZ4st)XR zK_O9{4!8&<^SYs3IIhYL51_Jbhfm6VdOO@o{Inh36_Dj453=zY+$`%~oN&(%)b1#6 z{Uq&Y4D~HOs=53QJQP5e|G8}mmML$tNS0<4Iz6j_RkLEr4}-3NC0~;e-LU6QRdtN2xY{Rj#~?F{CY zpA6X1xe&csv`5;j9sMYE9tWeVtMt5$FZlL@-*Oh>_4>RG?f`Q4gQJrZ(HfYs;G8 z^kKX4HKLlSr@VOP0Mzt&_WD2WXVYS*}K*sRvPhj>igqwr|?Tt*r0JSoGj}(Bj~uKml}V zzYFsmp5xMi4GCl31yOKZ5DF_EOtQYYI8NL-;Z^85xxxT>2;gZ%XZl70;mS?T#?S>OR0qa z%s8Xig-48VPF3p)_%wQ*@Bd7%eoj@hf?wwIa!ytE;Hcn_vL4xh#Tm*p=Tx2Ywy;3V z!o$#vco(*pdVvD!VXAV$?GO(vBb&Zk$vIX1U8K)Q=Tybe3e`MA89b+|i>)Jr;2eL0 zD?C&#&V6tS%sEwu-Au1m^PABjq_IceSsBrfX+Tb%>w8SmWEAJOu^m*&h8_ogTq<4R zGaoRUhv1A%Nq3|gh9EsTd=(8}LBqD8RD(X>Z7x$GS-N`ezJ|-UW9!yB^OEnJK81In zSv~YIwl$yu?%(UW6sm7l1mFCN;w!i~-)A1@WLOhDvo;O@cQN15*vouJV}F7-ea%=L zSgrit&c5w=`V+ou%8y?3(1q!xJJ#oYgCvoju?Zh#sNDuxo@WUs_$bS}M&1qaF3!6g zby8k^W+fe$nn;mPkYP-5I`SBBk9!L?lR(UQ_xobsUfs?Jh^x2pRxWS+CO?i+sPEU8 zcDdm9z$sd8<=n%bC#YBSxrcwfUihf!T+k+`uHCOYRqdH}$j`hm-hm9Nm-^-Etv6nv z`-tZrHlrsn@@Y2wrXBis{qkPzFZ26%E9X`B?=IO|@F_SqU~8*;z>nQ-Mzvev9HFzV zcFWEY8hjFxk**`SfcilGp&d94UsZIw@#)u|ZBWG94^n>K35gl{9ffC}Ybn%0I#>V6};y05Aj-xGd(Ngl_7;k z!Ye;AUhQnh#_Mt%Nv-iR_Q%*}kKg6|r<$eD17Yf`rl+V}Cocoo_BVMd*~x;?5qg$K z%}pDskq??Ax)Q;}7mf)o`h21zgB?DrLO8g5+EClB>WJDkFpxO97T=dhJ&}L!aCJUy z;>;}f3NL?V$!7SkZ6@F-<`f(&WXu~#LOCkSz;UD=C|8acS5R;)nvB9h;IQ{Jan+a; z#;<4460M_noD~4X{$!q^>jIcR)q)P7eHNfC!hut(gKK|?=ANyW#>3hVH1sw6L;5BO zyYd5TmcFLwTkQY6vIiyjn0mw~!Fm{q0*b2rYA}({q0bs@M}Xg`w0ws;!Bc+K*c$!w|I`| z^7Tt<@ZX}(VEjM}q7P6*-B}vbKjKNqdF~ycke+-ixKVsUv6nV}ytk(g>O6?(-Z=bE zp9isyWJc3g=-oNsM)GGvB!(Wqo-;d_LflkV|5Np08AF^UID+XXm*UeqkLZ>8nn?(7jLU>pt$ z^acWQI>*{Az{W0%1#)P`SuNQ;_+O>cR>(ZQ`eOLQ; zLR|dk>KEYAg4(5cl$Nvbh-*BiC_Ko|7=sDkFVf5C4e}ZgO#c~2x?4)VhYZS_I2?dX0pOboYb}Bn3_4w@6 zLo|5!oa7w**VvGHH2>itO0&*6bC6#aX%wFqldgv4kJYTW1}*buc^7WhhRG-Pxf6JZ zF~hfoEglgaS_u3P)$jz_w8U98qZHNv5cw>ScOLCF@c@(WAbldp8$seDpd-+fZvt~7 z0i%d*ewb?f!R~M;8T5p7DBJYd>l|cP-bPFQK8sO|r#s0zntl8B@$^nq<1&b1rSfI? znDDi$a)scZO6=l$hoFJVcF`W!IP*EQi^gAhOc4^udd9J>0f&*$+zPrTyj64goq`rZ zTK&)ho}D6Tq&P?$1Ziid-UTEe*{qP$w2TY_Cn&ub43bGqE4Ce^7z7p^egRXff(ih%#N61F9s!C!M?Hse zB3#asS1LVi?2@4`^-e$XAoPiytCqX+W8~HFiLp0e1w)&Q_Yi#>9fEGJkRZ%qK9 z({-;Q-zpZv+4(K^1OtI6J^3#vLUA^F2HneL+SmFDU*=3t&grt00|PJlftQTunpwf% zb3~9I@ePuNFr?+@2uOJpK+pi|%FO2jcB94_0`RlDzBF!j*B3!nwFr;x^h!IBB0~q$ zKk1cN?8Qlb8uRamw#%_!n_ljDQN<=6cnte0Np(+FNh77}+mZpHzb4H)-{^Erb_A_}uvdN7=u~$;Ox;Y_8SmvfOu+5tSuTOThyRUb ztfTz?#5sE_UM7Eh`tMKNx24NG^?*uzO4m>G(HZb+fBQn7n^TPZ8B9T8*Uom8`QYFb z)B_VVNpZ$qnjpZ?0G_AqjD`2fo{t0syvTpus0aGEd3N=khx+H)X|?Y>WY7m?LVf39 zqPG|}f(D&quQGZWzvMD}?&BYkw~@|I8^gA`8TK(ckPVW5`ZgCj$$nMFV{=V^5qq1L zSZwN26=OdQxkT{D4^de0Vv_YuTZF3_uWY!44~uyhf8{s!v+;D@9xROT%sS_-;{lH$p9ItRit)$0tX z3v7MReLwouey?OL>t7V+z-*e#q1?+EdP#ux7fpS_)5!XOry12s`Oq#G)#Z{XC;OWB z*vy5)#fyFi>{P!hqfM1_v#f-{e8yaE`Sj$+xvU1}3U;CLIf(IbCHRGNl;Z+;68x|6 z+qYvgTYhc0hc*-WjhTF-w;#zHd(Jx4ek6W5$Q;PP^-0{1bTUr1f^7fbA|aHwZta#S z{&iUwLBthb8{ePjR`D|9Bj<#;^AetS)io~+>1h&(7Jnde#odY zh9A;cMN=_e0!@7X9wYEWY-|aB(U;2kVaLm=^26Y!8_Ew~oF)8lbz2EPT)B^*AI^p= z@@e_u^Xo><5Bo1E?giKxL z8$!)5v+nQJ#;+$}SRp7O=NtPA2BDsRSZ{wu9l^Kr)Z0Kz-VWPuqFTQJyWbN{ztgZd zkx*sqe(OxXJL0V+PnZ(PMf@_G05*`K6U~ASHOpVbLv0`Jay`0S9vzg@%P!Z7at_aD zgFUdHH|hFO)sOG{@^-lx%B{Uf@#R>7QjK4j_2JPuh(s9uV%IAM6dt|0{R0&aBFA>Q zEXtYl%IxO@tnbDDw}St&Z33z`POZSa*IJ}HxSGv+Wc!^5(;v(SMU$9yoe_Qy1JP8{ zH~tFr5PeP+zT?#NHpIE~6fpv%q?8OU-aWPq{+Nw_as8IWU+h;a+S1C3L*dS|sBd|3 zTnANoiJut0-Hu&kSvg&I?tSv*Rg2piM3xSStr=y)?W}@yR#Y(yZwaq9(0Hs z`*k$wFqqeL$nw`vA5!J(o)y4dA|EDs;X(Bwcg9m=3GoEdd!VAD!g6LhT3I!iB-dEj?ZsY;n4OTU|b$sch=XCt3Amrn-w&=BG~ zpf$^I1`jOL2l!O$ws?&3$dKo<00m4!w)4%~##?qV|AFYEsFtIeWy{zuDhJoPmCd|u zyf(yyr(4x4x2Lf;SWny2#k77Mu$X&CrPWZ&KdrY5sC)SKvv@1|CM*uaf_iG1EJCL- z-V8B@%9|W+FpYu&!VOMrf_}zLls82a`H>Y1&bb%*)Q)o+)QzD^&O=Q57dAbH-Y=oY z>m)7c5q^DGdL&i7a(X1+vM~NCtsgPoelJCjfr9n6;bTpY5B5}jc6)u=>zC|t$gdN4 z%lpmRl>Qg3BKv)As_M7fe)}wS0N?&by$uBAZJA$V_uE>n--wOxV$<&#y5F3Q?*h~B z47`QiTCNo$`KwR_Ow^lTCor(jpRvmg>T&}Bxm3T}<$6)h_%rtNPF=q^Lj7ixGyV)B zx^fZD1na{N+5U{(epI*Ls_-#45P@47;W313B5@JZuv7|=UGfJOZ=IT2sN-=2YcRa;~yn_Yi5PwXouoSJ}Mmt z+uta@EA%S&XL{K{y6*9?@@E3iR`zFl-1?RMnRe?v=wS5a#mb+_isgiEAsvRgVd_Mk zc>c@~AKCs)6bwsOPx~{M`4tN}Gzq|+hoIPf{!GigV$K3h!tkQPhV^IaS-#Yt=|*MO zpZWQPpVXhR`Kb5bGERX$i05$f)UL|~RXLx3Z@1Toa+Tz%Ue`~IP(OrnmE@`Tj_^lS zc^cw-P(7pDuO?6ZC|60IdRV`LJjJyvCQr*RFO#QcKu>mX?r1NO zr=fodexYu(Ga7m7V|iJx(-1Viu*?q%Y#?2C$u>%!`k$^WPYJhvWqFEP@5|+BNFs1X zo_Y{6E0L!hAKCKM{x6?AO+DYGO`O^kBbx=_&IJog?|_M83RJ6(Aoe7q{(Q=M|T_`1I)Q5lar()T^pN_nwZGivDd z!`E!%<;4gK*J(Gt<-x)ITJCxToKqjc0yZo<)#u%xjNRE1`*ZUHtltArFs|-7nFnER z1Lf>}k|@{x4o8&}KIGfsXQ>U#IRw!TMP27T|Dl-d!Qf%ylU(o6N|g1wgl52*PyU+> z&hIer8w}6M@$cAS#yk;L+0cZz^I_8t?XB=5&>TQ@<_pk-|6JkISC7##65ly1g}2c^ zxGTqQ({-0I?T2vU@&69`=jVMaM|twj6+Q#>ar1UFX*sg3nkH&rR2ILeyM;=)iSVX~ z8#t?KO|)$9&H=HgbHsTr$1?-x+>ZH%n#o0-eOo#A2r$oNVg|UCc}9$I>3tB4x8?`l zr67FZTbi`+44Ga`L0L{CY`PV|C&0s92NNY8g?bqTm75^IaHvC#Z@x}=qKZzkK1aT0oC6HP({i%Y`;4xeaQ=iH)TaOqK7=Pj zdGhRoy)G7Ff#eW}74#3rkiJww!!KQkHUXaV!1hdC#nFno*j}sOf3w?z&(8MJljpDu z8j#;5^lh@_dlcub_X1lr6;c}~Z{J++w@Q4We81K9fX~EM2{Grh&8k1nXKR)|rRIV| z(RGH`a+ub73*cl1i<8iEuF_v&UVFgIK;X8?C3`La{mNV?syO z+%sX5*&XZlZ`*nH`pnwD`_{9x7ub%3bn@VnMiZa9fc!hqia{vJxzVw6Kc2pe?<2La zLj#_xXMa4MIhd!R7Cw8i=;v$SM5k+JMKbE_fQYlhR&Fe!5m4h@xK(JfD1w0tI}bys zRbB~ig|7>2LfK{LvAI!=1J@b3xx^EQLnb6c)~0>Z@Q?U$-1)T`Wk@Nc13$zg6@Cm2 zy-$R3h}9rgz0hwTqI1gSNg-#8{Wy!3FT*i`2q2456vv2>yNb?a010lp1&~oYoZY>Y zz~bU~bzcJ}hJFluP(F{c%eCloag>8tVLE!$HoTidW6%|GjYsn@2lw(C}p#tOSb$XD5mK}eL^7G0fh7Kb4%iB)_zV|mwzZ1 z9=YF7e`;UP-b?1q{eC($VAF@dirTNK3#BOUG>|&4Mx1z&{=5i5k`>aEcer|Me18&? ztx|o$a=_1BFQnG{#*eVJ2BJSpRZ=NBM}FP#r_pt6hw{z~`djvso(BMm!H=M`y}gxo z+(DK0;I-k12s5nDkfnt8Upe|BkQl3 zl^xVos_kEb!zAf5>Sd(TunZ2l>eMWvmMxu!k0*g~vHim9KEJQ#^4sx{uyFu$iN79$ zA1V%)=aWLS3XSRSBU-T$L-fvK(+vPyTv@93~?rjE$9SP!BeoY(M`R+7}``r>1wCF2t6M z55{2USjRWU2S7Qj|ND)wGQQJw3gjyFlsVt;e|{UJrWb#lw6W>atM(tO{dMo*CHXVB z330B@?!e|)qbGIZC`jz79<*f<0zKH#q!*DOuoXp7WnSm zX&eJzk$*hCB2OuPB7;VSFK7vAM~EBeLq!L2aoHn7xYe#k&E=oNOOQoPi_YYiT9?(v zkQazTHfN`9s;$R8pT+T4JXhQ&aDPVlWXQ%%wNv>XlJS{jOQRYr)^+ zail5RYsGyZ?T8!5E?bc<9_%(S0V?a!=zjPH~ZP>s*5eNHAgtau}xO_=S^Z)QGD_2T=R z0eJC3NJR3VP2X%@$b zc+DqXXTAP|57#q%NB#Ke*I6I`vO5>62UH}QC+{{t_Am#k<2tg=x-$sD8+n~|GwWdh zGg7?rI_sM-;bYH70s>wfrzq-yJ}$qib=JLL1Bf8PKk(!zkVPes!X%;S=HO;9iCSm< zW9Cwof{&m<=M@B<)cOhhlB>F29BG~Pjclu%Jk5*i8v8MxppWv?euM`^+BFkvX5}&f zP8nycapW4Zj@3D;L~EX4=uNnq*`DXu+wmCKcPqXV`V1AIy9uJ&JSfEW=>MU($mjQW zR6!-gam>Yj^Bga+GcWQEvkB+sz4Un-hL8D|m+;v#79?w>57&GHJ09 zETH8%mnRtMy1)F5y*)2$aIm-zGXpoYnsa^&FHsMm5omAy3;QR$eQ3evlOx$xzEy~= z_ylulobipVQw{I~@R9Yy#(l)0s{8%V>4_nFiy+B9>Tq`CIkIC-pAod~{PJ|@aTDh> z<8AC8`gQflLF{*^S5(%L+MGbq0wfvr0jDleAwqJeVCy(9p6p^rbpdU*2&hmD%Iq!U z()C^(zh>zQRses6CJ0aI;D%cKOPg(FGY*;4b<7bs%;PBFe;o1e&t0nUN0@OATx|KGBp6kB))WSE zY_5S0bpuKic$$aEkzt9!iBz>SYkvu**hNCo{2sxQJ2g{0-r~}(32-^*!i^ByQs&3u z?SF<(`T(KflP91_pyw*_N#up$_@ou1QHf73LDU2Io`*lq!LwalN5Lnpj1w!r$K#Ws zno;vfjP=1M!H}skJf8$mz7n6{V3A|MBPW7K7Vb4XpMYTo6i;wE26h-E!(^%1hDPF( z0>CtU@}7jg$R{V=q50(2vt8N=pB#xZHvY?ek_Ci@PkuPJDxVbpJRG0&U;r!e$q9(2 z0NX;wnw}qSd@_?NkI%0VMZx&|2!EWf&#E>) z#{N@R@uK|?p+D^p*DO6w>HB=|Ru~_DuG5aQ8GAwdnte{_t=IT(TC=nR4-qgMTeB3$ zjVV(gt;y=P^7(8x>O-zw`*sL*zu2~dj5v0RGX$Z-puwSSKma%&Z!_kGJytT5V-NCS z>^uUOgfY9CrQI0m1T9mjYB?#3NW0j;JWL5;&sUR)Ay4fqpm+B^)?yWk~r$ zWaEMdh!=mf;YgxzWqLGX>}BV?O^-k&INmwH569h52kg8R#M4yptxvW44^-_xAQruZ z4vm%iZ!78lAW=tg-~6@lPn1Z;4TE6Zoo^JW3^^D4d;NM}J~HYn_s<)2x!I-V0={w& zm~y+8mK*w`-EWsEw+>5>yDRxaoe(M4&KZ9-1FV&gGNS%Uus#Rgtunm+3bVY{Uya)t z{k51;Jkei&yH)G2{hR;0`YQ%tjQ*N&Tvh$m^Q@nL{r+l_>{7vBefuAxzy5(g&d=jM z?j6Bj%`+ZW>W4IkM?F4$I-b_;RvCVL+EKoeAEKv-K7SRy>M@_xSEcI9@9@T4gtOq^ z(`ohjtL@u+e#rR@Jqc4h*{hjihcCIb6F=nsO_6r@V=$&YT)eDd}@mv+J@-+@5?m;KcwAT)gPucNE-N#g0@_#}bRsKh6? zV%7{kxdwlnFX20NqxV;P{$7Dk`ga;NpER*P_$2368JuV4_c!+@$&B@l##e37?z`f&MS^Ngp6IeDXx1DxXAtKOCR5 zVl*o8$t9RIgHO)GALn52I~67Rq>|q}^px-k^G2TEJhU_TWOROW59=cWtdq=@{O0g3 zY^{pl+=Tj-{lqAN;0a5v?Lg=&v?~Zu>Nh`$Or0ee&WdA7{pMZ|gerb>_IK6b7=j@v zgQK|;95YMc7)v^CQ>!VwTjETKnzB{&|yCLx<1OQ4q6d7syL zRlj-g$!c`yhvQU6ht5jgDr=-1JU%3-axrbN|(o2 zor_wK!^2p)1M9S}`05zYOt0RO{39lEmGZW-?o>`eYTgZzcq~AXkKA_50bNW&?bG%mW!H@|3Rm!ru~^rL;H9bdq~5i;*Q6b+ZI7c0p4xa*kge1}@W1W2A_8N{6R z0+c|dc}M84E*)!@;!sL5VxfL_vXWT@IBeV``xoKI7B{Zi%Qp1fx>uc_qBi%bbqW$m zrPsmlyVAMHNT>`qgXSh{ZiY;moZMjbCm)KPy=H7J9{~7ZtkyF%zeN;E z5p&XYnwY1b=n5Z#t^sHL7nP|&ymLB!^Wr?6*MB4)9|CyB&YXE6=?`poj zywT6sd(Hgs@^v1xHGJK5L{+}dtsaiAvwKwL>(67h55As)KhC>I|5?_v3SWmIKZZZ6 ze9!j%N_?HM>W!YSvlyFC#Meu&F5&CmY&l<7TF2k2;OmD!sQ0B$p*^ayFa3%?%SR77 zP|2dxrW9ga)N_S3pe)zn!$-t2JD3YBJDpkEqR&n2nqS+pcA?fAgHlV?%cCBBmZrUD zlo;v5|DQtFN;h5@u)ykpZzsg*`qLwavZqSI|H-F8E%31N06h% zC@t(0X7%Z|)5ZG=7xw34MhYWfwRe__T!o#Z{^p(!ZsV0_kKCq@bN}6M0pJWvp1(C4 z=UHMgzdFXU#tt^cVe4}H5N5raD?(du$IsVT<5e&4>h&ZX=&spVfct!6lgDvn_obVoYRFlP zjULqA@fcfGhg|b`KkPHW@_!U5ICsER?0(GRA1%*j-FnUCKU2dT2Vnrb-XNg}6H$c0 zR(>7;TSk~`YU$z4NiD1GWE&t)Gs*MCAwPMVggh&1lPn|@x<*y7i8M)95~E^H%?574 zFvLX+3W?=B{&iQE&=@*zAI^0ugEVxw#1AOZSJ;=T^9C)Dc_10L=Rbki=T!4LZxC^^ zJGwn^w&!%C2j*3IvHjjhlpOT|E{r6E1It|1UJHzoEFAWgZ`I|8SYBK-uYy@WYquX~ zc`1kU8f8eVaj#j?2~~%DDxeUrt z{xAI;w2UkJVB=l7d{V#Y41f`cKn9&>|0qWchI@SidFE0rkoWv`{d&Ew#p1&#`WZow zm8+B>G(nk4X>Jgea`nT4Uk^vPgm9pwkv46Il46r%Tev~~Pr3;;_#3HK1 z0$W!qip5E_Ez}pyayBvrqV8G0Kr}-jW~Yy>pejCVN_Ne_;NxiJ#3m0VmOr*+N7A}} zU&8!6=|f2<~oI#0~v)M<5OZJVq+u;rlmkQ(m<2BmDgEqTeZoZ&a@AKDaJ06p@f zQN`x{ydLMGZ)ndB>|dIzdJSX7^8Aaa-LV>c0?zMVKK}o6_bqU8PUruV8-p+tf_2#% zq^xS0Ahi*fiDa3TU0sc^#AP+DE^T!syR1rB*+h1&(XDEK%TL=?ZEf3M+eMo$N>>ue zqF9%*q-9V#uapjH8KUz4exGxB&pSJ_*`WRZfB*MGcIKUPdCqg5`+3ee!Y0-p#{}B- zyZy-7vY!xGg*1Wf$hA9WMsW{N+|Mr+w%cO{B%&_YT< zxD&4BU@--8!;}_`+s=72=X~aq!8un#uxd(!(Gkr79kH`6K3x1wb;aMq7g*sW;&0=0 zp<8#}LuyZQ{(xAs-c8RGgFid282pEf(0(fbrypqAf8t@ceG>;Do+v`Ouc=S@b3+nmT#XlG z;*OGz!*qbAzXFu5ba48Wn1BW5AGtYO`@F2Wx@pMkoq?*U z35VT>k-<(&Ah4*eC34Q}s32JmC|8f(AHEH#Z?N3>EmNK#8R-oPS$>k;3YNt^pS=@= z6&fseIQ)-_tlnqtl^vpv-A;fdtnv; z)>#@X=>-1}AL&pre)z;&#rb*B6T%PwxJUEbssWcD-1b|FwtwH7#oOOSwSR+Y{|iOi zj}>kIoDtf;^KpUy2-E)9qV4x@hRD)!nV>xVAX^;%xvKrA?$-GE;W`&Tl-T+6-S9h^ zZ`sdsM&$zB{FmF@c&_^JLE|x?fL!yDLII$;ynS#6-{ikCwqxU>O$VYhuO-@W*Ur3O z44)1}0s5|FPken){{RDKi0yaG--hN$AYSgaKR}eBaHw1g7v0C#t;%H+ESH-0En)%^ zkYOj;35`oN)tGUN-z}_Q_yG+j{%# zLt)rL5JoKb&L;xpXzID`^6Cj)mosvNW%*E!@B#e_U45B0 z4KD@Rn3?&{9jq}hAM=?>PX{JszvU&{{7fo?yxg$2TW<((6XW8Tkpv;yYK~&xepuZ2T?Q}guiMm9=Z&Ox zJ@ofDv7uw)Lz`d3wAPqt>DQ1}I+j!0*Zn74bAS*1bsOhFgqy3;>o87wnCe6l*~AAE z_X!mT$EUmaNySc8IQ6V4FX|+=P}eckqPV#cRO}tP%~%r%sR4Z6wsB|y2a=Zo$+#dS zi2x+!9|4l+u?{3Zo&ZSvo+B%GSqFL_AM8CA=sjAncO00&^?)tlq0R06!2I6-3WbZ_ zCj@&B1$xhbgNM(;=z0%<;_NK^bUernVTjJ7NkVoPilSFci##Gve!FuB^5-r9w;7ki zxv`B2ll1}@WNZ>s3~_b%5`+`mpVzyNy;-`KT(B2Ir*1z(D^)+}CcmHW?c(>-p!#`u zaiE{|9@t{7Yil@`aOAgzxT-9gMog_b-#V1>^JQ6TX?)rPZ~DfS;PD7|Fs%#obquLcA1R-+@BHq`&av-8S&+x{; zJ=M^GSvl95<2LZ;>E+1M7W@baZi52#luuRd?|{4NAJBn{<^78h=U9^g6J-WwlBia@ zTG~7JaC#w#;q+?IP%sxip0aW=_6?_|J&o0CK>Aa)h@JD^7z#uZptL96sg(9AfWwFM z#0TA4x9F&(MAdnLI)ZMl7=7b@1u22ZnGmtsSvTCMdbSMl9@VxM6Z^3zuAwL zE9`XAF>y{f_&1FIbBGtCU%PC*)%%Hm^?RRuKKy>-F+a6LT@I*-+2DR+!aEWFCmCk9R)c$l3+(5Vbr9=kHoEyTsP60!j-No%Q#aZF9G5LnA{N+>ndN-QzTdy{6Bm@fv~0j+49XRW z!L`GK?$zS9WA>Ef+VSH62`}h<0h0K6O`vK?ar!`$Txpc8-0N)YUDBxsT;6LC9p`r%{}gZJp&smK zeNB%%7e3vb1if^efS^U~7$~?5mP@gICWuLUZ+#l#C{=nVDmnb_nC*Z}db<4TV z={gXh;l~Wcr4ojkF-yppWXKmmcQNmEWLsz%SOy5a<I9@XxS7y@Ffv*b3)EoQ6^) zcK_Z<)(dkzN5_*2*SiEFOw}`S1S9VqyMgDBMV5A>LEtRcSsBnth5VAfU!Y%~UmJm= zq;Z<7!1H!*a(|i=0L-XBYzdksvQ(0oIoM{1uY}_Jl@)|rVac<8=p+fyyp1uLuA|X6 zrwcQ;9l=0B5fNrwluPCOLE|NGFH_)b)-zF3a3gZTosV9I=10WqCwdHCNr$Fye3Upz zgI__T$jomA7m`Zv#|0x22PDMfV(#&MLC@7VlfE)$zyyDX#N2^6p!_0Y)k5^mulL zhw~akJ>Vx#zxT`$c@h*OST$ApJznkV_wQq=)HSJ|Fa7xR`}J%qkgsRvwH^Vuk2J6Q zto%6U_2M6la$Xtt49si&$)lRr7S;o+c1!WX^ZL63hRKFcsno;m>YP0n@9L{A}(9%i~N zOcZ+^n?%cv{x#zy9%|XIkAK+9yiZb)U*gSw0muh3YuP9=mZ)fo?AwU49TaUtQTmnM z=}%b>i=iKmcPakzVZZ4gv)||SQecT!f;n*UF^J!Rg1E5-jwv+!p)MIdtpLd^Hi%&K zV+hFq=B*K&FYuB@d>kDU5NADv@DTrXgh$W!m)wr4htIc}gGFVShdAe9s0YJV=7}>Y`eS^}({a z#$vzsRv--)JC=bfklxvp#)+ctY0rb+RS_#3X!SuiKlUSIv)Z$yIX|6v?RG2vV=gYz ztfEY7lw2pfPED&ozaS#hH7%)}w_C6)?~2`x95Q2NKVj96)$?;Xyup&sli=77*4fGa zf?Iru^F!8nt}%fFXBBa|4f9mie2>Zt9Rvd6fTGMR|CvQP9d9qU+l~d}1cQicV7wNN zt&S6{_|?aum!9piTvIqsfH8=@5n~+2wKqcZh_Wr(8<{&$4-%|giWk;PQ(zwF+Z(;8 z2mIvO8zra8JQcAwy3vOpPdG#ZfpV~9j5Bf3u7(~sCO)JGJ}%vjE}pO-+X}=J${9Z% z>D;mM(+K+Tn1UnUTst~LdeR6$X{DJbT_ZAti(!;HI0VF1j@cc?K8K%|9Kn63V*1aG?)1q0- zri}q5S}An$H*Ng*3wg=yt8cN)mH-H9I0>6aLOY+2<1fnjXq2~BzEv}_p%#PxQm0Z! zMdA&B)U=XIm()_?y$Q+l@b@__=Ag7{s63=7X{Y=<+vm%=_1#9+wGa;1Kkvj(0K@7V zIS*=RNQlH2KMtWw77*;})U@6Amxx0cEdb9^6LEk5#ud%9VfNn3Mja^ly+*7MF;2`F z3Vmtw5HICyMcqfY=pu;c8Vj;oZ)aK3MHKH%9>Rqp{&-|t$C4Nl)5{bJbp&ZK63wx) z{$J;sJluZdaExzC05lx2i*Qo1V=;q5&ja|OhBJs+M)1>t6RBGt81f#u3eKF$4`SM- zuJ(aaZ*lJsEMY2rX7o7Wtp9;vB{zU6V@bQ@q?E*EOA&83@dS>Ik3%1Fu6Y$8%cTXf zEylN5KPej#Zs?D!>`&gG9+&Ls%3gpxRPYYL#(Dx^qI@&?3#`M3{dV6Z_?Lc9VZXI! z5+hsex1RMF*;7joh|3)?g^=JNN*!eU$*Yp=^k1M@b`E>g^l#)0*9qE4(Ao~U68&e> z=pPMlqfTvqS z;L4FhL~3*cdpygIGnqIGB#1?)_wHkWVW#{GqR4r_8?a(a8%6s86&$^yX8|7n5dJQu z2Te%#QqfP@1O{%>lCzr7v=2rm_m=KN{bb@CY>zl)J|-U*?1O_ubP9M$h=}r6g>?0? z{C=c`Fca8<>r*{9TYB=(%Zi^}kfw}(VCGx+7xi8Ecnqzard`j-Dj|I}IsV%1usgaCVA-_fjH5C!tEKRz0Pc0B5>;?Er0)At=*#97Uu z+fndmKkB*T*w2n5E8}2FxyqmsXvbh*vkUG06D5#!6I$`X-(WK1}WD|6k+vGK9=nJPU> zANz*cDZG9#$QHF6zm&M|M#mz<{g`bbe(OR#cQ_&sD9W+}G84|Z10-14e?%Lj2DgJb zfO}CGKcJ!u(3}k7kjOsEWDw9h-aWUy&-@Ide_XsaD7aM|VgNM&d#2$$B`=6p1d?SK z!O%h=FVnO~e8t!v=%`yYQBWTpFMuihX1h?H>&7^7LcAF+bKy2xSPo3;x#fq7f|3jR zg;Ti0B^vz#z!Mw!8rCK{ZoxTS82-0^EQ$S0og@}Czv%AV`MgjSq=8U)KAYLHJD&~c zbQJTMK)u5A83RVNBg>8RN&wmUYXc5jIqzxZRkpDtVbCCpW-bl*2HAid7y&0uO9>}QnaNQgf^ z&ZLHQlbPorKDOOl`5}_c-8&@v$pghK7{jJj}=53#1zPae(8!KVJD=v+#wFmFI{a z!G(hRB%2?2p}ef)8TshaNs{AK_HShAjc5de&U69{qjp9iA6<|%#Y zXED|w9ZYSS?)L>==*vX%^B}Zuu{s4_Z&n1}57o(SM&J#%Upa0};WzXNZ$;^?1r3i( zZwU-~IK2&|M@Mfl0>*4_$wYpEZJ-l`BcbLs8cu^*n^I8XEkYdB7&cOpxda`M2NS%5)$6aAxd zGZ>mLWKTp{pBB1Rrl2iq($jAqu1UkS7Z}3oy&m;wx1auo5LTr+>WxMkr$YFHF!Hf{ zlq%g%p9m*(W%x&x(*8Bub?x^)bjfi*TIR1~n|f@&9`!JPHcaH(@4Y~VQJ>6!7pP}G zZ^vlwtOoqO20{uj?&k#n7I2+XoXhN7y(gUduyziYvG!A4mLv9>6>byD|4o zfz!G*z8}zM&`fn@z_WH^(g#l>4`F}@5&9sSvwWLue=FJk!SAWoyoRp#Hxu7RmlJS@ z55yi4JF@O;qvBK6Pr82WUFs-aZ8`oh@NJfbs)hCV5RUx3=L+(mi8C=|Z)0q$K&nPN zF7Fq=IiY&ULIPpjGyHEDe%9BAh5GrtD`1W)+UXMADT#iV7t4ON4xr#+r!<8Mj%$?t zy$<@dF`#@Sw@`nG8HugMzkHneRC28ZqbCwoD)*mt`}C=n_eYjLfhzv5Kd`?JC6}*{ zEZ-dX^}N8ZO%>qu@I(oR|MWWWJ?4$!aQw}k_ko09v))eQx6${_%p`DljQ*Id_l05_ zY@VDfbEjJ_niZ;$8$*cmwu>QXQnRO|m8E;ulubU;%g`RX?fUwx&}?J3?zM?qBJFr( z^gM?~jrZ5Ak}6#RfECf)fKOzW5#X~qY6((7e-D_0@TuIisD@VMrqyd`3+1Nya3?j~ zo64|GYFHr6hJ_Jn zB6Fhp0fAb;%6TunI}!fy`0r3t`Z5A@E|1you($r*yeHiO$3Xe&u^3@zd4c*YYxY~T z=RVnjud7XnqCFQ`xn}kGHe@liKhd)J%E%4-x2usm1~U@ZeicdGcml%?+zR){^H@K z5_Y+%o5gHPg2f%dnfP450SpOORGwMcu?-|g(@uDa9UY~q z6LujdkqB+fnmn0Vq^#$6lO1RQi&EMM$a>$nKung)0R$NjZB&{zWWkuC6fI=pXaRVD zp3mwwB$}4-roS^W)Hze2_ThG6JXDNe!Ph!q<~$aBmGx zs2FKqhp~??C;PND(u~;RIy^zmgU?+&`suevF!-oTUHGN|KB6t(ZgS{J=(^JFaH>pC z4WKpaBXvy_tBVo9PfeS2jhJiqv_puuB93u!d;Sv1?kK@d3&|(ke|){=0zZDMr^lsp zf$JM0cF_AM{D6GC9THe`TlmebK-=s85Yy;tjFAKJ@3rUo1AX_1-79umaDV;xZ!f;T zej~D0!AwW+u!B~l{M-$Ova48P2M~U?&qw=p3%}yd%Uq?X{;mRCQ=QI^AP?C?P8E0W zd;ACiFtLHS=fNQsj5N!$%dk|87%OwVaOxMc%MS%WT0Zu{9pJM}pj7{mw#-Ai>TVPK zbV|NA*0+%xpV+ptqc&36k=(tqqh_D#j^u&W9W{qmchnxqljagAa2$`oNTSq<)g6h? z@t~s`EaSJnh*ghw$26XW@paWSlf$2_>^Nr|EI@Z7fvLxEdM`g z9ym_X(uT;?^_($aXDHc$31bJf=%Br#j7@`f)Olr(VA}aO?ZykVo62h!$d-1wZ7tL* z?Z$)cYQg2VJFh&@F4IGv%*-?GPLS_{hHntca<=C9e~;*fOnbQWE|J$>Rr|x4U7hyu zo$b{~dx`w^jt!2xs$(8ffk4EY#xx2(r}kF?z8@c}@d^0wo$Yl?d&&Ivt_Ze=`Ki_I zMV4(3Z{r@?^Q@mieQ<|Nb1hp5th+pNg|ceQIMGg>ZRZ{k0ouWNA803jx!+D*fp$~` zz_bH-QE%J%D%$CzeaChh&<@f?+AHeWh>34Ja)rw9GxY%nGW5=_v2E-tutcLFbv^sI zMV~-y6W8m!1^AWOQr-T1X4hjh{&x1?P15h!c}@)iN&|^D?bS8I$FVsN4x7IfS@sxE zE|^#hOz6W!Ec|)(Bz%UL@`8CK$puX{$puU5s}@w$RV}Elty(ZIS+(HoMAZV^RSll0 zOD;g-Ap~1}asdvE-0uG5g8Qqs%fi*D+HOex9h83u9CQc;?U*Pq>8W~dqWN|8%6b-nlJf8kHRcRl~C_hzX-|G+kMB@d5nSAL1f zqfpe3&Nr_HI?nH$r++7R@i#@){_kHd@H@*HzvUYRey1qaehYw58WJGhb@lrMN_|f* zf4gyyxlFoxs{{7Pa!9Lj^WlFWAL*T;)uLS;@8$f?Wa`9SoEM#=^;3A|b}o0tsO=`^ zMI95R}%0s}Sye*+F z%*28`zs(yd^7|Bbh><v-7+bTCLd*j48KD$=1! zZt$K1s{#@CTw#2K7WSKuf9M67KW+c*3UV^L(KaBBgL#Y(#6TC{yBhcuX+o63pU@3C z_>9TgnQZ-kASQW+Pgb?R)%p^Y@_S<<%dX|9v5B*MDJkPQWnHRl(aMgK5j(c$pr%PN znqG~~Yx^PpM3#L4W*{014PwNI!Iq##WO*}RYP-nD8Cy^6ZAfNW-+LgsVMl6+1Qj{V zE4tFux#EV!t(||TVlAJm8qsf`&t^Xl8 zlaYb?a^}ugf^z0oe21JFVIFRG;3bTx$Hq^qo=tE;}TCAyL%Uu7R`37$!$^YW`P zi4>lvk%Ms#o$WypE&erhOQx?yal#WqI-@CIe^>hf6j1{ov`&odWmzX4L%A7QdITs9 zjb{7NXx^I8i0g|1xfxmZXSB^`N>-2_Ayno{0-P9RtKlX?1|as{&g6mzvW|QkCZ`cIEBuL05Z}n|^yf_cor=8-LP$qw7=!oby@UW0^a_58 zQ9faWLjv9Worrpz93$>`BD5?|54wiLr+q_$VOSp~of`!ELm}YO+iYY{Y=&oEBrmsc z-bSEb6`z)s6A)fYI|*-8`_b7h{C{IMp2_*|m+GJ~Y^ibP-r8-3haCC>9f>afE}H{_ zV%HD?-l1H62?E*AHB6A#EqtAtcGeZLBvs0ve$StlnGW7hDu&urLuPa6gcYAMN)PXg^=?=(Zb~4tyg{egi?!0K$Me@J(Bg zQSTQJMPg^NZ9e(&#Y;gLc0ui2x?5H4I==Y$&3-VGylCT#B%k!a&Dc(d4;exxD{gBO z(L?!0AEe|b+hqxu6Kmu;94$!V*F0MR*YvH2>yWL6tB`(3H%eS{h<5F#<-Cv9+?Xp$ zW?pknv}MzI3#YVf`o<*(wQQQXa6-$bGcVZ(GxONx#*A2lx}+)o{3?FF^u?Kxl_yU^ zaPz39r-9sbECq6G?f-y6TKtntn@yuld($%HJlIRKG{Q*ly>Ofv8TQ6SGIvZ4+@ zUW0sG)j#U3q5y?(D$@Uzx__CC0i2&)(Z+qS+!xS#ISy34j!89M+`K9|{W*lDQx``gE05SM+4{kuO%pa`c!2%%=OWj>B*lRaY;pFzw@YOc zuH!brU3)2X8bv^~KY2$SjnPy;B>#>X->A*s^K&^$#CW_+mpTjGhQVfle?I6FAh z7}dNrIG=$9GAN*Kgz!UhEH+OS`vsgtkwfFPfk?dMzAp3?1FxF(8gBmzHLxwDUy&@0 z-Q?EmA71a%tk<)JdTplOW+rJ+Ae8PH7&F=kf1Bf2?Y$3!iF(HEmoo}}0FB8#9I>RL zH}LTm>8+05c`fPf&WnTeR^!lHZGhg|O-W_WDf-X1&qR)QAjC^K9)PERl=N?U0sU8v z$ucAif>4(S<+P%mgQXApCFxl3aX6y#*;j zrHNqm;MWzR9OFUVE&_EW=C`wU>fQ4+2~EaB*|`fl#bfw74m{XAHGCfGzQK%#=hi{z zS6~nbJCPYrOshely``!dD<|D?9IM9x!j*AgJbD1UBWmZ7pwB-r{9k|6d~M`D_07O# zRxU-BCh<$&7&5ir;TZfqozA+N23z26VLM#cV;cLMaB}m5ROS!zP8jgsTqyI&+anft zXwz%S&G+k@5FQo+#&Y9>ffpElosNe^R?tL&Y`pSQoS+^#7aJdXhjuy*Za9w9re*O{ z)aZjC0A3}{u;Y|)a{7~tohm5V%Le+S-ta2YcnheH$)A0UvGwy*l>xpVtideueVXr8 zPM12L8^2kPuE%(EZ)zw=pqh5-I0leL_jk!6Hq@B)TAvbna{Y>O__bPYVaj12ya7Ev zLf%psSkF?+EcWZi&Ed35%pmP&MzjO(S)A|-ooxX3ekmEPG3j%@hEo2u7XE96P zBH4lKt5S2uP}foB@4@a`AAqRi(T!lKP#1BiZ!-cniAWgo-i6iV*mOj`R1rNk5`P^J zA$SOQ3<8kxkpevS%ddFAc_3ePtqRf!+1#1z2rAs zo8Ab~f%lml-{X~RMkVLrIxk2RpYv)lP!Rp!&eyRCd^LUJqr?xh_)XK(!Ubfi+)YGY zAogPHFeB$VPkpSXnCmyPU&D`p}48NpbTwT>aj~cGgvtWTdE^QH8Y~ z_*b`Khn<#>gpH4(%i+YBfBbVEF?!EE>aLF%+?#m^-i7|Y1VC~PH;*cg-9Whgc-Nk+ zI>4$OixBL@PGueN+VDe6{EUSt3>Gm~{o$xgtG>YcXIR=b=VwJ_-G%eb|7n+`*_8G- zcz%X&mvqd6!I!iW_P44}U&7XYPYWb1W#^>S^b1gyR)FH0dq1q7-YleXCo{;4ouU_NaNe`{H*-qR*dnMhqq>a`hGCt{Crvu zV$^C{`XOShZx{=EWBG$u zQrl!2ZUGj+PN~vwehm$p*iY*N87D499P%Mwb=IL6<5I>kSpFc=l5}ne!u3gMhNgQN z27{$5nC_1+o{SP{yhEsC#{*Epdk;;a|DpH~**_AEc$p;x6C)fJ`$OJaFuy2A(JAGo zIJF%M!&5iY8CjQ{{!S$I8*pG%>iB2{LP6z~39b7XrgP_ks#Dufd(IwH%?M<*Lzrm-MFR(pz=99cck2Js_yO{KMK>cP%BFJZEH6w0pA zbE*k6p=K~t^CQk60@%3y);no6^{pExEc>d!3s@1YRaXm(AG86Qau6HWz(aWeWuQ$p zK<4bS0jRJ*qJ#y=vDY;~+3s5j5ZIUIXS*zO!pTOm#4lD^pMt9y-o0zJoS01^j)(N! z{1w7`w#F^vO-*5Mt@vyO`LOqFlvjE=vUC#~P<+VvUu4-Xq^(pEj?di9*G!xgS@}3! z=E(BvP|g(|>M%xS%-{eX@J0A17;);H~aU1k(^`p>{7;gbPe^(l}!3Ck9TtaWz@*lG|c13`)UK{!V zr`~^-v2d{Nq0u_5KX>S(>a0gP(>;9xJt==6z}NMd2bi95AP!+yvJdD@-A2TMS7kjR?EM{!U`RD*NdIa84 zjTZBRO+S)H(}I3bIpP<;SB5?{59vBv3-~}bJt$7vch}e5asw=9{Kh73#to&} z1JXlJS34y9JP5a51M1mveEU5}J$)j;3Vhb|Y05L6)y;miUpFHVzFN7&4`0a%6()QI ztL6GHq87#2Rbk2khz;6&oD2T%#D!Jd=Xt!u2wWcwR6f6Cssu^zXEdkDjpj7HHk`Cn zsK$?@H~~Axnb3T?{^w*x#!=|5rM)TrN{-LO?|h70(Q-Tnqe#R-!JtrZX+KYQgrq0& z3e(>5dz8srEG`5Be$G1>rWNA?#1HN3ngxP)l?V0TcoD$Qx{ARJyRd5kbFtEe^?>$j z3c55j97i}v0&?QfNg_P+7LaQZwPuok=YBtCA4#H9j&2%&g`?W&Jq}O5aP#kr-^ct4&QprNu zj!dHWo~lU{eipdH`}2-qS>~l+B$j{sP7(a|OI-U8z(gMY26}&G@Mn)pkAp7D04D7C zCO~ah^ak?ycp3WPLq4uyKNS9|IT%B*we$TQJ+UkwV|nb0Ls#1-XUqymuKgR{;tf?P zm&e2LUS}f8@Kz?n)kCiTG+4v-V1&)6h%P=!S^D&5lk{jIA|6VPc@DOpELM!CuVokI z0d)QC>by7QT5WL4!@$PmofjN1r40#U^y&ap|m^WmKL=M#c!& zF(LL4GReI!GGYsfcRW!RW$&rdSK)CG!M?s+=HM&)IcZN}hj}BX+794L<+^24;vmQRpV1e;c}fDGE8DM~lH_0fR)fE7(DD4OPJUZ9rJjFNs$OOL zvMCMn{@N+rTtWN2r5_5qGIfJg<^pXe-*$x|3i+*vr{1+NF44>PeM!g+h5-f`9vEZ^ zoWa4x7?6`%24!L{S8A~23m2B3y39H*GjoXsO(z^5=ssHx)Y{0aFLUo&Demm`pc-1t zzTZIJ{l8@oHvfjO`u5;t07?IACSc-Y_*Bc2k6;f*r6+9`;5sLqGu%fP;O@j7a=@n2D277csrkTj(a>CsDuh4&t$GB|tLfA~22U4~?3y z!D{39T?up5uMr=2^)cad;To;|7^@yZuI1a0JD}ICwI7qeC7%D^wI5pupRpge|JA?4 zeoRXjzWw;8JBHhjeJ6?BRrFfOe(dTq^g1g0v7YS}vLE+>-%5p>W_w$j3ME*4?80xa6du{rEljeZ%a><`V^f#qGx|;q(2! z7=qSu(B; zu7=r<6YtKmA44pcDt&)0VAnClV)mo;FR)~@1^cl^wfYmZTHJo@tq^<_wjb+%=b%d2 zk2Uc4I3IoTld>O=#yjezf4}|s(ut$BANzDk8WO|&^nCmA)?W^@AG>C2Itto*#qGxv zb%#al$DYp@Y_GWe_|6G>sKf0?lb^wOAs-$8iY(n9+Sp%@XgUxyweK9+-5~r+UCoDj zwNK5v*n*W;tr^5CYySNXUufc$!)$B*HEpnE%It%wN3)N=)#7g#R62iCX5Y0^o+hF) z`)>Blz7Pa5%|2H0&AucgVj;7y4U&WQ9L&C|pxI~A_eL`Ne3Or30;y(`_mYbBYQo_E zh@p2Erk93Z056QsbaLKxJhAXSswX31h30|34_CWm?*2g8_bPGKq5IG~&5EnnOI&q@ z?HRqPhx1Xxeqob@e^1k2?FT2<7Lx-pmZ!dfB$K6CII~DWX9{b00BxACY4^s>n+<$o zPtB5g#t&dlS={78$>!yuIsi=cI~Fz@a8SFJJ8}72}h9t z1TgN@z|a0Uxofr_EdCIVF4mSKkiV(g341%Doj^Ipcll`lXyGh6TQ)uM=`Uj@TX75^ zwg+$x&88>fbEc*rXiQBzH6bu&yfe;0GZf35In}CfKf89EyADt^ug+WeGukb*dkt>c zCiyWj6Fq8wuC)~}z=Ka=gd{domg6r$IoWR}HUo|TpZ;iLO=ZVv;pB`{!ja`T=>;5f z2@KNvqc}PaKYmhqn(xRFBG@ZL2QHbps!B_V1z2@vBw_jH$hB9n+vS^^E~7HRzBVGK z?taclAkECKm$`DGg&6bmoetn^4gi@@7mV=Iqycsu^jQ5IZp5@@%YyN!VBQ_THug)9j6CC zy!NAX4^Utn{oS@eQsbt~Y^=vHFGGyHM3+WsC2nD9(rQMmerLe8*V7 z5We?!@cq~v!MAD@y+#wO*();R^){(T3*x);SoY`RyWyF_afy1)i-}8o9tb8ObfXLI zb8b~CsDMkP?O6ieZ&v#zco^y_8(#w z6@h)eZuvHrmw9KHYVNkkM!~^k9T$VI7KU+_Sn4v&{ibk`#Qch#6MGQ zf8UeVJ($5T&8Gk@DR?+vWCT0@JPrJD^Jc@R)Ki&b(9(!{>L*yoqqOt&6lsnR`DuuF z()opI{qF$)jfwT1e@gV!Ga9tK^}lY`11a>fxR@rG4XNnQpMjI~-Jr{7Re5EyLS->e zgZUcZP)$vKeAAuJxT+tDtp(|EVVSX9rk)%LF!g$%TRu(t27EOvUqp`@*+TewS-yxK zEm`O5(b~WH_nWd_jjC5rkE;FTVT^brJxWT651pdeNfNt4E?e@2(5SggVCqUOt4omgQt$l`N?t-vF~!0FO~y4l(5o z=m~USR5;t|A$^)~F!qNawhCKzE&eXSjFPDkTzkfB0~ATh0Pwy?YhkMP^+lFXl=~65 zF2eZt3jj43w@j#hz%kWPZxdz?aJb`+xxcR;{(HUfk=?H@`YcBr6_T&Aj%l2?PL@iQ zei;rRN!wXBa{JG4*7W@k-fF>R06zKM%J;~!N)#b|MjtE)L(}0R8k9V6>9kw*6W*|! zx`)inXPbU+?ZCO=sc$EzKOIS3gCb07i>y5Q$YkqgY{N}%Uc2EhDk;ov`6#1H9L>Srao;0Vwh%5C?#xkwAKIC=PiOBf zy|ZrY^fmp~KIHa$`LKRNy~G>(^d935a}azvYG9iBVGnbfTzlD_r-Xt7bT)t64WCf> zb$^dJzb9Lf>mFII&nC!qvj>FQQ>F81bUWfspEKl+w|BZ4uLwHHH(I`)6QP>SqD!JT ztAO4(4TZt-BhXjEwnu#iUVMkGfq=>%Hc-tg4?<<_3>U5v+YZ*%2v-vh7?xo!(lE8K z!BpwF4orG{E}nYXnbohr<%KdH0S1bYD~@6B$u&w54hCQU4zC#}aNDbM+AB0K3Fr4@ zM-8m~CmJUuQw`V*{1En}VT1X5hc7+Lmx!F4~f15UyI+wsu#xkDn$+Z4{S zZ6w;%Oq}hY)^XtzDkmk2b42J(XgP#KO(7q|vp`=EZnE)sEH@rE9>?+a{DHFFSMS&S zp8Jqpy;panJs&i(>|5+#znzyb+x;-qD^sW+yJ{Lv3{m+wg#0~w?-cCUj^(9v>wj4peqyGxIFK+x}2_)@v<(|Gjd^}&ufjR=P}uV zfI+A|QztNJTb0fe8Et=3#}$A; zXg;97LxhX`M`5uDaTmz5LUJ|Xz|Z@Eas%kmiIKSWC}5I@@+i!DC?5Lbmg(H(kHI+V zSsIUe{ffpP#A^;h@Qm}ZV+GELFZ1q1OIj|oO*0g+BktWkHWT--&W$ImzD=4)i zR1QGB3vU2LbySyCKK>#Q4m>T1(Gk{1d&RxuQ7C8^649h7EK_vGF?W0nKKPqHlARw# zAMr2dh3nJ{%Q!E!&yc=&mLu|t%oeI8IOJY5$)I=O_eGLt4*@?)nqCv8V@U>OO_?D@ zD9At0n+F%4NkLw%5P>=hZ-{0MHB1^GViMWFhbTWl@yK;s6=n3}h&F6|c_8j>>a{y? z1YI+}E$eLbOGtn0o`3V`FS0a+ml*3%e8@1zoCwGba(EHtz&?t`c>XIRtU_awL!#~1 z@oW^2r7!SVn>1AsBRR`drH*;}P|`APGev|P#7oP7$(6DntpZGjL`5hn@9NKJ+U=a6 z1*L7*p<8{`TzEkGL7W_ZP`9&j#t2V=3{T7#F19pM6W{H>T(p zMl^yqNRpF48z*onG*fZhBp z$d84j_r98KPk`yk(?jrWpl1(!OU<5g7ioNuuZHeA9jB6M^2bmVL#UN9QXI?V{4CHEq*iE z&Q4p}oew=7!gqsbpdHM|AgWJ&n2qBcMG16on}$p56@G`H9S8mJFSQHP`ro5xxWh2g+Z~~oVVytID9r$`XiK~V3IG@n!k;bDy8+JR7N^#`vR*Le~mYza4T)osGO8=?n1Rpdm z41W_Q(ghzw59lLi1e(-x2wC@&0AqW#(SD+|@D4ttLSn@(KAwhQ7M z0C)`P=_PhWA>!rw>sn@vPQ7&OMO6>W)Y`&P)@%CfNqQ+6HqR{smL#tk8< z9WOfo5N#gVFc0``KQ|x$D56HfeiIww9g|y0rRkWQe{`ywtAb6`Fy~J-ahNKI&&>m_ zhWQc@(R3f)V6yNZ&mpziXKIH~ziu~>1CyG~cEK4+`OKd3mUlPo_dI3O05b4SZL|8; zD50#Nw>kmbCcVkal>T+~AV*9&6Mk9fK_U=J%5W;wy0|vieR_tvs%3eJlfdXHY2 zfNN5&oB`Q(-xLxP-!W{0p!oeN6$Nu1eueP@K!NlMStf4>p>XE+@-gk1T?YO&;;)J@V0?J7o>@Bxk#>xC|tA> z2rhC(*o$ACPb0aEO#Kqz62~K9iCdKyF3Nf7t0s!CL^?6^1u(4~mkUoa-7kGkBr>VDLHj0sm|*d``$?A8Nx9Q^ zQdZGP!BU3t62xdOdQFq>kGF~E~Tjz1I|k5C~` zHR2LcP2}QK{b8y7UJK~F-{Cv$q5^gS;2Ccq!UE-3dj{r*Sof{mZZ zw+p%q9HX-fAghCR0TlKY?1JoTGNrCv@biCy)0ACs9wGYQZx^(I47{UTEIk^#Ak4wH zYrEk6%Zu9uu?<2GqqYkgSpMU)3ox%@7l21bZ5RAx@1k}=?DZmc!FEWlhF$O#RvpPM zNNBr&w#xrjyPyU%;p=&A7nEF)Pb0a|-#GO}?1F*IMq?M$iV_}$U2x+P*ai7|-S~~h zf0olU`Y?r1fn`k+Cs7M5UwIvTn<|~X=Wu^GjCas8p){)H$497i`B1N<_fX}cZwUP& z>?`4SiKP}=hwDXo=t~<xV;Ok)*X>uG%T)W? zZ0q&E>zj;h4D)PXUVm-jz!yeU)^)8=vkUIEMxkneb~wQ)p@7f ztdNOjm7wBq5H4=Mvj%dDYrb+DFkA|whaa1k^?}exxWR5qY8}mu#yUlc`LB}08~WFBj()! zPcWFb*oOMD9t}dng5w;1g_+fV8-@qV%1iD&*3OHI$1WDs_~E&QnfRN6AKoqCq9`9d zWfnb&0Dh7J2aP0q?td-j-Fmz;fNYgT(Dir9Wb5S)-0|Tn$0zrR@!r8)PR7TiGz8Q>TVYlIO;m%7rK?UK( zpzQoy!1?LgI4XEq&xN;?a#*m)J7i|I<;kyga@V2E(E$JkcsyOh3Ah+@u)JgLH-8LV zul+stMVgw#4|u@GM@{C1N=RJ_f1b0D|2y1H#1T&dfL2i)hQT>WOz@U4<=N;zIOS@S zQx<&t*vB6;9stP)nXW+??LugjV^|w{}le+N3WyruGZ1d z+yw?s2Uay@9UW_rPlFE+gs>ZgN0Wv}gRmdZ#T4N;=#8DE*Ty7HGF}Tn@^k?J8 zk!8QZJ9HbXk#1!jGM2AzQA8frZ$W(rEs+(ScquwGH3z|@xmZV^#0*JGgyM1_|tBKKmuaFLAhk&==Z=4 z#iU~yGOd>&xrENVr!wyuz@v4VtaiL3!leaotz0qkf%0m@g~9XKSk9$Oq>4h8t4*CC zGImnr0FO&{R7rS3#Oh$Uy{BNck`g~^4v2H&DniU>0J_c+teWyM^F$aFRq~UPKjF!~ zoRIOh=fM$W^eP|Nr+vy89S50601MNdH-;CqdWlzit{^7!zMsOH0# zlRpw4b^#kMAO3QZ=EKm@#re?K8|1_E&Xx}&OPAvX=rG-!6JCUUDES2YkfuR|KsF<# zl0YG$bsd*#}ox0!F3j*@H#eo#iL%jLs1zpzy!g!qW*awVHI$)-wA zs}+=&c#ZH;7{_wUXCp!fCLVX`*5xyZ97r3%GZHMcic4!K5KW%VZ`Y&%}vVgg!IW8S(H=2s5FKbAq8XJFRrzHFnr>@ei6|y zTgg_6K0{CRM?&ZidRW%=D}nG#{riGQY+z+7hM6V_LmR(Ri%+4){+-l3b)uTeUpVBQ z@nYx&?ffp3gPgT?q^uQWnq_vCob`uf(iUFJOIs-M-owoz8htUqP6A=a-hLRO%9r5S z41DyX5`<61>my5-s5;r?zcjIk10~8smLRn}Gx!mHQ*c{*`ZJ(k$wSDM38MV;gZH4c zXCMTx{LQF$U5WLWMdh9UHEpvO%&+a+(VqwIr_W>oBX|VzRwq{6*DlKKwfhzoxQV=#4`i$0oKuLwPJ&34_YS1-(t;q-~xgzL>dS8E`3t#>K z?Ja0vBzuYFeR(arL2~`5!x%5cwHAqN0_KIvn+V{Y^%>IuV0!5_$LdHxW1YbM5B9~! z%16K#-wgCI4*}Mz@|7hYLB(G>?iGJm)e6+h)uJ98U1%fXBI7 zvqWK3+(=1=o2M)7p-IgL3k#puu#?K)bN0a+`XV3I?BLVq!KBYF zY;#me!Y5yZpG2?2#${AVnPVC6(@<$7Rnv~apFRsZW+gwjQ{m{ElEtL zxA;o|1B~KhK+vn#uZ})X=~en+d@TRLZ%PwOMa~Og{DhBFJ`>-DSY;^x|5{$lt7Aw^ z1@l_c+foif@D|By`8lhOw0;FX{a>Hg5*5j1@>KNtRqcX&8p-u@DvPaOh0h($`c*R} zy_k7WG$!C%D6i$&FTn5EdbxdAnfPitACZv@(+2$Vt~%f)=9PX9 z(gc=Cd^_Tic_&rUliohaw7^zuAv}k^g6N&KdJ~DmPoY|=3>#G)pW=nSioBD&a?tnx z@w}7J_C({zc_;2Uyu=^iG=6UJyc5YJ>8H1#Q)CL|oxtxsYf73(@vR!^f#HAopz}^* zI}pqwc_;5bWofAaI#0{kKLcCW7YpVix!zfab2^>%ckf`62H zyL{{OPU?4*DRuKs4u8_>ZI3&R|M%bjfw>t0SkoQPT1@(4Uq=??WK;@lme3!F6LOyEZ|AV}f0f^jTc_-cT^Jyg4 zyc4IsNZv`!>7&uxaZ!?^$UE5=-P`pv+K*I-jN`}NpJd{Ak)=%0#f^H?{}k6EXCM_=d!t z=L6_$d=kYL8B8|DOW=pzual=~d~3p+eh>9gt=?9{1^f6^d^D|tzSv2ikLzFi6YaZnQkocFnmBUsBkLf-R}H(82)SWgf`%Dyo6pEG z2>WPY^75 z$SFD4B;&0-Sm1o&pB7FtzXs0X_$+55T26f!e6E6v=$}Vx>y8$a{XTI$Z;`0mU*Y{Wet z_|{*mzYXx)V2l2i=C@332?aM^Gv=J-r_~aD=BGOh$vGPq>41T)&-jO#4d|cuvx+lJ zoXU*PT-ZjcVv0 zh98!KTzq~ocoI4QLJc46O9R8X>mxI;2gzC8LE)WqtXLOVf8kj8kPrF+mDP{q8k4}W z9pk|=)A742v6z8LF4<8pInCq;+4_Cfl-D$uJFBMNpK2gh74r)|U3hEIANsKN0qjSe z^3?`l4dG-(9dOysSw^w*L%yMWHFV?1SL&b0((mI(bkblq?=0mDjG-$joiyT#8*CTr z<*UB#_=)mczgbcn*yrnNpo6D`Nj7qs&1`*ei7AvZAF}0pnq1w*Q|`hV?PK$HmJ>_l z=BIv@XNrAeZ(3Sw05D*M^WQS`fbU{wJ9%_({SDb2%%ki7)JMwSsol#U70HxXi+$tu zoj5gFFHvIYlj@4N?Ia$F(*k&<-ij06jd1Fp?@=|nnqTgEp8u(E3TC>2}GE6U})A%mRxnZ-n#{yAaj{$3>1XxM2GZ{|o+i zN2}REfH?JSoduNja!-vXsqB$8=z;z*ZP@W*WLZ@6HqN8NQSkQ|5?z=ZDY+=HzQf)x znR6bHbGE%Ac0A{WkD-@EAXF=K=hJnzhwEP!rYKd1>(k7&hcA#?GXpo*D1KpUKK-Wf zlaZvnh$+hi2S=F3P+Ej3{u&*Nj|z`}7dlq_{$spkrzNprobB54E*|^e5PA+JQN`i! zz`l{0>wT7whd9irTq zQBDzlh|->qnFm)69Bbu(xxCSp1>3*86|&%;m825TQ6YPw?{&c=`7E+@Er1~&>-HTr z9-CQT@B-$;J(vipAS^3Bl0`+R7wt(9f!Gif2l7^2JeRrcIrkYw`QAZqHo70$EO?*M zpW*xg(L13A5q{~oT^r0}IoF8+~oOa3N!7QPSOJACW}pLO!@9X^w_ zz!={BkR?J{i&ygAw!!3>cao_SpIJ3QnH)jMU){ zAI{UF*G!f}?KGV3Q3sXIxfk@i138lH`==%JXttV&I|<|V{KJFb8_^WLz2X0h_<>~NH)PcL$hIO0P-Y(~Pl z(PzQ)gI135`6d7SpdHX0?7H_o&5mad!DlBrNX!NO);LCM`jPX4dJhk5U z&p$ut@Ec@{&OcCwk_|*F59zgE)eA)rgjh^X`xd@347l$a>{D~gv4ZuZ#(dcGgMO$2 zQa4<$BB9#eDWqRif94!gBq@8(?`6&*HE{)&;bZM1W=ecO&-bD57$@&dmGa9;*bb_O z6XDuh`F;U-&6+KF=NIiUN&AW;pI@}I#(2sb>yaTW}iTD$iLMfE-95bND1;Z?{rnkrKX}>HiZa} z3Lw5EHDtqBIeG`G_R`arw~v7H#|L~W@y-TUk3o0QmN9!e%kf*L;ZtC)j#?hpC@VfX zPg=F&+i|*1)6OUd9F_iSE@Te0IN-v!zn?1K7;+@KV80vR$I+|G9=nym!Se_m%zhb1 zGIwjsy@-&w1^1yC`Zs#a;rA2JTqvQMQ~9R)ZXDN69#$W9no&pPwVyUHp2NufNqC>8 zj~Yh8`s21=)azkiT*H8B(jFLel*)4+rwPz4KWO`TW8HX7uZ7BmK5g2?EUD{#Y`gh> zoy%?~1CQ_$0nIol_UWsa9GpC82uU@eE969+Y)qzDWwYZ9BCbv$$b;Pk$3g9&p$zA9 zy&bv}_VH2(TnT>}+Bfk)_`m9$^i3Fv6E7e3`}!^XevkT{;RHi7q&-KzC_Cv@yacSi zo%9f2&>HH+@PvP~HH5Q>)TwRwji)KU47X;}n8>oZaG0U zV8Cp1 zhrb)}OIVpkp96o)3+KUKfAqxReB$;4TH7$56zBG`4<|3vBE86z*qs&A4sr`%CD~f)e!3#h75m|N@zk?cD4ka2T0wUCaH6g4E z$v(KidAhn`p#!!H{8`GnTD2AGV_WU389OrTlC;A4uwM7eQV;$%?b>-UEYIs>^&5As zY#)^H%%f_HNtri}yor~oV=iE|cKgF?I5w=Ry}z30kgfCnB!`HVrcj28Q$%6hLgCYa z3rF^)t$^clbfDn4i`9HMzJMQ;p5_o4KP|ZtGDOGWxX;)I01NIj&c)>5I;=&frbTa3 zaa)O)cnu{Jz}a?pG(~YIniu`eetH22nm3~0(mA3>T5|_BMe!OaEB!7ZQKmhFKo<}~ zO7;~jNiX-)hhQhA@OuFzOZ#5>CI54LM*cZ+iSh1*1?-;CRNwB&;IpxNDxcGKPhxDo z-SfeVh3uXTOiLKNV4ScwazY5!zj4+P$n;yYZs!?leNXPndT1b=&pN!CL}elD(E3RhhRJW~z`r zQu!m1rB7j`;1cWGQ?|4mP8p!qv_!_VJ|JS$iK}Whws9@T{%9oA^+^-ztajJ#7*>y} znyPs&Yh|UDf4Ym$uQT<8SiR$%cb{H09^i5tjT4h1wSw}eJtcaaQ9RMxMt?bWn39J# zq60@9M^=~(bSCJLZ=8v^jssw|*4RE#wruwuK>`PFDQ!BB3CXV9G<;*m0lg#pg`WhN zG9>D^5^vX>O*@GJFb*c@KN~!n^;~t%%C_F(O`PsTXaM4p&jd4Iw34q6x}Fz);rJJR zy|VS)OCrmjM=_ivpKO0G+5To#`&#Tm0a6miqW>x^heb`Y-)^9sBZU-!xHxr6n&A*A zbaPBbXqrO9fRQC~a!l)*embm!n`C+5MG!KA1+Yn)(oopLj-%HiF9DE18$;30QjF6? zVHko&u|6bx(lo4tm|+sH{eQ-|MBj>Dfz7D*9Zv;9?peh4obh>k;jPG1{2=jz7IIiY zIdaLH#pTF;hA-PscjQPRf4PnDsq;@#LI`RbK@^6YnxE4SVqSK~#*XA5yNLSB|@NA|HkM&2X%4CZ0E z28ZW;*PhK-ff{!dsDt z{q(ZFrAyEUd9d|?oWvF%D5GnPHV36m|271*F6+`qeW0DlvKd@ub?lpunMUr4Lw*>4 z%kYU~*NA-F2cT!Vk0Rn>4nr<73sK^rINwCsoHv54$ua@|ka+2O*2RmWue3A;pSj5X zV0YeYSs(Njp268DPG50dt_J1QJYUy0o--;tBioK9@ayP8A?S4P!+I(&zeDT;x4+Dg z^p|Uqb`W`nXQa0XAA<&Ed@kMev3!7T`UTP@B6-nSjp=MBbf)O0RgsO*XEW<>iEg4{ z!mm!hkV8ln-55PcJjVm=M3(J~A3sLAp$(yRlE{{;4guY`{r5iOjw7<{+klDl)~_LV z{UEnqbD&=1*Zz$#Kk^xohrh>hci>D}+eDb>X~2zd-nu<09a}gxBg8i)PIv|emhCwP zQ<5qj1pHtKn|54GZ*`HcfsYKTA>My0$u)J%Ju-T^)!4gEand(YP;rutUvhqH2&bhJ zT=^)};MjbI)XR@0sdMXyEJV8SaBO_oUMSdJ74U9j7C7g~*FzcVAu64$1TIw&L)`@L zu@j##VrbQ?|Fj_amOlzw!(PK4DleXM{_l*pejzX3Dk}7hL&vE#l2Oo$)Ti{aahb?61VV&{ zN)k#MjFgvR>occ!`TC~Mq5oVhD>B*LuG+H+8&^D@mGB6C;IB__k>x+)cgi`HOF^lc z>nYfrZ}$vq5A;8TI$HnVF`f*x4lJPYIIO(%hlH1daPHE(p(`ho-h{SYx;IgX67O%Y z`w3TKCh>!7b@CL9iNm<^m*d6#uiM7SQaol2b_K=3-ZTY`_F#KHOBKbJiKVk8izx32 zl@QdkR>TgCH1p7JPyCgFK;DR;*?Q%+p~W#WdSI-m$j(2+nZlV9kvcvN1avz4=M}Xl|fWbc>hH^Olgg-CdUm@V~;#vLty$GLATV?rj z&*hdcue?V!$M3sLrfLra+ala5uApK+T9gF=v% zGad)lWdY)BvvDNtRn#JB!j~S62+XS<#x3NEYHq_qks)#?RQx1b0?2%&82QXXUyOKP zM}SE6tSTKt78*eRw)h7ZJH-YLegfi{N+7kTF7oad##;ZUC!A$M*YK(P4`8$kb@j@!G!RA2aXd zpAy0YyCZ>OjKB4sx@};6YUnZbdp(lW(0d- zH8ZzjunzXT7h=|*apmaHLvBBjW!12A+`c|(`$`w>Yr|1)N0*=@rB48XJj8oLUO$Uy zn^8>TSnE{jf8Q%Ih|WV^e!$?PfKQzltM|8p3~U&BUBzI04pAVv0x|4)1#afUMXx|4 zwK|Q^C}Ylpv}&Dry-N=bY#;Pc$7W>Ro^d2`s;yn;mQU#NowhuClT7P^<)bW5Lvme3 z$pGqr2Tb6>kV_L-mckCEn|g?^0dgs9*Bt7A+{v-Ik?i{}lsEP!O^PLcMf%=Urj0X8!VJP)byhjO<3$awByd5!0IbwNDu_+9}# z*OAYF=Q`9G4W8pD@8UVe`m~WoiRTdE9EqMoCx0Y7cdPM);%sIVcy7?;>umXv@hoyl zu&+ih1U5yDRJA4Z;j{*=m+it5)46Dy*U=l4VvBRwFD4 zwrDKBURIK2Rl>?9>~;;?mfE(;R<*X*-`1rT#S)T5tLxf9F|^frMRm|JuK9nz&pGFP z&->10Ckg-m=l_1l&b)KZbDs0u&vR~VqnLq_%Y!l3&$+8yvL|77K8#Qa^*X3YT7Rgo zwP*)+)5M^dG9zdXBqOV?#_#xTl=45!mT+hX!I<&qByQx#LpT}slWPE6+aFnZ1VCA^ z&##l%wjUBp52B|6=3w0p_#zW<_zH^{IpON1ZICY}f8V+hk31Vzm zurbF2R|Xlzju8Kt;Ez0oTE_sJsOFp2O~FwE$?kU%;mpAZ-J{g`vYRbE3P0-gL|;&+ zj+V!=EG6&?xrgG(*?H;;&%hFYa0 ziAQ}9cDeTbQt*Qh`y1Eg``z*}l#j86qUA#@5B30?SQ>R){fX=FA?AGbzk0l}LRwMn z46PBo^5HLQ{pps(g!lv_N4B5pLU~(%+F2i~Y?Pe>DUtw0zhKF;U7t;RGPsl}&U_cE z(595g)7x?&^(p>s5p)dZQErRoyodCYWW|g;zow@D_%;q6q(59<=gTv+eha_p^Bukb zBy8WGiOmB-sl!f@`b((|?PgkI7~ zx5smgeeHFjJ*@u(V-atdR=#ocWNHESZ`$n)T>!j6<{^dRowwp^_Y1(#`N&-lY?oK` z_V5~A=f|ss@Ji94_IRPgd^Q5~f^@hXEfT|W?KKD5>w2&Z9eUAT0UZ`K6r;mnyQ0Ie zLh=KARp&=Y zp!^5F1cx^JqCFYfEZ)#-uH7_x zSq?{Z?7e`y9}bEnJV} zAC(5<5##46heHbQA(6XxDM>brwe>^k6G0r`+T|q}lUx{w)vOa^k2@je4r6380uqj5 zMIpum%QLdpwDZ9spWiU;lAZ}AS8+H0KYqy~B*8aZ(k!CfMgtwKZ6ae}pk>uioCb~n zjeoH1bK`xQKWpp59Vbzp>tnLWa19LdU-=`)tvD0VXGpnE0*{~V-BMxz#=f_`1r_hPTC zx5z5y3_k8IvSPZ79PC5)opf}HJO63)D7emQJDfX3dt~HQ#*^f0s=l*h`rYE)ccyctbFrX*1?$+{fGrT8B)-Qm|=}9B-^XW;NRiGzmr<|T-*_0l4 zr3DXLPwx7Irzcy#<>^TrCClqcQo)r~5iL@>GChe}^@dT;rzd*@9nq5?!h1_>B>D4? zLmx=x=qcYrrpRb?wt7eB zFYNve-UfUSo7bL7n$Yw|Wq8edUvV=xTdce$|_p-|;Q67F)?z{H# zoiVgg>)blZ0gJc)zZ5-Rd#sS2d5TIYdPYy%WP0`yKI5Xb_2C4;b-VPu8{;err!PO; ze5;~oyOgb*p0%o8XuzvimY(@rO4IX9$Yv$58*mh-hcW}t#TkQ0J-JNhJexyo#@fBrvtG+_OVS{W?!HE3Nte(5 zi%9`$3hmzCXU6u{-|2Kno=8(pjdy8%$;;V+p&_2ftzZR|U9k^gqV9rrE03ih6##!5>MNS2MPpeq8a|u#4x$ z$7|6wW6SmB4=K4e@kb@&{l}is1^eQoTr8_4-lIrx#E1N7Ci-=f~8GPi(v&g@Bpye)JrxXPY$M zAHKg}yx)cHJK50KiKOeP0Xc$??C@@^JriN>6$Pa5+6`h6wreWQ0|qCupafp5)n-9`BC`9=4u5@@r2| zc1CPr^dyFo<;VL?3a*TYnxu4Pac9h`H;8&ZJvkKUh@SlN*)jEG1M^>u#X?_auQqMG zKYH)j{$tMSLjO_4`Eh+-hW|Ve?1AY8V){Igth46pX8wb*86U=XTwjA6UexRw+&_5< zmU{#)uUE_Gxxtw$U{E}#j9}O~4yvZJ^YmuUv=6sb_iqxuXoHu3(A+G z=actTM$ak3g?=ITOQC1!d_?%%Vl>_4d_+6j9V;Kv#I`H*3$X!@Z-a{ieqre^@FU}d zUp}S$!hirS=NHnb;`0j`R!LRY;e9#3khw|lkoYMhc-Ven9k4X<(u9eG2 zj1oD&?cJDs#DKD=q0mzH)r2sm^AYVVuk#TJ)KUD<`G^T*7V{CCJz?{sSU#fNYj2bC z5lus5)Az}{3hhR(qHk%tk!UNR@5d2OR_#u!c9~H&p3Kq?YkQwPFK9RD^r#<; zA5(TCBY?}<4f5A#H>v=Xb_4Ir*^L2(huDp(^NEMgZs1pAHy%xUcB7TRy`4@)@|a<( ze*;pwGP^N)gGZMT@bTLX0wrBe#>~RUKY!GS_BPdSblf(!Tz`P$n3%_}dl8GO@ob)8 z)TSQJp&Grj_9G0-x`Hk6i@S0k%M>3+VFXp9RqbG0_ajh9OeM8t%s~+iJqaFI#dRX1 zlmRo}Z`zajaEh9>rto1TNf@U!1Eh$ue@&Nf|NIsm3TMKpB^=q#Hn&R7DZSJeML;r*P+=EqU9Fm!(f}QW3*M@bL@6GLg zc*b34qOo;5H1Hda;5fb}Ij8&ax!ups=~-CA!|)s3GvwbDVlAy{oQqJZ^Zg4VofqQ` z)_0yBS+P4l%}t$p-5i{h&@?AieflL4^mb`YbFyb?O;bb90dK8;g_G(-BQSS7kZUB_ zGpnYNi+x6uxbvu)hb^S#501 z!t;T_xwz2_y?3rAXtiOjk-S`6KiuCz12K05mH|tPPSF$2r{Fjlo)I%2LRF97F>BC` z?JC_^q1yT2u=BH5w=`o+4JVxZ7U9�jm!65;*f937Cy2A9mVM9-`~{E{}tu`;kBsEDg0-ip$x#BwL_veh;?z&vn1<6nDMPZzlW&7K_ISv4`Pi14T90{ zWz=uksBiQ;gIV{I+;ZVGV?9NAIK6DC6xWUZft-z9BqtnG=Yx%8usVMON+^%m&mV!Z zsp^CIhf33))&%aNYL9L462!F_MYul-mX#0NNwWdNdxQ#mV5ucU)9gbyzp(*aO*b-w zh82F)9qXh!z!yuIZ&*8_hQ~R~xPvD`!M0-y(P2M7m`h6A!dw#jrbx+ix4IT5j&e>9 zEdgX4d&n<9;W==2i3SYF;G+}H%h&~{_8Dzy;oDDqd+M7YvyA{QJ_Y_H%z4Z?TosP9 z59wPNLtv$N9l$4&z`7Bg#LhptRQl0m_hWOq-<$&<-st48Dn_qA1sv7|49tnDvz(N4 zUkC(1H;qP!nKV8ouXipuYR@HSTP`8F)crh`{;FDv?)(foyLr88jP)jy*7@Y~v%z4` zj7dt*JF(C?!P!zKn!NSm#HUW=r9RK|$Ib#i`J9J?*br;J+J}da|4VnKt|wMd*AM&V z)f9~vFb_QiyM3K|mQSEWZo>+YNH|Y5-IXxlM4kqvQrc{Vg*B3*sQ7*Uf^T{?(JZX- zg{<)j$6OF{C#CtuxVGbmsHM+=KG_z`BSbK3(Mz?39Hh$)NuRkDWkSuIZUj&FsVld5 zN@7|aO{>D(yfcamNv$0o!0#BeR4zvH?*Fp!t5W!>xceRaBC^m40(Mt){#g14=pRD! zQC5+oc4tTA>dl@dyI|Sx9ynJ4$EPef2rdEMczy<+Hw#aigLf5g42nw3Zrk_C8bRuJ zyMiAItu*ju4nqle=}br<38Pr1#tN-ql~6-N*H<+S!q zS59SJZK`?=AeWa@%}zOgZ$RN8=XD?FyMpHJpV0WKb3Ellj{)9kMX_32pG{mUq`d1a z5Dj$1ACU7eiiBC`mS2FR=5$a0dFpK2wrigjo7Q{f(XeT1nu15m1#Q}jzi)|s);8W9 z3h!d~e^_`2&mX;WkuW*u95>lo-*3ZhDGB$LevckOxZgH#-<@Q^E#eOZ-#x?z{EXB* z1v}=af7l`9Tl9U1gz^eGCv$?jwTC$?lMLL*tZRy z<@gzvjt2@nql|6Vi9IpV1m~0=nrxTOv=4nm3N}C5ML;h&iOtO_Y~`og`MalQr=o1W z5oKYk+k#Y2HA2f;rH`#7N`G2#{7K3ql ztbB*szmvji?9wq#r;Vh_vqLzEyP@Yuv-dJbUu^k78&CQzo7}sigX-Sl4ozaEmx8f< z)(5HT-2W0}Csln$4~{T+^ilbIF#ysU2JBsu-P8N9YKf<{7d<=BO~T6QIaOB)owCkp zkEzX9fMXugHN)S*w-Hn!-?}FI`8Leo1AGgAyK=rYqrT0zMukslzWw`qg0OP$e!dyJ z$+slo=>0RFp)mCWDIU0*n*PEuqP%(M&{mk2RP`w+D*nXOXTQU&k7}b*ZR~yRX`&_0 z$~}+#V4KfVMU9$;im*>OULu900VPzj1G1k=Sp4FP2*BmAfm1h=3kg_2_0!ul4K;_0_%d3!k(7J)lBr`V;CbxvcXHU8=FL20r`G$HsqW!N2MV#*7Qi z;q(h@-tZe)>A_s|K=L#SiaMXQ&ce6Fhwsxr^6>p~5Z}hjAxg+ADc_i-VtMQ54Sa(y zj2_}ZIX*y%2d$9wt_b}IQPab}V`q5oRqthjk2>e&TD%}7 zES=3Xr$nis7;z6^YoIZv4r{r#MtLMtDUc;C8l6b!;OXDK<-k&K0=2^)X%Lff0jioqiI$FA5Q{0Yz4g{{&4!@a6~D1)fk+WK${A$m#w(sE(L`JsZt zzyMJHXRko8*1>j-z2uL)0E-ih)KI+Q!u8#1~pU`)t>k+DGv3MoQa;|>1H9|(*(}wn= ztS;c@3zh%(BXjb~iuuARSw8w=;Udgvw^4INWWL1xX zQL3*icG34f_2I)9-hfy5Hp*{lb12;~ zUuF18^$c}z@iZhs5k%*C2MYTJ*mY9^%K(K*k7wTpO6MVCqU08!=IdkAO zEB9S=8r*(ilS0mR^xgT~Uof^3zi;?Y`#IDB{;N1NvI6V*gZhm%S{}+#E8!p>YmwqJk-J#1qdg`lC4Y6S=gQww@q_)U$w}1BQuWxd&kvq>l=#8y z#ehdYc9JK_pRMrzZ)305Qg@*MdOHU^Y<%~7l8wMb*bW$Z9B~0_!vB4)7<=MT#{p}hL>%L zw~WtK3IRG7!c{NHcaVoJoig3+Nh1>-gm36eJ>cW^tB+s&@m;p=n#%j-$@5IgM60S= zAkWe${xSX3{Kecg;wi?5s(1LdcbEH(oDQ6mK>Vvzd@A{!0zaP%;I8M9?Do@)AAxIC zpYrnqIkjTqTTB5_JP+b(&=HA`npU(W)SL{6SN?6Hg+!)5vDF>nDhB|NxZby+pj3X@{uFbfHP z<0%g%g@g*sD3@q|?0Asv3%;@(2LYaPO%!H}{G^%F^`|X;{wQ|7*dLW|C>EEE{Foi^ z#%?9zvh;akhw`E8SiJJMte^EeJ6GhrwA~*Dkt)#ROsmL!J}<>9xBCOE=gOC|`|%s4$%64q zkRHDA_*z_>3dS`N9vOP?Ew0@+c9-!dAH@Btzk~b|(2pT$yyEzi@QgjC{oMass(mXj z9r_tnrHEZ;T|P#hY&e@KINAxv|P)%qt z7|LOSCx_4i z_l)y56tzG$c_6KLWb#%hg@5LD}wL31F3J9O%ZeipT+`w^u5c1&-C3?JuD*9lgg2m51=y0 zH`06)xYlzL4*2JxOk7F7JcHFZSR*?(*U&S=Og4{L^i|DDyJ>dxk_W255;HtH)$omU zR=fj0d*))n4d;5^pSENn{*5g@0c+dPr`ee~sqMcrPu4*{%yrN%xk6c&4Utv5P>PsH z*4B(IIy)gb20@(nHBkCk z;j=5R-79Ni{EjlU_?!J6>ZPug@(tbB*3{|W68JkJS=DQ68uhy-^DcF{)Ma}u`nOj6 zRo-PzO$Xgimx{sX)bxpaN+VauWsq3Syp)URk+kLe5mjm-)+ORwrb;x7_8;HeTMjdH zMsrhhFbctPiGEJ(k1&_|9y`T`AxyRWOav)d{LBte$smih>%UrM=oH1=ol7Usf^_0< zQT&zuqN?b1fKIA!D}D4)xUcllXH?+dDs-9KeXF2HbO@hxCe0f_Kcd%=x=K)nM6eeP z-47+ZpN0}tmtp$S^0!T>qv1@^vS1@rU$8)&%ihhslau)mdyZ2lOr?dnHjtk6jKIFPhkHQ{wz69^`F4lZskN3o__P51xGySvo4J3nj z-Odi`q|fecM^V&9hJQ_f>iVQKB`|{$F@CTXk<&6ic9FUtZ=|7Hh3B$f9I=~p4c?#K z8zOqDdn#_}1m1kuuOY_I7QOowIx^7``d?Pm`wA(15=?mUl+CwR!qF2n(Lw6XGYor9 zf|*Di_T(1)GyTIRS+6o>ttrn((-`fftE zA%lZ#XAJ$=0*Lb=9f!Xe7{{){OD4QXr~VElfQW(@)(jd+9Kwf2zEKfF@9)^+DM`K= z#fJnxfUs(=HiHi!>_Qysjpfh$ki&;se#qlPT&-%=Q3U)gIp5@LhO0sCQREFsel6<# z&B@BL7=1MIkX*kSqQ0niNdIouZwG&0t$%0V`I~`b>OWHCca}qhw;3AfeX_{!gk|c# zP~>;JKFjjqI=9wuKwkB{&7r<^W7oAYrc~>S<%TYMU2)gVAU4dVQ~MOf9O0=ojuPPb zhkT6^K9qhC6%fKai?7bLP}E}cQY@E7IY!*J9kt={GvaCgx-UJS#@}cIw!{DVuS>r; zE?r!3et+^7nU8{iV_e!T=dfm+-+#`W+cJZI@DTq&!U0~bQiZ3?o)UI?P!#j3cDXK; zgOPLdX`iFq>OCO1C<_oq00Bm)5d|5kzU%Ds+9V@f%#=B&+^+LaHr#js?!GQuS~pq* z!mhnlVE-NC0f8-8{%M^b{y%=N;Zqj)uzxM*!1!Ujh1{B$t(K8VB9AO%?CF;HJiwub zjt7pjJ9;pPI9YLIbySdR*%6nJW05!z%MAlDjghw7^tL(Y+*(($*moMlMZI>v>(CyW zap#_9h%xWMxG)iBE2ANhQ!FMoiz+wduAXGxe$-e?E}^tCL^4_O>}}Lz4!=zw@loy* z82%rxpF6P!?YGSe-9;Q>9u@BYx)&m!s{TDnD!gracHk}WcIPo`h-|Kr{L%9pdD4b7 z5yYJJn7uSZJG9~)4%94pCSKIjC=zIf{zv%q^zCy!J>88MyLy_MJ{#FVXx-)bBV^w; zN$t_vD(A}(cZ0vN^SYhLitpn`VQ=Sa5d78ChO?W4USbr`PS@|zDYXyBzuw8_BOv(n z;y}em4u}a8H{HDeu#W=;f))9R{W}?&q2mYc@3ojGdQyF>WTNuIKjLn9XyQFvJa-q6 zbwHJ8r*WM4E(o&4IizOwUijneyoXN|@%jL~CTD4v37`M-senEXiW&M0-2SoA=LQY7 zBKmxI^9IwW38>oi`SRI9pDppn`3QGUY5^trL7#xYNyA>&r@-kzhXtgnlDlRc9I-;WAgFM5;R zZzj7xx|h9lqM!r5o3Af{a)39*D!!<<`+WcRWa_AGtOC75hx+jw>Ii)2{YF-W0(uAd zImG;&Rep#D)Be7L|NEHmI{f8_s9-ic4ovLtL3{%8Fm2d5dk#2c+wCa>j@!|zheFX5GeBd&yibR)Hs>%_{jYw z_**=FI`wOwT`q{9M(%=bVEmMQ1f`5c4%mJAXFl}sIaWwj|MV=zPl)x4#ZR`~Q~R|N zhbvditeAVOoV5q_@!yv6g9$Wb{LO{*Djk0i1Zwf#c*0UVD#(wus1Py6ZQcw{Y?XI(H+=&~BT) zvtFyJ7ivU3M5i&v3FdM6*8Ps!c~p-B zxgi|~k|t&xX5gZa?tG-09}GK?Sq5~Q@2=NTKQsFT?Kv0LI81aX?TP^$D1QG}6~&d^ zD2b2eHy0b`GWUWJ%uPvNN&+jBx3T%gKFQwp)b#XRx%55iOj$aKjs93S+FO!dc6*J( zO1^Y-OPwC0y%y8nwM(SE>0`EM__GyCI!~`K{3*uwAtn;^KJmjv{xyDM$bW~_tG+KLhkX;gWLnA3+fx{af#^$o}+7z3OiMVV+OZ|0npqVf4?Sy$zH98;&;e zf3DE~tGdm~=-;?{L+QW2Y46%rY45|+RUb>YXXyVFN;*$pT#o+3DB`1kPUAO*{C7#c z>Pz^?qW=%@-K9Tm1|RyfxbRE)GylD7KR?6sXTkl`Gruk1bIt|3So^01sD@ir67Df& z;NGv$&N(N2#)50&F=O+YhsaAm72Yx0%c=*-zZ|9`%syr{N{>{@#%z1vF8$pQ>cg(b z&7|#In)5U#v&{Hh00{8uKlu(wv9>-u%-!~&xO3f6 zqao+KpPBs{27hb4gv_f*RA|-`$$Sde5OpFwa`X;rSGn>VCay8|-yMfyUfJ2B z&&?MUqu0n+M4qHQp;vNEaeBR|nhesb3-vdRUY`R5(CggZ0KL9(q@P|#-njAf+6k8; zLdz zVC0qj$(|x~bK}&nQL>V&o?Ch#)`E;{s{&0kBuCf7bgMF-<-CTw{LK5-N4)n>@;$^f zTPHHFCQdj_A`>UbTY5|GV$T15&y~6u@Nllju^W2)YRg?x;TO<@RtQHCJ&1z_d>zn( zcD}atpbAJcgX-6V)HN0A(u$aE5A1K<-KKQI6 z{mk&S-Otb;i}mwo5DGoakbZ78RzK?irbs{k1$I}|&tm%Cx*(wM{cNO&zF&q`is*YB z^*2r5A3a(0{nHFdY<=G$;n(-qf4uSfe*e}L>-+V+uKX9HR|42V-#tG(`lsUbIx$j| zULn-qGC{b_u(s9yH*wb4tlJ0_o2UatBPUgiieQn6F+ClbNt(KMyY)6&yV-UzrlR& z`v*uq_pb^z#%X)m`CJ=*xFq}|%fSDUg8!O<|LW&U!5_c^ZevgU`RG^XmB#-N1^)vB z|Jy$J^jjwOXJ1Sn6l8zy3uENZqu`6dNAlJKPf}lzz%8G*P7@WdJHz5VOZ<83Ltc?A z>XRr#o*UfA?|xM;6n;v?r2BY?G4j@X?(m7^t$&GN9#pvY?;?!Byfx{@$IuIY+O;=< zyz%coUs2w8f8FCkxvgTqbsXW(+q{09$M;~~=8?IAc+U9>W=h-%h%)?MH*E}l=Rk0S zhw!`a>5BM0#CqWOD2oUAJ^Sy%?^{tO$nOqSFO)|;DEa2|6u%GN?i1nno$%`5_pe_T zvTXvtFWIXies8OLT*&V{I%??b=l4g)mge^pvjy?W`ThQWWAJ;_!bAAom9B{2eXIw5 z53_iX-wR$AeqV($L4G%@dZ8@pf#2Q7DSkI>`-$-T;qM5)|B%^Kejm4YMf`pfK8igq z6dTo#g3@*(lMf4w+zXoJs! ziF)s_GJKsi zzvr@s2i^P~aS3(`sLaKy@J8yq5pSXFpBX}`*LHtGsy{Mb3!Vdd`PGOpxcog;Jq}yJ zP&?=P7MC**=e-F(`t&cT@uy;qL@+A}(BnNZ@P`cRtj>VZOH?@~+-Cxff;3wj8Sh=cziP?EohBD%x8R~4-}{(H~sv0fK7M*}qd ztbE*bG7uy4l|2}P9+4GSlfs}$^abcuW#?0~Kdyd_Tly9B%^gc}3FjpCFWvP#<9;ZU z$xkb8v)gWfFMWr|l8Rc)WWM8440u4*V;dD!b&0a`_BxJ{b6(SheJME)?eVwX=8;;5 zKx7sArPm=m+atLC>R3OnppoGn>1Fi8*kh5yju$sd4rQ*MvIxRCU*HZ-ML|$(uEwJD z{Gq0kv>(cBWc$`y`H^TKmW!ZqT`lw2}me|>SD8SLreMf07&(_`+wR1 zL6lOZF|?5j8{FZSN}lKb2sp3TPm%7VCm-}n<|p>^N-z2|1PKbqE&zE z+@zbDh5IPf0_2SIO*HNIdbuL)i$7n8_G?XWF^dc{ldwTtGQBS=gP7wgbIgG7=yTjS zg89s)d&{bWob&xgcbR=Hh(>kL^B_gq-#~i)aKZmGdhUXzKYn^<{#J^f)q81r9(imj zdRD>O@R?{72;??nZ_2A>uSw^~iepg_mxav0-tUIa{J6-fA(Wca{cy7TU8G(i1t!Fd zT!zVeF-zDY$$aTn-S!M%QHbpMB^Kqd0^W?qt0|xB2fRt-14x z7mlfw46ZtrMz>db>aXfY_u@T)?yqra7|h{57;M0LW5aw~2Fuj2VII>OYDPRwGpVH} zK@_RBuP{i#CL5?Mw&&6VWt@{%x@kdEZs;E@XKuxi3HFRL4dr?Z=>xlGZaD*eoc-ZX zLB~&{#S-$M&WpTEp_Fd?C!2a7oj?cLd>ydut%*}zzQ8tju&OKvz#TQ%Eaxk)<S|8kuRA7g*NLNZ3P(y(6S@{BAQGenh* zDRNr1Z=a&EKNdd7RHvsQ1LR^8a~_2=CEFJDa5Er&FOvzfz8$&EjU}j#7Mr_#52M2s&E8_Cp+A) zZ~7H1*U7;|ND*mOfHAkG ze`efvMUmfG*6dR>wyPp3zCixI*QUYOLu&*5Py1tXcIV2~;mE}{B^H(vRZ{D86Pd>00GJmp|z-nKk zy%_WU9oDn;`*X^;sdJY!5hynj`7D(CzpM-jEryf2NDW?l4gG`s_TQUB8u{a`1yw@v z9J;SWld-w%N6b0HGl8F4Q_aRG9Ak}>A}hX&l58gauMLXBZP_@&ro(855OZ#rQDBDQ zfRd5S{#Ybv)XJ5SVjB+6M$!wC`q?9F{W5j~*vezuBD8iPOKj(l5@XQ@=%++=v=;7u+)P52I=&V?VZbJBm*sy!E3|5)F5AP4Hz!5Sd7kn|K2b=^7pT~d zb37JVai=0eE|W8KWRxg-A8fyG{E)HlUcVzNR{#X$wbA&`lMOLxT85ek7`F>je-W*l zli4LShW=*gDu*QTW!ZiX`0yS_!|Ui?+g@#s8quQjoeM;-PydpV9*{1*gKMM>zLtHK z@#m+(aMuLF;Hz^~*emgUCG(NmzUzIt5Ss9t%D!oxGWjw9lBbYPOV0s~+`J!coWzst zbh`HqnqOnu+)=}>%Xy@SEQD5r-#66}e_?0$FS({Uj`o~Y?Lv!F4|8ep$L)m{bQtCK z`53>&+iCI{f1hmr>u!1DBpjWxg`Bp1sMio!u)FWu(}ya2{P!#p7TT4#lb2z+{J`gI z^IH@b?`&4>zYE%T^>``6yR9J~VdpObxcaf+33Ic&xphk(r2X1p`&nsU?vMI3um{|% z^G;Z$0-%rPG5oc8I!$;P0|1rhVkqO=7mpxOiF4p;Az|U0=V9&7*z)%)_7S}5`p<^S z-^IYS+34tr#C4z_xKi$h_)Xo|kkZHQj!I|LsZzeU3Ezl( zD4+SFE0hO)$`Z;BlyT=<_?eI8hb5jmlznagudlCVgS6O)&P9 zr77nvz_PGg#h9j{9>%_uWk_0t9=K?a6V-ge2QxPdH+o zK^S;<>D-7ovTp?wH+te;w%UKSKFV+ir?S``R<0rut8bX z0DXfDfUWZwb#>1Uo&izm%pbb!3;6fK<%=K#51{XNkBuM+(f3P0}q{YSoUYkc2EeBWmIz9oI%F7sZ>RdcwR+!*=QW}Sp=;_M5jo#1-SRH=yDj6Tpz0Zfq@5$L5b2qW3KTlnUy~!D z+>IOvIFPqqRKJU=;XHbwSwCr)>qj}*J~!=MOVgGcfTGj(LG-!tL+$d&0u)mzZ#aKL z)7Id}*$qd11lp%8*fzC=a0m2WT!5TaGsrhX{SYU98{xOn{`gT44Rt6mc9Q7eCqo0G zq9EWT`So9lmBss*F|v<=D78=_jaM_;cY0a{FUmLn{}ldDPZ#=1yu(4aJCNX}PEXL0 z`^TOq;*?j%eoU>wFTO@A6q>k#Hr3GE*l#rJuER>u zg286B-_5Bbb<#+-<2{|mQpb%f!@Or|db~r{4<1a$LLVN70om)HE+1lOhYEyWl{6Ih z>t*7+j}nt~oL9si$ozosydsGYk^gJIMa{iDHVqdyF@?J3Q+jTow-lTT?j0R`pJIW4 zKynw-2*m-zMSUt#e%lF#)$aJ)=5y`~o51HecMG5E@yEyKGmw%j!e{15;R}5JbLaqR zU+A_ML@N{jP<-b^80W2IgA=w=&qeZ?Ick+BbzXa39gsp;e5l8*gv0an*49Ux2?94r zA_ZYq4!oN|9@@}Z{0+-{@n5SgYxAf_%45<^PQ1$!xt0$|aA-V54vmFFAK^txiQa9? zMfC0wnpRI7MH37ue~nvpH92BH)tUNru}If#?v6B+Kf`bG5I;VU({HIVjEaiq9ox|s zaCg@qC#Z|V?GOvbk17Dmi;!^E6u;%N>;Yt?NC5VhXBW5_9_^n5@UEV49By=!_)$;u z`wRb=pI_393UzLUgj<&V8AUmBo^z8LgSR27SRPY)o$Ov#lSI}n+joZ|cJhp2__PUa z2hm(5dzRHCaMBRvqiH>v%iKSN!rE%}m*+rK#cnZgl7FgohLA$GW6H9h*=cS+BP+Si!|p2%6|PnNodZ+e z=yv+2L%vQg-3wjc5*K+wyaqz`05Pj3iFq&)rhns>K9yXHJI~6i%5|{KWK9{=rljNW&-RM^^a0r)FQfPz*`a!`X>rC_B$otMoq9fojvXi<%@^m*Us#;d_<~^kGoYazW(w%L0b;n8cy1-W&cD{HP$LFShMvhIq zqsJ4AW9(nu1T=+vTevG$?40VO^Y5p{d4ycF6F$60@Lux3?%1WuIbf_bJrUyz|a&pkJ!G8NVw5Nw|2CPcc<5)QEZr{ACvt4z7dPG zMCM&PvGj28*9~hwOW&C91+ru*!}s^l>Ro%I7G`XmHx{}soTESIq_2VtBD+!Nc^N^@ zqN$%7gNcXUArBAw!!ELRt+N-Zz|O+T%QH!ze~-5zbH*q?d;Ac)xOi_6WOR6v$ia-c zA_r;6dL}SwKkCfp5rV1eIlvaOQml+j>`&4SxOMZ6SwV~eXc+80ve&@Wc)AA zG7jUw;*nK1@;7B;I#|y1%fJVHO+Ghr8GRvXJk&V(NYL1v`a1Awd_y!M)0-+>x&K7D z+O(EKmkf9oS3?@cE^I{@r9Mok;a^cmWH=v!t&FYPX;E(h{$lIq#@UZ9>BkGmjevd5 z=hH4*8v)5#fio^pzX+X%RR3k#zO7c1K;PRiNh`AHH(c0$$wOuyw3HL#p`5A-M`9>v z{6VmuijOvntbClkLe*ySzNf7gf)uACa=wK-MA2O)9BY$d{wS*$;*>ISQ28^Xw;n#Q z^{(8Po)=Pi#bW0^ox?;JO#TqtEbwb&0w1?M$VqDUL2xg-B=`C>HnX?w0|ZAQp`ZDk z=u@4FJBs27uVd?_J#XdVXJrYgjzBG+6V!knjmG0&As>x>4bEqlp7+>x4}1QarrX4J z?4PBdgNOqce-7C$!a! zw9L$S=Wd%my7-`5qq?5B>v@=&Sh64Zc@VegNxaMp<89iAtkPqS8o%uu(_OEL~e4@0x-Zpk&G<;HS9rDcnI3ENGqi}!5TN%NG6aS5b&w z_uvhfh5sJ0f1B1LW>3QnrqTfyzDrH`+W*Vq)o*Dr1L!?r7TI?S_K{7pi0|}MK<@4J5Y2x5V) z-={F~9gky!y}vJsfm8y$i4Sc}KMySaB6$M*20{Ql9`$Fwe&CE8GAnylz^3&vw6ag<-Bw80JzK_zFzpWIWNI=G&=} zacF)c?DomK+IE}v%-DYZ<@HB#tc*f@Ep~f9h(M-4A_A%hhrE>Kg_)EWwI&ZCkuu;p zMC>N+Tn#vUDCZfhSwfF6O3IJBc%qziO98v@rOlG79zyt+s=kLMIc3mDnB?I4+gbuu4(j7c{4{!B_Fy z(2k@V4}S(6NvU-@=S~|&@^JldGIGz0qgu)ws}YP7W5@sCu9ROD`@D32dFA@u#q-hVXztU(pgrcKlIZlzT^hQF zF+k{fo#KO`4aOBc^CAtn-w%VFIo&J?6iB!rG!P`Z|zQOUfua^)(5WANkdZ)@syj#RJUil-haVCYbNZZA~$ud z%XSQhVncw+Q0QGzKwP`WIQ7T(yC#H56{ig*0wk<$cF&NI^LyRA?6m)*b$&4?)A=psKVXmTx zJL55ttIbdy`s2*Rksg*@vH2o$6Tj@IRy9`p;?8fdNvEt_n(-mg4e*Ea*o&v3qv>Iw0)BwxSYt~;REyLh6EkavGE_Ql4*Y(w-@q?!^z3lr zmmY;uqg5IIvw5Xn)T$i5iH_wJR!Y5|0V8Xj8_#wbAE$c#eYT2o4gZWkMC&1BW*4RB$o6mv_OhCn@1bdcLN?s@%4X%Y921bjD!f(Z|CT`;=o~c{5rnD*jaX4zc6tGs~Lt zch^J2b#oB=m?bK!}3)u z&$tn`aD;W#IwM#^XZ!z_vOA;$%2MWRds*N&U3-@xvd9{p6fMg z?5oi)##ePwk8fOb>1c*NkQrHnZ>o4`pE+{2x1OeVENI#pQhbnk`ttkx z*uh+$G=^{BGQS-9w%==8QM7VSQ^eivPrHIX<$BqVpuK8U?aBHL_A49Ros!6PTnI<> z+J?`3L2Se_lqGTQC&GBxuQ=;73QZ+(&({6PT^~-adb}+m!w{%q^mD`yQ*em8AAuam z@Wbgr1dDjgme;KC8~O`fLNeBNrLFAgP&4RFsT<)pS!l}-={N4cSpoQvIsBXILpFDS zIz3=WMTqzxZ34dtY`u^aG1RW_T5^fTTJb|CX z&NlV1`{WfLqh~6aXrFWZOQJw&238JrytKERUmf-@EIYZ z5=@3uiy2=tE;8~@yUPc7xP$c?rMAKSro4=fh`cHHAzDLq^3}k#?LrXlzCm-4>to-P zdQlE}nFAbX_oL1}M9E7AumzPzr~aBY2;bo{=w(5=8pGx1S(zfJUIAcG4Tv z&Mwl$@iG!uh!S zUdKuNZ@0aQv8?Dz>3TCFzn_%6@1No1=4)AT{TitU^M_e0~mK#8Wwre`(m90X~ec=MPq|Pg(E#v*djnb~7Gw;K74cfs33{6mb+M|0BxVj5> z6rX|W?SCbzYZz#7AkFX+_v!33Az*`Y-hM?-zr1^T2Oxl421b00eGTgGQMO^(PYg;k zaByP`h6gQs13?(tEUd&?{}88~cUDh!dmjUQ_?_-81Mvo4i(hHMc*hX_#;=g@iO@-a z!-uw$d=AR%X=D68mL4aFczB-;(PP*pIr|JFeF!%?l-|O0DB=1k;>;&VN45WNgWALW z)UX>ppI3Inv<29PSAlkz7hZBO@M<(=LC5i$a324$;stSXWYxj=1vv|>V!*5j#(yA4 zu4-R1z!H&Sz+Gg&Alqe4J6HHyzN0Jv0;Ja)@?x~+PbI5(-}J%7%N=(_R{m7O8VbOY z^s)dW!m{`SnHRObm~z6$g@^IOD9Ei`xO>h{WYzmf2r335+zIc85^}(_V_kReJgi9V=%cah0(p2U#R3Pga_(P1T}DjuO;1mO}s#;W2c zIPXy6cPCWq#bd0)$H+PAJDEMabKxsr@Ag?hp{G#zm1){iDB znoGQ79hkT=>j6*q(Z}$nEPX|;%spU7{89;3h4eM&DAevRs-YL5$ZEZ^^tJSN1uzDE zn@s-AcaFkf^E7IuI!9rcgw~@Rye7p#cHc-FE)EoD)QV4oC1~G-7M+GVq5ZcfYTBo& zd!G`;B9rF5sQihcpNYLp{4-zwZr&UDF~2X=zni&(;O}RT0Urpu<6eF)Y7gMqpT?d9 zJ;u&CH(}!(RRi{b58GtC!w2+r(-w0jTv#={Ty5NM`hudQCA%CLnxos&E)78zfWeyB z>1RDD@q}}rw^J{UMpWA!Y>#v?edc%S{h*8|)pT-L?gji^~3}U4k#d)?lOH*UmAU z?Jcrzgb%(d7Jav&796RX79 z0oD!h1Mpq^;eT6D0U_ZpJGTklH3MxrrzHyTvC8Lr*?`$|@x2Dgn*`|sF$?6odl`Ll zpnFLQr;JeWF8L0Ua_(RkSvoe39)v;%K_VfAFQJvNa}x5}R=(TW9Em#DZ(DeUVyNca zvS%rL+&r9|MUjoUcNhZ|8ZC#*3?w(6uY({^{eVn(08p8llRLGY8$SnRIv>ap%@O=U z&%qS%LQLmrBx5AuGNh*%ADhR;(~eCc|3SJ*el#FYz4c?u)6^DS1{lZdL;%9hi^r7a zV*n3>C*^Jk*2~yE|G4tJe|vHl99N#qT8xgcNYN8J6UP{P&b&~c1z+N<91zBE8mfo0 z&@f+UMoOnawv_Jq=+uPz;DKjXDNP%6ujfUtM=9|SRRd)ZY}nlEx#kHsJw&_eT(pnL zpBVdM;#cOU2iHeQC(Z*#RvZXU0#4qMZix$F>DhZv{ZkP;E zx#$-Oiq}v+s}giv0g6}M^O<)OSMSEv4*(7y!mA=Yo)d9MeKc};3UBZ!9J#WSpSV<= zQ@cIK--j6auq8i0gn~U6-3#$`?YP<>!;Yj*s!HCM1u6|;EK(hx9CzQE30q>HAJdK8 zFFU9Eb!;GI_1BQ70#3M+8#}0nrwu2uPPvi$Rg*|rWs|?u($aH0HthCbJ@uUKH`ZMR z(|z7Yz>w2+^Q#qydkuY!KDhQ7c_wGS-CQ{?CQnI1({^0sDRD?~d5RoWRGz}9ziINc z?`tAY7jU7FEl=k?=9i~^_bMk(%^ylX{PGk%bc5xoig1d^Q?r2DaCsW}0Prf5r`@jk zumCG0xc+ne%K@jGUwI2_`1In83e7LC%oJ)`|usO3w_x!Mhd{)P@OuD{2k zfg=7OiTazSzu(A;{@#IwLO%Wd{h$2$`wfho{qd&Z8~s85yV4K8{*IzA8|V+32&aht z#u5az;rbgUybAUAjPHGN`dfEnDg9lP2Zq$&`W-9L-<#ky%B;WaAT+JNT)LQToI!cA zCJ(RJMTVf~qo9^2TVE4+4S6!dq{wAd0^YNG0?+M_tXhe$_&p2Ip?-jdJvi*0s7%?r z{@8{$iXTxn-*ki)1zZ1Rx)%{>qZkKoeG5FR+QZ1R+p3(sr@H#dxl?B$R$Xt6_6k;@`p#q3ZF{U~OKY7ZaV4%z*TgK&lY9Ap%&M<&Ltm6GlfM+INa_zI8lr{DivLX-T`o8~)UdX)qOy79& zy1#jGJqJBGdpz02=2O#8X6;T4D-S+^VPs(5$g~eSy7SIzKW=8`Y>cJ2m`RVJfSTqo zldjGeF``=3TXOyFO!Uyo6BxaspU(Zq)AKWdb*8ai3pNgGQ-1nSEYhv^X_+JH^nP0= z&At7nwmgtv)a?#{V>$pntjg&@)=Jrm4*nj@*Fz35-+*=1T%mO_Zl~7viEzmy8}B9{ z1v(k~a{gY**z0-mJjksQX&@Ttz6{ozw0pzp^V&6*CNEtC7gN6EKj-x4}0 zzZ3yB=v=zxNYG0192v}GXR&@3%M|4#epxr@Mkt=WGCmC1F zTFv`BLxTc)wY?6=UhmmNIBp(t=>@EkWfi@4+0I|u^wfr-5A$1n z00#dfdiHf-k{tymf%Pk-jonWpAJn5J*5~>aS(=TpAXbehd%nyuVYD_$nVh|2L-#1| ziNK075j;j;J8{A!RlOG~TXIUA_!#{}i7)fSHHE%9|C4Q-_NiC-oZ#=pW4&y&$oTwT zWYM+%wC&Ik>Vr?4Fg}0b1&PP@Wa82uPkj!`5n?6U$YUmD#KmW*3kNN>bX(b*b|6+fK`wWbIf^G7+aQ}hkQEv;Zu5r1AMxT&}+gWqK!WsRR& z@Vn2S4*-iofBwM^u6dETJP23V&qg@GBK@pVW~F35lla}&&ur0t{$X2xKWmW4D%H=b#^U{qgJ)y)le4R) zulOkON)!5vc!lwyI!~+%4M2e2-3)V_wwgpRNWuFg$}2TV_}05e2?ugLBKXY>*H0V9 z{X?ngjkmtHp7VkjS6ng~Q$A|yDCcBu#yWH&frolF>P+ykkXc0ou8BdqvM;_Msi^qW==_B#34EakLNIzrf_4B-%|p zY|}Tvda^PHV+4j^x2q7W4(|?{{C zgO*K)J8!Y*Kpiax-}#ZEg8{&C{ovlHSacoenkT$*eQ>^RJ|`<6-Oh2(je{8L@qDRv zf&EUv54~6Mq=`cej*OqHFfV7${ac1XA?akw8GK2noSHWyzZQRkbjlvDj*Cn^ z%F7Vy*?OVQ;p;+W<`<~@JcsXzSD=;PvUB!Uu1TeKIFG>u;P*T6J5@yW!@w6hvZkiv z5x)G$MUQ)Q+zlAJ`4NoIe|R#fUp=0O(vzIux)jYAa=P=>#2~Knk{lOCR?zUV@0s~@ zE8g8rdVbL0#eU~i-YyqAfkm-NQ_e}k`fE87M&!6)-H#o=45|8|M%I^{J(i@`N1gOI z2?w!kCEV)A5;l7Nfi!9 z)UF3RPccIk^YoH-O^n%Vpa*Wg}?UvI)`+c7`=n2*nA8l$|nBNro#PUcDc;6em&v-2w8)e&x!=`C>&X) z9BKt5tYDxseNRNF>V`_j&o|%AeciT6MWN$^q1j&9Rs9 zwMz=iC3U$blndG$8(s|MU~k-bWQL(*rd`ny!MT}c>jz7jY|0qYjt~itv|;C*k6hA9 zL~;ZME&g@it>~EOU26J2UP9Bd#VqQ~ShIe8uNF&L7c|OpI=|#!7xeU>JUdmeE~xQj zVAP2OZZlRjxE4x}uMB+ZiQoZxx3fa3`V7*0JDGAxm}0Je*!EcEdlQG_I>Ivf-lH*c zQTt;_Ya=JjJMl67+Jkx$T>u2Eyn&4S-JF4wMQlM?3ED5hvGI~+Zh3X4fs*?c0H(jd znFgG~ROav@h>D$pcukQq}KdOyJ|v)!+?!nDOiRhspqRgxuBh z8`c1G76NFjgPOvHO*H(sz)6_Try;)86p}&bHCq$w4$_Bslb42{M(=TdCR8>J#GE${ z$5vcpAB>*Su4mv!Ox!T*H_FeLIE3pN`GoQR5TF=3@ZN-M{1nikXUQ%~MtCj)Cr7=V zyw1+MD+%$|^NM^Ej<=$|$~jSDst&ee@H73OTsC{{y7#wa2hld#H4ErvxKLp}D++kv zN1Ykxa9t>z5t6!y^GAolT-ud1zh$!WjVo=D2gnuhi$eT3?aoWWtn(lTnn86y+<9S2 zu>Y9dl?QYbd+a;k6tqOrc>!nhbI#4nrLJD@ZTMmHjezJIohxCxwHz4w`O0B_&G7fk zUzO%>8d+Z-f1{_3!QU?-iBAjQ=Wj3J*!(@;%WE3^Z2oq5?Rxy}McW(6-#Flv=5PP0 zHh)LtTc!N{{$_suezZlf|CRIi@e3>F?^?L7KpxJfUjo@^!#A)R%k{U#DjA#tNAQ3N?O3rfiBoZ0!LKj=7Og;ERK&PUr(l}=cvV4cyJ@luvQNL6q4a|r=CGW6zCeDaTZD_8yp z%E&+CJMGuSzC}+TOa6gT5&0(^pZt4y)S~k5wQI>g+TK|C2fQ-!FH|-5ZA89REdO43 zD)#N8$-(|_fc&>tEdK|+@5+BM|D0evtobJXdH9Tgf8Lq7 zHFk&ij--p>n-IY*z&8q>6tfq6ZR6X4MlF160{C7&v2uL-!4vZcpYa7!@c2(Gdr>}a zYDN#8I}R)nHw|zVv%Y6x%8jM%N&--fe2QIZSu}=Sc||Xy^!wHPUjlYzjJPSw@=7l} zyOKrQ8);Yi0I#%N$&0iYyAne)YKKxKanqNe;C9^f^YI&RSH88hV!LwU+pb+PcG>nD zBV1Li`MdWGrTN?Zv`gp3!rx@e82p`tdALHqQAIdDzfnGJ3VZE({2f8t8_D0Hr^@j+ zeU?&S6&HulOy&GN)w6u!H`X8u@b|xRzwyJx74!GX|GNA&@w2gCvNU@veHJBT5&m~P1r zZJ&1)C5aw5%R_qHYWn5cIXxdR0x*(9#Ik9IfpUUo*ja^jo-*Dw^6u4Bhl(JWlHZHz z#USQSj9zSaeQCW&KHG|H z4!+s>jz`~;cz1)09sd%anU>Q%vILEBxsg7@`cT;5E8S&JR=u6Rf zsxRkKPvWUA#0s_^WJinXWv>WAfnGL$t*BlO@U^X%wLq{?FPHzvMMd=TA0Lpyv%Gwa zr(bHGt{Gs8=;goA?TYl$?q{fIKl{Yd7xc45oAH4C8RTobpV4m?>*v*Ayd6G%D3N)Y zekK8?NIxf5+D~J*ZTaM9vzXLP=k=Ve(|I_!=^B|R^Vu)Ee*8}&-;#eh7I~~(4oD&} ztipSH8pB>6SZF8pyhP6eWTDp}V-t14UzaT4PaZW|0lFCbX}3T4$3Xk7tZUYo$YcR0L1mT&Wn(?Kz_;C43lSs{<`}+CEuGJ zM5lQCiOLJ4<(oQa>QyxqX@C{dvJ?YWU_ivhyeK}Sif^)x=tS@>-+wOXre?Zj;?kOT zGW4e2^|9XC`fNsuW63HHA49GXvoiRL{d01CS=Om*kjXE}XPf@9ev_&n3NI#`rk{k( z*GNk^dtQKh%j|Mtlr!gFY>x)3lB}Q>C09AG{sT61ZGET(FQE}(=OI`McV5A@51cuT zyzE9>Aj+<$QQVmsoh5PCRsUkRc>VGzZW1uAtY1%x%9o#F;fecY2YivYf5O$GCG9~U;6i@g^&UGje#^H&TDUDA>GKO% zAjS06)vvoU%lSFTY$twGKCpu{_~!Lo;p43xFmyEMBk))Aj^&L0=yBSTlL0cJK_)MG ze?5+mj$HX~6aFs6IS`x&nL(g<3?B?BFmamf&bdcc{|iL`F`FaA zo>Mt{3w<~e=XA>hH+9i3(L>8kUAmSHD&+Kza5^u1t=Clr4*W*6+?5pMzg)$kdGoNXqxqJWANP>4?OA58Fzs1 z?qkWR#63rVO}Px(fnwM(hiS*uHT)-6qZbgZ7wV_I?aYOCLdt)>MoGDU9-WP{d>rMS zTO>ksak1ew3p`E$V`)ddm@>$gI;W~w`(0B0#c8U9=BNAQcR#ficndh+w9P{H~@p=Rf`wYF?lca;ef#Yp^1i?F|-SBn{(qX=5PA| z7xa_3(09P+QL2I2v{*4|q!vAN8$ma7p=Err1|KuhV;nusVGsF@6M%6i zaghE4zLB3ZAfRqTv%QAq#Xy5v(jXI)E_1?8H73_gjyM%~q zLg;Y`eX?nb|xy+OMj*A?;2*{!Lqv-u)^q%I)x#~8T0?ees zsN8>_j2hE$>EM`uC!yq$3gYt^^-u@!3n4(1=aP0~FSG)?VeUi5b<*y`{+fsVtrJW} z=JJ-H)x3L!XOkcl!9s2h7@Qn@lc`R#$np@mX{-jT<0O8E`$zDeWsKbj(y_?-S#=ky zK%EwB1fR|MS=U^pY1VwJOEcz)K(kkdjo-p|d8o%>>Zzv7EHrHEIq@AuE#UhQ{s_Lk zgByi!*21^F!^8I%-_!UG-V((3qN4aVQO-5K=&Rss=tleAF8C_D$P1No<~&7OyDVBp zXX;gFU?E|OyRlKX6F1@h`TdDvWx;pDFVd%$@MKM@8fuZ4v_Gazd=&rM@ncM|>G@b$ z$DX_dZH*mgjNA+OU}6W0YkO*rxtg`(Br@)2C_KAgN*6WPLR$6ET`#wA^AIqwqzlcw-mQnJlD#4h|e-a%{@b; zbo`Z2xG4=In+Pre(Ix&O&e6g??cu2+@&KkQu#cw9x<-n1!QDzM>dKqAXefPf<5 zQV91gZQ2b@AV3Sjwh$3(P{atW1ZZK~G&b91OSl^47C|9^mms%r5x0fX04f0#my57~ z!XB#rD<~|jw*UKnGjn!!b2b->xBuZhPn)ynoSFINyU#b@%pAz?&U#CIXK+qBcjASi zGtYa^lc$=1nzm?W98; zP_f*LUTyvgztZ^$1S&uB_)EYh{A=QQtUrl|ptr2cI=Fz|$?9*}^bUgFU}JHYN%y1^ zdoPdf22Sd$2fLey)w23 zy_yt|7edq!3)1rY*{wu=|MXx%{|RRj4@G{@0#-vNTXF{3WFQHw8nI2{MwaaY14R|= zfURJIIRzU+L(Z?b|3$pQzeEI?Z*4j>6OLkZ=wD7ijNA>S!}z}yrGuaKj)4xn*A~#B zs&heu2jtm@&aQiD!8W3rjWpzt(Og7i+tUW{y<_7BWiyQD;Pf*A87AHUvW2% zD;h7J=vzd)?(dYknGZfB-fPQwnDwo#_4Ui=;D+2WlkhuKT*dyrTz#Kyi4khrc>WuaiJy5(o9`_PyjVEi(O4wf)E|B8S-PJBDm?pMe2>^?G;olAe?&fWw82YNd}_cm{xV42c$ z;*SI&1g@VazDT?xL;0sm62Shh3O1jY-!p*k0GFEwA?ph=gMdr9BHV}mkH2<7(qq%5 zpek8k`8fuU9DnxU4d^LwF<;4r3w}}=f&@+SzT!eL7XYshd*UkayyL-*_W9F0cpiLS{RXJS?e-U1>s9%T7vr5xJXlHhBY&OewcX%*9q-Ir=Lz?5T^m-n#wS;@ zlSKaEUx%hJVb3lvI21kL z`cOX7cS|{6HOc|t2k;Xn-YJ=b`C0or;=!8#JRCG|=N>EQU1fdl-pDGZydF(k?l+mi zS^A>rhz0wIj^Nv3{-d;~@f{-HBncqHG9vm#*VjuqIH+KIwZ8tQnQ27Wq<_P7b|d*F{7@UipCUE{5F(gyde-_nZ`|0h1OX$>Ff zTj)o#3@_4`m&|?HdpCm@YApB+9~wJv+Ozf3-lTEb??69s#C7&GbxK+Gg_)%pwE$YLGJG4{$<-IukjnY}Zz;+0SmKX{24vk%wx{`#=jONy za{oNw;nYi;5%jdNW=rXA^unFbV2T0;pF-4PsY#ya~OCfM5;Cf-~k${@@_Se2j&N zu`ZZz>Kn>dp?n#Bnr`!x9K4sQ299WOiNp+g#q2#C9aga=-8sE#-Kn49u1nH(cwC>C z9VS2Y{}=_~XO~|)bRDYAH(mJ7CZp_^knRUA$S+yC{)RyqGq4yWh*q5M!Ss6Z$548S zUt(skazTicbM&5y@Hu)>{``vW;uj9l7a4TQ)fb1XGV*|8aqnBTA1(bljQ(g7Ra5VL8p8VG0eN8xN?V( z2WRlbex>iU73{wh79eGxna(| zM3=UR+^PX6RSU+v%6Ft{vEpq(0Om|b70Qn=_Q%ixP#|7DRIe3&XY;rC2&pt^M7;*n ztb%}q0x>QHMG8<@(<)*C6HiZa$BEQSO~h9*Kc@3KOE2B{u#r0ylZ)_|+xQ+{FI7+1 zKG$iy8OD#<6)=(t;$DNkM$QRu?;QfK*y~aFF=6z;pkqY6L_T6$hM)Yn@4p@G+57WZ z`$d{Km7$aIJAqH}bDKagcLE?pjv34X9!@wbTikLzpo1A6q!|Y5%h||B(r9MOZ%|xG zo1Aqnn&u`0)Bq?L(gfgA0uaIjb-DaR4xae9yWYU~$L2f2*>aoMNp}pS_DUJ(A$Tfd z_ygzRzq%oNq8_b&MYrnV4=cKO+qXe<#kzg_RZy^FU%O8kAD4&;(XMJ z_H5n2{S=hz+XZ0rS;o`t1z!@cq`l!!=6N@&dR;rjeQ35I=~KjQZo(~eqrx;N&R-Mt zJ1M4A~K$O>wO*nl&8SH1B3T&~iZ35{7acD=Uln_Snz`b&EXr0N4dHtIgsCb>> z7o#^!yv|g>cnvS3m-F|#dGlN3YL%ZhWWSrx_dxx2WRA6RqR>QYbX-x@YK^O5cUo8= zUh#SK#HqySi17t;nSKC$uAUg(em9?gf_@YG$$!X|lgrRQ-~XlW9B)PbxSn%lt3WEo zJEWt*5i2ls1w5`=Ju}?Cv1Fl`<3UL-06mjSE;&_eSt!?M@p%dv+^{Aj_Fx}+tW+@c ztreigyDST8g{(~IJ5s8n6Rf2b@1?gIn!9pO{^o`Lao*BBH#<9Uvnz`d7GON9XSimC3DL-~i2r1BCnn#@gH044L1s_bX?8$ScAWF3;fRd?yc44Wd|; z^VoALo6zu|fg1>N!vVQ-gS!B{5<#_f*`?GWdD#BiJ36S4ee3`2^IgE6E2g^smJmZtZk6pjaS7*9WFYVqV zWH+Uazl~wH)l-%pRj<3bv`m{|?L6s}CQ;=dnoJ-uv=wsrV z7v;8@T2%W*vQK3C2g1x*=iF^esez8kwJ(M6pV2?Aohn(-0NS~>wc53sei8oF{_uaEUiII$S^Rg#_e>9q>(y(4 zAe#qqpRVpDf^#~hh`&RglA`jt+IkAbaAXEHV^?$;c0Wm$ua8f7@eHs_!8Vb5o~jI% zC;zbAP<@jYT;=JTOLO@#Iv6&)=RaECWP!=ev7a@;uL)q2^nS zoEp1n+P{SD_p?H4Pt)P}(D>aY3-X4rv~@C8$oNp1ZF|eUDru^IXUk}w{dNBGbM10N zfzER^S;0KA+jO6Pv~$0o;W4PfDZO|EC+CX{vQ$} zuQ*ApbQ|*C)tBW?>#|Lo#<37C_PdJhs5oX|=_7bx31eXS&3GV4zy@$K5{L-mWy8cw z7n+one;6S^MaY(&>~^`y>oEL4{3NcY-nQ~eN*0`orrdxL)?LgI+NP_~V=L^g)?93N zwh*|?saoz5IEZSUvPbgfs%c}@;?Xi^v83z39@zaYhkL5~d!CFAntr6^B1hwlbKXqt zW4rbQZRO-6$DeYvO*g85Ke`2kW%YF+(mB9!I6mQ5*aUdpP6heOtOxd*Buk(ev-$U& zM)9%YI7Yr~JJ-K7fBi-m8gl9OI4ZS}8CZS?Tam!9z0O2fMCLQLl8J}L9|Hi40N_C9 zsAtKgO}`-98x{S^rCUtalrWp3-(g?Y^lRzJr(YwYX4;Jm0%)6lU-F_~=WgOBxp9*^4>?_#^pevs%LDl#DOOxggZjG`eixrS?ld{td!o~gWhX=A3-xvJJCW0;zXKLH z8|3no(>{DhIjuf+csU)2Y}!OSSBigzf35Ld*knG=rC26Xz&RIdAW(*tDO|geB4HCq zsWFR__pZZ|T7H~PlI*#8Ek&SDsQ0nv_)hk+hA_`I{)Y^Sish~KpdK01 z(fPodQ)Qci&Y9Ni zgPr%WGa4v7Z>t9G8}OsXzdwd#apm)yNMYEB!vkOE@A!nH{5U}!OJwWXvn2~?gpy@H zB?1?wa0(ZMbg@yhN$2)M;cj`n0GZyO2(?qmI0bo!m(eFo?8Vr(3=SG}bZu}7GW_b= zKPXus>w25e7E*A_oIl()QEtNVt?y)Arxezcr)vI$2869zF6JJ;X76J&#&Dz%i9vKR!q$r){TlUk1&9^g@JdJZV*{QW)^r!x9m{4qce{&V$aUQD#{9txitBRJ3B zV)Q1Ol1uFOwJ2}w-thAnJ;&*Jj3;{zzOkj=P^vYxKQ7@cJ6tAgU)CC_X1w* z3w{-FZEf*x^o!{?;jSXw5;qF*j0ay0i$>)bI!`|(dyT}s-7)kjsxb2gPDcH6b|c|Z zWr8rSt~5MF4r5p}rQ@Xj0W?$>#RP$99O*XK%&fl<3Su>H0v>Waf{<;+{Q$@}1 zQdn1V+k3UZ zXE|Cgh<`G^S_5bdzvRbPzx9orUK|o%?YR%=ZHJd!hI!55;;TvYi}V;^fq2D}_~|@` znd^@xzPkQy%BA5agHPJeHnwa0-COa1{M2;605KQuM&c*dW%E-fiw?t2{2qeu#)lL|+*q@WcY&O3$S;{NDjX8q{oXfST_UmFlDhW~uJYNbQ8kTs>oI2YheMfdO+pT?%v5 zgCn&k{VIESEdBbV^y}U0q+dtswno)X+nCzfP1=d6c3!?*^=VY?q{h_F-qOws=!1{0%h7oYoD@VRb3W3`_Z9|s%Y00S8(rgqj@beSTOu_MNQ+XI{Z zm2)&l>_je^mZ2jn<}f6eHV8C0)9z6IpRogsPx1m@Ic`3W+c>%778+&zPWJRS(uYgk z_48Bcm|-v|i=30r>6hreVTRM~Koj0)MG5jUNKc-*IQ{iRz3zN+%zdBvMO2zf_ z;#u&?o4rPt6BOMyswk@To9Txo52L^{bl!=6oUGZ7%`;BA*bC2u znU}F2Hoxyd+@zC0H2D#{uAIFz(6PfT@OsbJT~q{71z^6UQ^P!>eiS|&c#M2Fx_!Rn ztZvPR++QB8mFw2Xhei2D*$YJGoeQDEWjsjUD&#M<@90EluDHUZs_%9zF?8!gm2z2l zY&3G+L_GHU)+jtC_-mj_{~F}4WTXC-5{$Q;r{?BgQ~{y*G>+cElT-l@8WmtI#A!s! zK*zSr74pU3Hu_A1<jR8xpsR$f_C3Pf+>1FYlL=f{jwvuNHRRA zU%2{aJ(C;2e3gxY=J@ zrqDf{K9P7P;{ciRCqS%G>JxOU5uXda?RAs~y(9Skd%J4b=v~8?lmk#zJPuBU$y#>V zC$P-PEFACZA@VXWOD;rT3!DiyOuu~i{cu>G=+An=8T*UCId@n%v)cOlmc+#hWSx4# zXz5F~!OMly_}3FqvGchLN8w+){mOPfIch#(zXtg^<;}+b-5KfE)k_urjh@cOe@6E! zEB%rwNl<=mtzTQajC0lk)lVIN#~gtq`B9dG&ZVeT>yJ_UF9)my29m-G);83|v@|3$^#3@t&l0oM1;2@Q&*`U5ci)STpiN zC_MTj`e-iNcO9Q;K$Yu6qf@|6ZjLw=d8!s5NV0vwrhnVkixZS_ZvC=r`RN3)VU5og z7+GG+hy;C^SPp+0J_9&zJo_7%0sF+FBd8Y!e7{gu60R;LFgc%Dkbb&~2m%%cj3HF% zr+82exOFVtEh-$`zHbC7Q{BG=_nAF57Goa+Ro>43Fmy3|oa4*$Cu;vX=)9#ynS+-q-nZq{ z$bma9;dTk{bIVb9HrzL8%>HK*Kmy$u$14`a{iNaiNd|rsRaLyleM&l2j170Q_j9*_^ zUmf=nlqKG=^CviOV!%FpJOceI@C(bHR{cu||JUeW$}eozzfydcHh$qtWAh8Yv)Hf` z;yA}(b)t;VaBDE+a{aV1_=O@blGi@S`XM(GY)~81h`>23ReSF* zG7!6dx{({pFFf1UA@xvWlG-rPcryl^dMu~T1nNygp}`A+%D_Tog*@XSQI))AR7t^h z1|js;x%)ffi2NWeo~PQ*0C+Thfi)fzJzD{RWK6;YQW%SntSDy}^ety63d`Gkk31-< zWR-4}Zg~dKi~BFrs47*XeLDI7%sl>Qli7lFIh0n#w8aB zsFasb4&JR~(gK{o!ve~k=6UV}N{}Q^d^>+3;~Sg|5DDzf(W0P^WuOHKP}onv;+ox| z`|EaVm=JR)Ftvy54n!W)>>|>bSz}8rJd(bFrJTpK8Vf9!4f$N#Ztb%hc}@||G^+O5 zZTdByLKt8LbBSO(>omU5P&pK*OYaX=vHL-0$0e!PQoX;S|Ert`oLazScBR+8`3KRXGf)69 zAy(wZ&B(`PtOtXN0Tc&MI!#ly$a`N!cwtI?&x?p44WW3Ryx|Yln^`D%0|u{w<+tG> zWDE|sS}T(51<{#7LzLp+orZG3EpGfSL!#lbHa5)j9i~+#(Wi1!mClWoCuqxM8`@>C z*WEv?WC3#|{TZpo@QL3^p9ZYpdD49@Lw%{q$2f89>G{R2cFn0A57 z&~FJcoxbh)G&;}kyzqI%YYZRA_kxaEzw<0^3iyQY`xX@TBe3jkJO{73uKby_JHV%! zpDh;(N@{GjS0E6iL6HF(7*rx{N0BKTU#L>y3%E!txQ$uuz=q%mdcL8oufa? zrCGJkZ<=qH!+pB?1(3j61L3i*s#iEAsSl`Fu)WIVeB)>t^kBXF=O@s|T&g;Np+9zd zQ5pvH@basg6g>2+0!w=UAmGUM0}d+|W#-55Rxa{gI3JD$AY|CY62;Fk{FdlXQez+o zh}J2YkzaWuCQ7Vw9&nd1eh&8%wgN6;wCOz6C4SB?!1Gj5=;(HzbF&8W@!U(f7?wU; zz-t~#pH@{);x)5~i-8winuusv`b1$v#RF?t4s7XvNyiIv?v*+yi7fFD&h$~#h?uhc zOMGU}SLLfvp8BUfMrU4dge~96CIGCQNZ>nvqh_GFw2}#4 zf?Q|TPOenZ5;^BwF6e#avpJj=jnjq!&rsp*Lfa~yr`8%a9tqP_(KNvf+c;7M)joy7 zB%s!3UVNE7Pv|H9zT^)yzMRLCc7CnGlEPyGj%63J|tp$*Z=3^iq}6?)lYz>{wwq9xAl+4kMOCC zSL}VO+I}ZY$Tc)+=f>X|J~!}@pZeK^H)^$&pv%k>d>Pp7w+W2x4a9Y-&_blMac6 znR4T7e@Eh~9j7pOFmV#}%U$20#`9V9i&LAqeUD+J?>`L8+&J51<{;`p|8D$->7N(g z*cLuI96QayLgkOU4Lwb~#LVxQ@w}<8*mnoNrN;fmzBBx{EB0d%nJ_xZ4EN@|EUaPV z(6mE4#mkiUwr}Sm2ufv^uXiJ@BDXT0^DcKE;t#5vfm^kv{M8W3*DZOh8_%>k2`v9E ze$=g9R@n-1_P#sJ0Lu zsEhihXLd1t@XGY!`rx3wMclQY>$}^EFE!tbD=X-@r$G(8BVf z4~|xiVLf)$F#4bdUk%jS_HzxH;1`*Tc;KaF#T3rXuWdl#Ve&AH{9X^SqP{WwZRk`e=R1I< zM)TcSe;VC)rd`wC=;U}M-1nh!-1fDRymT$v9rXAWVwr}*ZS@R&U=|iotuzF!jdH((vBJ z*&j2gwBc9(=X3Ln ze<$G|FWB2MGsb589fO=d!rNVYKqCE}2mJv5F~9I~3zusR&BCKOAQQ{^Z>E0MOF8LL z^b>!)n)Ra6vvj55j>Ljia&Y6@R00(@oDFU;KIHvz5m_Iev2xlob5VbUSue-MC_3Ew ziXgvZmpT#)w}CG7qn+P8T}G#wYO71NyoYKTU43N4E~PSFjry(GUtfyQ;za}EC5 z0}=TypKKAo z%pK3jacSu)2ZYlH1*tZ25S4O`by*5uFf!oKt(7fzovm-kTk`DeCoRHXBEJ~kW&1|Y zt~)jyL!9w+;ljakA9^VLMervTj!#Dfw=nJ_y_Z3jib_OZv2hm&cf7aohj=o8U=$cZ z2N~IYaL0}FwNCEJ%~M(1U23EN4oPepCYUE)m%{DpEbkslvsp-)ihkjITdRkG@}I39(9r} zAFXVkdul;9IIrLX(93?`Xup3%y|?v4HQz&@CDDALKC{2`^Sdu9eTF$T3`}C>IQJK) zZpXKtw=-5N*P)hdRR(g2T^8aMjS}C(uXbp*ch`wd{mql81Jf8_{ULg;_lwdG&R>LM zO@1CJ+#$1R(FUmlRlZk_wE?*>VPJV2-3iA+Wz?~9j#aWoxIm6k!)L(Rc zXXNUeHcqOO`qEPrd>N1W?C%o#yK+-sz`MR~ey7K?VSbxCH~yMEIUIx@9&h!Bkl1?Q zODJ3(3zx@2vNKwLN`wgc1ydkNgHs^ozZN|}4xl_x?o(_~DQPGL35*P*3aou`MHPJR zLbETfjX&QPa{cH6eXV}{5_!7P51W32&AIPu{x|RY8_f4cpR@ZU0rg5Z%jtY4uD?ii z3j>Hs;bbHR@h?6U#E0O~G@KVqcVWYZcI2EtzEma0&+oF~4x>Kc)14PTgxE@DpsWqH zFvnZ4VQ;w!ufK+hgU&CnaXGvS4Le)6X@A8F{^S`s__^PHs_|Vm1^Bs6gd0u}W|f4f z;64R2jxr|cYPa~Hi}i3lKel2dr1kMus2(JL5~4Q%2K1d~TiI6!PYm7yORwY)h^=Lx zQiBQ($@LIefHMl9H4mbj&)FyPtvQ#eWWiM6(VdILzJw~*!8$BY+ZRqsP}ga#0LRMb zynxLu&`D4W$0*4PL;xbEF@gWL!WYCP`$HJW2VJM<@VE#KyY}TQIuqOANeT+0zTm z?V}$-dt_fOA%Vmz`%bsR!haChbWTI1?s&oQE%6*iKa3rxye0kbx%`>}UUw_Pw@K&5 zD-7Q*Lp{8xkF#@8A8bIiR5LF~7BlmX%QVCCyFq+c$8$HiHHdo#V3pH?cOHDL@{00! z+MJWrj`^EOhwIpv=%Fs8&+{^Hp-PG2@h>m>xz&Wz?2qy@JgAQ*^ki&c*)8}@T$H^J z^v0U7?uW+;t6Yn^SZEvIgt9BXoh3h}J@zj%C!as20+-B%Q0vqh!G=RqAn*kGTlPxw z^`U8{W9i7Rb23-}VsWL@dA_(7FP13*z`5#Z(1z0_hN{6_1R(ir_!<>_u3nrjda)ne zsaOgA8g8Ho;Y#2p$QyDQ0F;47c~w?1@@p7^1%ZrmXGh0nWYLphuxTRpp zo);fqfjV72W}jHM8CNS5xB3y7SsmCG=WM>4A8+ONyh#7%&%5+LkNeeSGU$(4q~@$% zDcGHZk1YJz{RpzW8eUJhQ;jOrkXIe7tVIwNXG0$Vr}2tv7SO2~&T*G;zldW68YMS_ zr{Oiej^Jy1yxM<<_jtDooo=_vM^t%VFI$VvE4Ss&)>}>Z4tm6mKX5;6H%BKM0TP%I z4oH0d^@_kBh*w@)?yLb)Gz&5W;Y`5B93pQv9N8x6hp!5y8DQ)!9iInh67TKyCzJ28 zd81fby|uOFT~Y&PbQWP8D4>A?+Tid^bF_z;$O#C%5^Tv=a3TBXaSGIib$ zGy-;4GP$BE%LnJU9_QwF2LXZe^0~_Rd%!7reGKabI?=ec>IF%R-^gyo0aM2L=AkZv zsD_9jZNE$Llb3}j#>oOpyYUcsO8Nd_<4L74iv7cC2;*l`u=IG|^oRPM7x3lk(;CW^ z=+x@Ji$uaaiHRihIYzD)ltd?~*A4!$E_Rc*BKH77WFzH;H7qV!MhoTOx{5J8=D z0vj|N_?m@K29ZYN$b7P-;k4}zbgd#`cg{OUAxzEB7ll8i;ZJ`!_-P?&tF1iX!hMjH zZ=6b@FW&6>xgABG%bm3cyXY61|KzLCvX;NACOVQiouHF}p%ae$l&+&aS4WU&_$unK z=tvLT@IG$cIG@e0(oCuc2;oFshKpfnZ|nIRw?_WQsjI|r^-P=TduK{uTfI~s3dqWJ6O;1l+2Tr6on%~z z5UZAp^G;zrhrSj)m_P5daxWCr`HhA1PH&%xQdD-|!(Qv&^EgH8J!F`A*PD9l?0Vsk z1U+K2Rn9G-Anc*RyP+rN$Fr~epXE)S9L@y( zfVgVUjyvyMP$gudq$i>_wGyL@adsi2&J>va~E zHP(51rC9(p5`bF}Q-T~bL9(||C|>5=Hp`8Jg)rI1>sv<9P{z6yId5gTcx{4quKf#; z8q~E2&*17Jy_&%@1A2ipFv{ar+T zmrclb%C$9aH_O=a?$?H!f5Iqd5}LVQ-RGachOj;5uedKKM(#E00V6PykY1<34EZ{( zdVH$=vgU%XG5$liL)j%8zk|o4|L|@(5QdCF&Kj!L?KSkfUXSkxW-r>o(6ydkd=y){ zt%bry{!as^JRWskTtI);Zm${j$QrP;6 zsjiDnXZFrucncs{vfD{C03WX0pO38oA@fX(^rhHSNr1-=m)LO?y{Hlb z{f$Fme2^T^4;EIF37tVTKK=%)Lx-H!6U``5oxj`17oK`|r`?O|-IG*x8E2p6mfk%S zww#yIf3!`!j9r>)z2`U7m%PmTldboBURb_Gzc<6dWISbf3LuEx>8cet+_0_8UZiW# z8EbzRpvpO6u4^TNC=2s6`#9w)x$9@>M-9vrx_IYF_e>&=^nSA6YB2nUVsa5Loh)pT5p+-~hTpK!REvRQ3rXTF!gT4&t6i4@Dnm*c(k^W^&t= zt}D;c0j>W0F5Jka&6)Jg`N`*9eFWQ<2ANGcrC=kFVIKn!OQuhKo53pGbTOA`hb5||494_;_+ej ziQ5$_ib84dVc@1b^0M2hw8bzT0?^9UH>SZk0|_lwAfM#)tT&wF*C27x6`-TX{C|;h zm{20-BQIzPrKpcXqiTg)+WSA!3Wjzi~b0J!oC2=t3jX`LW?lX64dV)Tp2uLij$ zI`>1JYkv1=r#QbP%KmNq^2gIYEWfk@=mLJ(f3}PEAaGQSUj|`sjeZk;No?!QFJD%u zFXR_(uSevUDpc#uFI56T#m^to{Bj8x)8?1wn?5|h+=258DS^4TUQvFzsov!m!&gQx z`+>jSX@V!QTYEyT(wXgqPnfc#^9ypZap%ARC0wdq!+(^oX4C_@ch^duPWehih#d&h zfC&(&a6}E-5dRd95zd4Yz^}6rK8`~y^_-e7vb`EguZE{WBx6WjTjuNu2U;UCjFz1^ zG>FKJ4G&(x1wveMZLPl_)nFim_~Z*RcY{bJycFkaK%$g0a^~83l~=&%Lted>JQtU< zsvZ7qa<=T04=ZO$V5mUO*23V8LNB)*TOemuJ9^96rnQQ73iNUn%G-WHF}>Ucw0g^# zWFEyUPVLunw$qa?;B*t5bD=Qu`PHK12zvS0$44z^w}o9fqyJMFUk)+vN$2r!U0|wd zC*p~7==xrl0UPd{BguN!sHzI>*d#(HbOL_s_-MY`JSv@D=ER zG^saK5A=XnJoG@Ck8M5B383i;=Ien9IMTKr=s0-aC z>cQwsj_W#+H<4#&%~)Ohn|MVF-_yl;f3*@N?Ps$N!#AdWQ_plTt2iEL2DRS%(W68yEI3N_W>oF;j;S4e{)1{~hq1I% z_NlS-N9{}h?vc`;dyX7Kf7-^>&fcQsTd316#bq$T=B`_W58R_nA%bD z^+narqOr8&|MXb;qv*5YFzL^(V`-;#OzkN8T&3E1_%MaHzinbhX-*#%@_nfu~?eU&4;JvJCtJm+1PgMv%<(BoC=ehAR zBY;i*`Y3aS{oy4awB6X~!+aX@)as-EivXZn22=V8kcBhLI0xx1S(-J{xQg>=IL}HB zZCB?UnYICjt@p*hlzh5Sko=-HopsK`L?&9BqY0$_JX1$*9HPcAEhuVyxggj7=*xTu zbLpzuR5fVF*&p6V0erOkyo|l}-VY(S zPY}Ol-?rrqE|l|*lQ!)R95F7^j{QB3p0kA-<94Z1Dld@t=x>>sgI0NLL97chk!ddS zDoi?9TE}_6Ve~ucbbcL3;@7r<>-`Gpfp%TLcCq-~a!}2N{Q@0P1y(=W#(-9q=vVzu zo`SIECkp%H#^Fog#WN)XXh7I(8^n9IfO7-hl-;WW9Ty``X$M_p_`4DV4*;I}gE(5M z=NNjYz%-<=P5?la;%U?0S1Ibs@zgAkFf3q_)$RV1-Vtja$eZ5JpQ@6ja`Rd&mmaa) z$}_ymbwWpiPv|!VmR^F2h?urLh!~mIkUfh$_K|8tIW=!R{=B^~Bq}|x49M99qY|=( zAP>J^hxeZQ-M(R*eD(djr}2vT?_HEK*pinAnTF`vZYuKs)jXddI0QfyKVpJ`sX`ZS zmFJpD>?W_iZq#SwX_R@9DQScR)OmBvi)`MY)BY|ExOr4TppPvYekNTSt@yt;J+H-S ze+o{!T%SZiRep|lxmRxVDmOS{xsBiVDpzI2eZAY;W|ddDUMv3RUGCfqy~^2fL+^4o zF7YZC9Ffl-S!v2K-NTG6a4Ytr8@?3i&$!ZgyMfo!ZF^CDfO+173cwggEJxaD+yE62 zuZU{bD=$7pd(g;wAS%5mj^)AI9tt+a@?fY zpi;K)Q=mso`D47x4;GfcMVAk$@-3$Prg5I|_vM#g_+_>oQDtYDvPg$1q*Hf6IZh}0 z5~|!ZQ!b{;Ed@xth_4_bHSDjgf5f-T48o5ZhNi5)`ZLpg&U_3?^W(g%*9W%B!=s^N z-{*vm)t}RJe80pK4=J!nUU@^uPP7RHTW-qV?_EAoSl-ZaK$Z8I@)vlQ??vMQ7=Ae+i&`ib<(!nw(&bx-v>Ib1`B|vn#_3N0@}2`YF9_WQxope0LOWm;UN0KpstNz0BN9gjcs(i|ne|n>5`6lAshWj8aOCsC}#WVdt3S-jF z<=*8(h2`I+ql5Ap)qamDe}Z@UU}5>Yb@^(guRBfofOmOcVfpiQ`BqiF)s%nwAD;bB z72@w8UA|A1Z!+aC&y}Zo;>Eo80q90EF3vyi`P%ol1REhbf!%6`ocG*S4X)s5nQ;Lb z-Oy#%_DCwnf7FB2_d*U9zO&?9)DrbicM9o-Ik z&_m>vV$A~a$#pQBpvR}td*^SmOcVKT=5pb-&#En;hhM?#L61}ZR-7Ksl50ti6R{Pa z3$AIGco^gt8V~vO*!b66y+i0xb&$~GN>%@8>G4u!QF`>kP8vA!>G4eqjv@5uBOH_u zAEqna4tmfd%=$r(lmI^Y0k{pI$N7NY`4Ud08nb*P6}%qwc>LWQ-U{X8W|ks7R`DR6L;|e-k2ZCKFfaTv6ZT>AoqQDkm!g`fOOIqa9alEHx&Uj=qXp zRBlA_mEmyg!rkiONi^2SrtDphC5BD)u{vbh)g2nf z)0S{-T4gg5_)7!rJD??g+1d~tsEa-kj@4JThIyRLtC$;Xh(2Ez#Yt1ohhwuUTMBoL z{SkUFb#3X2e_$VNvwLjs&YT{-UUrXVK5?W00Cv(%>EcSqZZ2Qzsf$l3;iF!0fmnpi zhWSB%JwR*ZR|x_c;%5W(c-z!~w}V`9h|PSaOYsy>hsqBn-^K5-e8=o2tDHPWldV8O zH{gbZ^@fjN!?S>`=!Xb#@ujzHJ zISBLO?d!({+P_M&@Ju%(2xZ{yH5za4Yb#16$+*8t7zdpy;^Q6jb?xIdeo6Uw{p^xT zOY-vZUiz%4i*oJbl{=xgT_3Meb=23#jz+mG5{t#t2SWcKZbR33n59O7{b?%>E}IhB z7zwoRiH_9E5t$lm93{gv+%fv0CtKgCFZ_${^EN zUo^W4u4OgW+|<;^W(QHQN`gjMKl5~b^cgZQ&^{OjQ^vsWwm*Hc%S>d8eqkZ*Fg>6d zXBrvjSi?9-f#COQ%~^a}rDhyi#yYpMfMMt>gJF{0H7bxEU7P|VfEl>>7^}0QoXJ^} zbm9k0(nxyT_cExUa1~e{60Z1AGIl$fo*LbC#ebuGr4IjyL&5*b(`v|+;^BlW$Lbsakw6i z@5$<%e=Uy*{>3jn4vO5JNIejcyZ#m@v#6-EYGM^T+{7oBT~?;owbDUto#bxK!09A9 zTzT#I(Fs)V=1+6o73OubdoL`*<3VuBwS+{iAc2wSM!#rsm3@#^Y;6DbCzUytlwi(2 zs1qk8mQwB2Zr5J<{d4okJo}gN9b4A{6*TF6PMHO6) zAP+E^t`2#!G&aK&8I1sT*AFFqvwH&WwY391QV#q!6Dr|kknwz|go}5BI)F-;sa3*@ z;+#es1|j}X3pu+8=P3&{0kwdgAlugr=$lgCM{n z%x;99X@b6iQ(X(&(a>5SyC#Cq2m+d%(*7nq@Qv`m?*}8}t~9W8GSq3IZ@gNbZHT}P z2wdi%eBF`_zTe?T98b{Sc_G*(_&v-8r%ywLuWb@E8eLJkLU3OI%fjkuox2{C?*Uw$ z^RPLaZh6>rk$a4b-0M0;IS*SrU4E6wdD!%(n&>UT!(N26_jpJ-O7xvP9i<^2_L4P} zItV#1!7bRk z*Va}yO@kD)uc>yPz(^8g8y8qwF9gg5WKVH%B?A$`kPJV@fR~2o4zkenFX0?Mta$4= zdyDVA24GXK0zqy#7}(ly%));X4B^-fM9i^kOC!hNuXNPxwg68VtiWjUU4SP+nJR>x z116^rA*!b~QF|->KDfKctr&f0Tlh<$xU;45o4oXsd~csSpHL*pI@1}Tj92^|6)J-* zZJ2iW7ZmiR@%dQo&7|L{d^6TT$e|MDGWlZrdA#R$Cg1D?kN5PQOukr~$9uM6^2JO( zm^6z2tZ}~N;mWz{1GRbSIm6jg5Xd!?(7{FU&&vJ;GbS z_`IOD?}S-VRzaGBv*OrQRvudM{#5K@e`os3xLxzQ0R1en^ZDmMO@A#Hf7$~i&c#vV zldt<@fMKtf@dxl{oHOs=mbrxjqSNyi11 z9{?kFeVWB9Cb1SG=Im?ToP5?!_eY(3OxTQ{Z`MPiUEw?Cb!5X~ItJ#{Vqj`(!BqIW z3RCo(&1K`M6~#uv6P<+u-%sL}hJOefFF*c8q(gdr=^|hXu%)tuO_oj1Wb)ZgNRO1T z3U+EO*zqgRk1_QU-YV7$y-`&sRl$kDww?%p5Oy;T8m|e%@3R%+CmQ(*EXQ0KVBp|G z24dyPk>z;+zr{Wt(31xw>Y~3&mj#sI!KK`^kgHxYY_;_`2z7k&5vbI;1ZO%>E~jfVEjt>ff8BKL7OzlN6D6Dcod&j z`6wTyXtiXE@m~H^5u@AZGn!Od`BVOd)A|BPY(>JF*+oFx2xy(BgNpFla*~^zhwu#J zU>i?;y8^EoEzS&B`hxde_WQlndoQ}P9$?E|2aEw8lVlaW*}Zg+^q5^i&$4DI_S^8n zoFn>)QgOb6fK!=`kdF~pwq-8rv9M~#_5TkR)TO5rn>Zm}TIxps88E_*TGJ}!VC`%j z)_8Ei?c2`NP(8Y>YStI8*b!B-$u83l^&BtA*C6wz^5+Fke>tb;hRh2L%mjO4c zQ`iu_9uL-?oVSm$z^md6U~z<)F$cV^n&?PztQEKq$+)xZQBZsq&&Zy|EI;goy6LI9 zczxwNprE_6-jOSI;12AUK4ew0n!IQYrGQ^l0$ETy#$gzRb}jQ%MJ!^}QeF?Vh^W(# zuT?18dKbNJ$nX>YlE%~{zE7dg@eUq+B;%i7<0X7U{th26DnN7B$w<~b|I--D?1iz+ z=P;Hz1VfCY>tl0pT=VJ>!@4(R;;L#ytX1_sZA} z_l>yc5l#H22_u*YZ<=w_$(t73bn&JYH{HBx!%a_p?4HVq)V;75Bd}>PY4Ak^g#jHgX>)-z#nSK`3zj zYOqT9eT)P#Zu-o^*6?$0hIfBH96bnR^!F0;X0dB4NzFE(N>zO5q#HM(D#hO+w|=8; z7X~p7tHL;}8sjjG|7K&%G!JB1*hsR3p@f=97SN}mnPVoE#BK7{ml?na0pMPVfAa?M$ z2PZ(NM?LZh?8DWSgZdFGkv*+1t4!)gee&pq`slLClzzlIx$!a$OFf!S<99u3>6E{h zRYveP{ZqfTHnGca2nAc*G90^FSG!#pJdohi_Kl&yWiMbcMY!YH9EGA!V{jJ1du?X| z%fAH=frcy4(Lu{A>V=SJSqb`^!Qb@pElS-$)+6CBCh+|y1D9Q>O3n&&d<~Jc!g|}V z+ZnY$r<&YZRvAG>l>08SVoLw$rr~Sj;~vfx!EVj1?BfSS93S_yZ-k+4pXd373{#?E z^qt6o$_sS-8Dh?s22@LPD;rtMpgW*Vx&z--IJT&=S>}v5$<(40K8mulVkPA-tR%K9 zdbR&Re|4%+h!u%>OQ_F{wS>=dT@=T6N~b4?CpsT&n>B%Cu)P(%?t^v|U@sLjo< zAzj1KjxPRLvWBmn`km>_Z9dxa(bcg@jVp(sXfDV6*kK|Zo6FfZ9wLJ~phy;o&c%!$ z?vx_|=<-qI>_i5D2n^s2(%Zpr*MNn9rbM`7Q{ehX1NXhec{?bnC&DFI?*5b@U1%W0 zQ4?|nUJd> zT7hF%yrgT4h9t@NDG?8W0OZ&R9r~*pfG`v z5I%AC-Dwj2>UG<}7%4$>cDvQhgR<=jz6K5({4fe-uubK#B|+E{*b@Z0F$I)wPt7!HJi{I>|nW!bx@>iPxt@o+HQ+Q4d9>HIlEK~;d{uHO0 zS_|3rQjO?;w#NKtujMNnYsg=WLxQ+M*Ux0 zFrdkcGP-l3DI0x~PReuZbK>z_(NbtECmvh>JH?}B4s~Rnczj}eHyRMp=xdU%Fve7t zG#pii$Jo%QcyrF%+YKq0oyF=$DtH$Q68|3>hm@X=P{rIlCKc22`5`!5yX_EEbjnvF zq2ktD!H`CN<}|l@XZg_A{nqOiygq5;r6_2P_hO2=MbwyckA#>)V=h;NlVus-8Do2x z3K1o|Gq^s$^N}F;a=GJE#s!wF;n>CDfs_A5`q+6GbDqQXrxt0%|4scl`>&feflh_= zfh~khY+n=M=tjBuPtl>~t@BAF;KJW++XhjqPvBk&Ha4tB zZs#an2d4v27wG>g2w%O{T1wkFM{dJFz?k{h*&Q@yx#8%1G`_Lv+&jsPdq0wKskr+p zbf8_^tCb7QVZmi;$Oxs2{p1Q92zm_|=p&2BIRts2NQep}g81Ber%JLyBP2BJnZ$hg z*ThBqgx`vbkSTOrr1=bJCpYT$|0FJQj~+0q&%DZk36ngj*BhC8CUfwnHu8(&ZX(IQNcWt~& zaPU9CNB|+@k3lMsB&RA9Lr^5o6a${7@6p3LKhXAp?gdSl9?|kC5A&aMQ_~X54h~hEYQa z7HWye1q+RI^g#+B5wjr?3kMh}gk&UDPKQZ+MNY?(HN*s?c-B4w+kNnNU{3ih{S$yc zxa~a(S)6w%Lv6A%yP0>n()zv=-xtcygCake-t0&OF1uWQAoENmhz2p3t71YJ26Gt1 zA%!nbm^h;nn)8z3^24h0JgA~oBV9ccy)l-Ue zn5&m}5~YC@L7w>uq(}vs`6Iy}N`|oap>2c_=BGraDN-3qQ_L_f9$M8ZUAtY)mCk$lJ*;`I=?(^oy^mfJYHR36oIL@10!dPv8b^_C{{srm~_Zd_4u zEk}gB4tY_gjXy+WM0mPgX+e;AE`!WiH_5;=#7`p3@ThnPQ8D}v+e0Z-Hiz-9ln!+v z*h`^-s7TzJ5#NU^&jS_n4G#^d)ATcu6KYG$$US+A$cenUB$Fp6B2_1ir=0AJg0w~E zq7T>Nqny;Lbs<-ghHG&aWD8Is`Muz&{BuIcP)5%p_9qwlDad-()(*C^=!p5MJL|5R6y2fZ6o?!f>9#vj@(U#`>H1Q3JSh#$gma-!tE{RegW6`+YyZe-bGhreAz^Fm;&ksoYk^fbUb@jJ)z2W?N zpLouy*Tf5$FBDew?x*Ty{_jNK{yr_zM=$4B1FmMVb)ATG6A11c=FQ<~=V_H80JFD_38-{? z6Bh{9ANFn_&ZVyPhpi6852WJ^+BV6OxY)thV)p;iz~!IC<0+j7e~Jl0n^wz|>$=A^ z9xuO60p|8UR@;WowbFJ1u13HG=ef28F^XnA#PUn7dTcfv1Az@INMJef^*ji%O2Vi% z@d_>?3GsC^If|oDg5Dxi1gq#fwXEApeH))V9xMcjiJ&*GyRakZ!>)C#z|%SigiMOj z7wF<}1%sfuZpMIYf&sHHqaA*$XSp%(7O`M+jUpDj3-J!RL3@8`2_vvn7A>Kv(n|i- zM=M6T)AJLY0zr3VKL4K%33``ph(bEm;f_Ngkd(IwVO(3A2)2^Txk_~*h8RYZawqTE zBDENX;Jq9Iop1)ZIz3+Tm-m#&8vI|Bg+iAtI^vTfyhm=CYd44tUPa}s^Sm+3Sq4S^ zpU4^3cLF(q%lGjRwMQ9e{tuF~>p=I9ntcsafz z&dj*N_#ZYLb>i%G0cR>!N1TNK5r3ulF3s^EZ!+Z?A_U=qGY)m!!+o86guy`y{#h{; z@y3gAyZ5(oMcI z<4=0dGX7aKYJ1Vd@)$C;posR%5JZ@>Kl4;&yu*dOwO|!V8_49vtEXzl<~X7Z^?*K& z+Kaz{`%+_^KhM9Sw47AvZ+Yme@5O}CAcl?9MPZ(7ejuQ*ND_GOyu0u25ksj%^&_m*Ep9ZYi zepIXlEk60qKj3XU7NngBc>}j?r-7R98OK6#U+N=*i!g#u)HwM{ju}Dp@Fk<>6Df~z zavzHPm-z4NcGn|PEVU3nVyO3kq4eVIG1gr48{?>*4Skmzo}NYR_wn%bL%GcZkujL_ z1Kt!N-Of=$s^sC{?$tF;wCd1=Zs-yX#YjJZ7=_{74PuLSMUcuijoI|Cjm~w z$9w2?u{TH3-ju`b8ST6d;*GFIerMftB7Ms=JS8`&b@RsmGB`2o=6BKW2@kKr_Xp|s z=AEg>lt13%J?k**?!V&k9u|x5<(wA8B!h@g!o65rhIl1oleDT;&S&ru;`IFpuk#8U z1CPgMZ8mQ0c$S*4xP|sm61KS4p4x~60a*lN=U^W_uGEX2k60us3_C8@20Yqc5 zFMQbAKzwIF&)kEi25ft=5B74%jtgA20WC3&JX9Mi?XO#c5MzmN@jT}7H8&tr1P_uv z-=eMSmVB`3C4jwh3V^^5ZXKqczRIT@_F`|o+RoBl>Q;T=ua8eHnbEn`IHD@NX)V(Y z5TZrP&iUxDuKb0%eO{<*|DZH*8S~WYmL#wqX%pLA^}(dt&aHM)x7*b%Sp^6HI5H#Z z<1X#%x4Aes}5Lh~7T# zF4x2RHpXV*lHfJH8TJL>&Q7VB3%v2D9#W;o zfr9Me$_Og`(7>S)DbH*wqKHx2&43X4zJo%F{$WLDW~pdQe|Y{u&`Q@6lxDJ(|tD2PQVu;?q_% zT1_p1SC~G-9+1DS$4bKJiw#kvOmoWsGC}jYumF({2XLm=DxppE2SIyGa)da&Lj4nl zhLf5b0a^_OrU~$c@;%cFF0F(8(Q_rUI9Gy%F@`#OI62ZwL)phkK+KgaLW(86)pI2} zn+z;EbVZ;}5|d?)96U$4$ZJ8Ro|!;*LTZAfF*lHopl1}za!^N$G3F-lDdf90#T(#| z+b3d>%D}P_tNj{(a*8y_mHQ4-&g5(>Q?IbG3xh! z6zX@Q)N^Wn(un#!jJCrQlv-DsJ`D8^Xo{)#w9+dxUa{4CHGX}p-ZxXd@AA75)%%Mt z7pV7y`#`DpT)YnqDpyhc9$qHc`ZWs@!lhHWiz3*TT<$Gs^u-IewY> z0UQ=A41qIH6W#~A^?WdH@s2S0<@9Re70)N3V%yg=!PaVbA&8f#>Kj1C6#u^dQ}O(; z@RCh(yyOA;)PlNbM*NXy>Z90>C2>GP9G8aZrUc0NG^kSG-DW{%=R16KK(|$#zS03GpeHZ_^@uj(18pr=jiA|I+3|W z2k;|viP%a0h_G77Xlg`nvaP5$8G<~S6m5_a^}2((6z^q_Sm0KoHtkkE`^=Weuijj` zLM};Hc*#I8h>9_mqA0VQxW+{L|EYpVrm2Anp?02Z@(Bq~Wsb34VOWIB93f zic*AMW{l^8zt(za?$C@CrQ=Lpr zz^3cZEYS`~sCHO?<_Y>VwpUSGG9X?B{23%hxn9L1QXMClq64l!a}6FUf2O`N1b?Ok zE>oUAv(+S1*9oRB_%l_wryGTq_oO!yUIlMv8rnUIzRds9mpO`_%#*lNj!fdiIx^4G z;AuzZ)F*65<|O?3*pb;xN9G|YuMuXkUW2|cj?7!QFXG7j!sC^8WbX2Kr5%}TJzmj~ zf!lgEUquJh1lsm^2KOZ~jQjFKx-YN+M#s<|7(L_0vy9);f6JKtmf-jQb$&|*Z9!LI z{>ghjZISX@CICguq}%NAbjXaS!)81UD`xN6@bP>a*eU{!LZoZ3ML1!Me#;99_$`J% zp%>+1E<|G@&u)LAnBA_zcecIE`5EQ6dfM&hHs5Z0!R!Bd9=uboE#haS9w`RzfH%Bz z#OK*8zi9M+MhGzE{EUqLm14{-m#^HcAsUsR(fer5&loYT{zKY*go9(JBd&ftV$!D| zu09=c_2UtzJ_T|0Z@O{yu3qS!ytw+}evDufSX?&1AzTPQ28YJg7b0Xas<=7?y&O5l zIMFiPzP@C^_FQ?2S#xz7b(8bLA>8S49uxzPKLxVGu>-iD_ z5xiAui~p}JQDJgK$Qc%o+)m73OWQ}o@hRhU&teEpA{+c?ca`nG_7DAKVH8g{@=XD`)r6WB8qNKXrl?py>W zMX-fEmi;`t#hqmK`xJry5r zH1T1yr{cqC?<0&4BOa#X!xAY*G*{=0q(+SBhl|FCYd|Gx5(a-!BVs|gN%5u`H+k`4 zRHEaN;C?@_z07bV*=dB5)SMe_JP=V|oz z@p`I;a40I?BfHKkLOxun;3%YJV0jGR(`^%~y(a1P(gJ^g25SF%{uqg{CVP$& z>5==B`XOn%tdhM_MUEl8QJ)N(0L~@Xd#&EE{ksE7N(3 zvU&rtk;qD%$&9ZDO$UCgh7wr z1P{qp-93Hu+p&cLfAwbduRi|j4@x6ydyWL3421DS7>d8#BZnl2m|{5bq1>`Wi6Y|B z?e03e@2V|u)WJh#xfH=xz~Y<^5zpndBevthZ*sLq%NM`6z~zf8XMIF`(f!jrzIY}& zTE6JHTk!>R@MZgyQSb%x*s-?}T|x3iJzSDveBmQpHeZz8BkhqdCUEac!xxu6>d6<0 zyNdBe|4(hcC_^_$cf}Vq(kYuSn)Q2YwJJ#eQSildD2p6lkf$jhyi8oh9*?T{Z9lj) zH?A54Y##C3^jOAK$@_BSDx(h+6gfED_|6nSNEz+E7mg?CE;N_Lk|XUqN5Zl2H%BM|fL?3|Xv3 zICy+`)uwWMG=56wkq4<|2&-j=I(Ni~Gm~pT;*)Q>n*m$_8oxU63oHH>)*SF`Epwq{ z@c|R6krxw@esE<6ekl9Ah|3U6#>}G1(7I`3F2anTZq$tYtNNJobMiB{hj?>i+37~5 zzEI^38biz_q-9>nqm1b?|PpxMik zCv?rmdoHSw6%-5}x(gr54Nxc$uv{GlV>PKk}kD#xCc=k{&i4 z!?{u*sPgp}0}KsP47qqn*-})OgRnzP>~E`&KG_g`rXl)H9T*;YToG0hT_x#>rW#eX zvlk$>*W2Suxs2W#qAvy>7_+{pe(+;`0sK=Hl;?B?%;zvVgR7>L&KQ-x`1((5ebIzp zAL|QQ`!QO5;s4n`TVIU3L-fTLK^v_v9{th(V|{VH_Aj!6*fIGR&5!&S=?m;@2TuXw zEnApB9^U79f^_b&D*kN>uX@WLE_r`S;J!?F)thDEl8w0CfT!hnO6AhAY0;L(f!T#& zS8-L|hcn6_o64~37Y`kiUG%3!kCY9G+EkTICb?MXhp# z_Cj*Lhd3g}_Yg-!EG7=G6Gw!O1S=1%n_+t_qb)^Wqz6@KUxc@XzQ{^G!(dNGmd56b z5IolxA>jGG2>Ydd5#=F#7xGC%B1pv%z?K&hi zqKZxcunw2UbW*J~ex3jrI4(C=&X1|s*Z$6ok023p(M!wRk~e-XS!%Uwe>Z^d?D1Tq zo5$3)nj=uSwPeQJiu)tZ8Is3zAs^wRthy`yRZnn5q#$jZ`Gro z@Xp+Pcu5E1Y~*op4{(+n2R8yDk8yCLhGUnI;eyxAa$99U^MeG!^ zoL*vr6%w%h4JAo!vdZd9*2*;CsyAV$u+ruIaL0SJQ=4R<4LhZW)XGl5>=f83wQ=4E zcB2U3@Z3nCHoj1IZCp_W3d-LHPyRE%XrC%c`IuqMwl5*-b(l>*bxi^LhgFde`(&z?s7t@owrhI<*jUW z6PTfR-b!f2k%u!>F&ztfxYx~!U3Y=Lf1ZbUcl;8}f*-$?9|`=xh-J`C0Qm_X1nzqd zzg2?BP55n+Ehc@987{*nTf|O>65&Enm2A=U3*yjCwt&N|&TB8sw?K>yF+Ya;kjulk znmVt&2HX2jwD&XTAPfPynb<;yi9<20fQ`+;>Q}RGc>AhS+0*=(w^ZyP=KyD&HQ3#+l;6pa0@ucVj6FM}!JVhMvFTSZ(_QMW7`CN`-kOW55uXbDAQ?b@_#&2DyWrs)uD+fX#EwxXqtTbouf zthG@sLCc_JwyK@iDzmiAE_VOl?{m(1=e(15lF2Uh`~Cm__wz~Sy`0N)p65Bw?cB_a zo?oy`Qkb;A1rM+YqDx*1Ex8W&hO&E(PT9L=c_>@;q=&La=J$NmbbZN>t`CfXt^+WB zhtV~Om$Gu1bOrJ@#k2n>j@@xR`xo#)y0TW+xmR>$oxXI{6PrrtYrD_%P-O5a4@Gv> zeJzHH0)_nzeGUC>*qMSge&+{7(aq4`U{GR1E8XAJ;nr2s*G7!9u&?>VS#)2s;w-wO zS#cJ;*>&el>}6S@hVEsr3N_$yyIpMLI7{CRw*7i5p2ljw)-tf7d~O6?N{zF4bN#;| z&XRime_+4XETjEe{r2~5s{I>J4TnFB=-A^jM)&)Qu!uc9OvhC#jDbmXETSI-|CRbd zQ*ErdIKESbB5)WcN9uSxVswnVD|Hu~Nx|(3u+I`EQ*iiPO`_=A8J!#j5T1r0%)zbPwQ*ErdNVN=# z&{X5?M@lt<=TeP;d#T2Dxl|+U8$-3$=Tu)Sg=&HyO*KKPrkdbXQ!NcRhK;iRv0JFt zvkX=!jFcqO7(JI)YR=&Z5u!)V(W#UvV{9uo=s6qfUN$w}nI({VJT@oyD&Covdlm0g zjFOLcvhlL3ni-EJ1{&hn(R*#Q>-TbyOSJ3W3Ks3WtIs*#R5)wU6%CxVa|c2}RWbKguxO`8*40!8t}o)aAAxOQ=qGJzJNg8#YW%xj?mzPQ@=gGC z^!r=K>Nt{=RTJGeL{;5C1Eksyjd!AogaJt&TxB-=Qs`Xf2xMtWAHxU z6uJJ7>-)e}!dB~tFApWI5f_)oI8D)x&s@Bj+J%^1(Frv@n*-!w6KWRmtr{Sg75VJi zQ4E#CyVDbBrow%?NzNJPt^nEm*|N#uzNQwr<9O>Rxq@6EL|GUenk`P z{fhR%OiCYjccb?!`o~Gybk6Tr1lwWyxW^{&494l3;ded#X0w4&;pktKByQc9_chEE3fhZ%lm^iacL^9P5U-4NROG4W7{bz9axRwEGtm%j zGopqMFcnW#le&mJz7bQA%8m~(6>-L2W6ATndREcsXvDm(*+Vc5Q!p6P<~&)fN6Nu` z#CNVwTCAw2jSiulHadiA+UO99iK#fF%AMMEdZ!p2lfPrL)Ob9Rr7pEuO0zNeNsrkJ zGsVz2%}kwgE6mi5TQUbNBjvC(bb&khg|)`1FyoP9F<2tkbI>@~lHtxvaycZ4B$A)1|YH zpii@o&`GlnK?BQ0$X?`0%-hs`WmVYFEqrL%Qit- z@}Vk57400LEa)m1?g!V=fZJraBO(!LzbzA25_(JER+3WLp-PJ8;m)!h3htcTdf`?k z?7iZQI!C|`rJV^?B;)?5POh=e$3HTv^>m_qv%RhP1RTF+nLg!?x=y3F15A+L7v-+A zU}yS`w-8{=v&^s4sCt#Y_a?2=nD*b|^YMd(%bt(ltLo!?{GV1>^YP!h-giF!;366K z@mZ%4{X55f%sP!;{iNpO58{c@Kz3cFH?sP>HCrN4WIn#klEB9j*J=D3y)Zu?ABKz{ z{YqNDQ*pe@7q9R65%EPf=HZJe&86~1^fkp7o3Kt})@#N2qM2~nd@-QvBVWw^Ghx>2 zcb>o2moLhYALD^Oe9`g`n=c0Rlj4gsp1gb!M789ikDf1XS#0wK`!xGEFEdXF@YkC2 zpwv2z7IcpMIAS|s^BG5sVpxMqi%OcG(tTBa91(IpA~OD?Iv0XF=n5#XhQHk`>tiPgFVmNqsbfs6sYLAI;EdYZQqr4PqzL;Td7Yl~nFy1rg9n5u=^aP$Hb@-g_@b9A|_x8c1Ud z(}u3O6QFAv`|K7w3au|M;!I18F>wr_`HCHfKOnv}15N zf67NY5Ac}UvFe!m#KIWzsY&u`<>Hu>0#Vh`VCvhO^xNQ zoWBDnF`CV@jE-A@Psur-!vBXuR~;KfkTaHhB(!KEV8I>sZ+jmiP9#k|jx3t87AF}& z^}P(OIDBW_sj;=O(4r{5;Vv2K$Y8J-b;|B^5Qnu;dYD5wsd3z3eMd58An8~+Y!}k~ zE%kWr<+ge}3s3)dsmIojQ9ZVjY5k5cDqTJ9xL{=U2qs8}7SS=q-CLohyA5N9aiPW2 zCPF!qF%~a^O*EV_WP3q(hh*$AxEa`DsD9zPG&ptM_TZM@Iosg>L-T`2#^y{o@}bMV zj@nkunT-E$%;)!5!S|DN0sl4ys02TB3pfB--wZ8U3V4`3w1~%Nv5L^rLEIgQH`ntQ z&-3xio&iq9UiL9;2tBEO+{2jflZ;M`FdF-CdaH(UgHiCT?0bh@m-Y6!<4IdAdVygm z7Nav4$_o`|LyImSh9{T@Q}I$A1=h;X!?va#j;Dsi>6kW!z*v;Ck&plO_S*ukLF~yu z?LIGp26Yolz})u0T=>X`=5IAMwk|ej68=AQ**w6qX3jqN|IU1-jg64DUKjiy6dYPo zflxOygceOuch`iL(%vQBa*z$g+ruIw*5S>!)g9iQ!n@F~|3KscUqIcY=(s_=c{~c# zMju|aRn(w1tWdihzWbmS6St(*Ui@wkT`7!~xCLP1Zd~X)_aVLm8{_Et#_0Gf65+)$ zc;O7mec=}1!|{ymvqAqPj6otcwB!b9(c13NA`S%+!Pp7}cWnOx{^EHaeo@bg%UH2@ zW9Kt`tA&AORWc8h0`)+twGUl(*pX{My?01GP)WVpi%2|5(c>QQ3qOSx-LCFH4^AsY z{dK56&xg*-h;9w%tbEmJv`?z;)zzGQ3KK8$NgOMd_&lG)rxZ*4 zc_vOw{BW+P5sNXJ>I=x0D*2P%Qg$#J#9#gE4#}wk`Be@6^X9tzP-J5>{ycP8A zHFI{u|99q>3BPQI|LFOU06{S3Rp-H`2BSR!ZYKB4%O|=fpXgX+c<(IrdAauor~{C{ zaj602+j!yE^3~h>y+zjL$m*PmTw^)kF8bb>?f8CV`Cr-bvE0aZ{Gn=#xIcmOIivLd zx8wh(=iB9k6UJ!A*IxuX9$L+fq2kt!mmzlW%+^+16gEz=^>;tF(;2@NLP0LZ>)S4b zB+19i7oJ#T-9Z%T>^L1fH@%N|ZY?8+!`9#3s-tt(KH|USE3Us&Hxnvemo#Hqe^>c6 z54>k#YJrO4Tp+vMgT)TzB#0y(nL;vf6t_b zsHFI2)tr2MlXVl0ZFz%>v$VDf2cS7G4Lir2xEc1?ipdB3^QOc8RM@ww9srk_fb2mG zWVHRX30yKe_wD1tgfW|X|MOcS$Ozp&oJD-Mnt4GW*>rE34`dsSW zfTLV;JqW4g6a7JTezVA@@4lZI}Qq$Lbn(sBS+v`j}ML(?C4tHmJS??2UwvHs(X}s=x`b?k+{# z@wlC&;}Gksf481kzYu9?IOuL8_^wg;0?o(=fVaRS&aQP{czr^k+fGMZV7X978r+u~ zH}~`4v9RH>a_J<2P(9klF-pplSrzNp8}fU=g;9WW<^|Fh8h$JI;8(MM4m=(AGV&H1 z@Up%{dB=K)rLGCfH>82gw;`jPoe$xuNYy#sZ*AR=Q}-MA{=WxHnsNK!-ck1xc>g!t z*LVCgSKl?MtM&tUhU-v8i(SQ26-f4Ll|}A7#dH+py z{~GTvR`-A32KQ%MX--r3tC;3Qord>EtNS;3f3Uj$H}Chsz2aX(7owCGV$0YjtNPU& zkt%>x2AA8Z&y)wQ8rTzzfw8TbA{4XPaS(&?U6uUDn2uAAxeUYPeqni2_< z&A>dmT;Y81I+<0kH!|?L{hLE<@fSK)ftS{fn;Qju5yMOSl9w`J6v$D`oMNWAI2kZe z-Lb7Gr?9i@L9TL&00L)1s|=}TWewY_+$Iq%L?<)#7U1dr8-S-&)mZRUHogE)d+fh4 zcp5}8A1R({1g-)+%?xWi{pUb0p8k5SKc0*%r(Ma*$e(Z8ggILQJ{?MRW<-e8DV57k zL2@=@wr>Kkl%VOO2fN7w)_I$T9(g{P2Wf#l<)Aggh-+!aivR?XkA-jnoJzwdhZcg9 zu4V0_vJuS!<0!7C#Mo;*2>!1FTx3-03J`aa%WAi>W5xqg@O8R#qM;X?eM$sPuY^T{ z_BDdpWI#V{@wtIF-#%;oR{Z6Te}doFkDFU(x1*A%Os53)Q(*p)?=R>+As_k70X zHp1?F`m0;8Q@fq!Orb}MbedDusoelSTr&yaW7d);3HDd@o?|)^Jz|KbkO&q{oSVMF zZCz`{)+FKz`qg)L2byF1kELI=0YXD5wEZ#X@hNUg^LD3!v!K4cSzmZe^`#5zJ7Wy> z{WXC4dOtfMFd1#fz=L}keT9CL6FXRjayuT4YGw^Bos1@sM#&oCs5)WPAx;HN@rZU1 z`ihDS>6FA2Q*#9Ep7mX4Ok%EV)8<5zHq#YT1f5$dfvS#2Gt~N#Ahf=0Kq_X|X#LLB zP?#>OCAR)6x+C%C0% z^OE;lO*bRU#j8$Wj7YX^HgZ2`i}ME=j?|66Xt9Mm3ht1kahR&D+cs+ zyzj$3zHTO8ujZTYsjuC<|2FQ=m32U-4Fz-*zv&qEvB9l|^|9jeCT|}!b1WxOzO8PM z^y^~nG4_kpSF`mno++iijLhjRza5S%h0)0M8M-b&YUj=BLb?(cyhztpdcsCe#P9+* z$)z-mBlOcMl9|atOT;wUz z|7Bh;>&*s2!Z&)~b#X6>(h+smAi4H~^Yu=@L+U+M*K6uD@KUov74{AgTs;dg&KOi( z*a=o4+*TY;+KqDr&OTP`ohvjFoM}HeZ~cY9dGFZ@KmKs$QV#-7z`HOZay93C1@jk2 z@~7Q!%xo0w9Dm42d`dck?rytsv2e+BCrb}7xr#&N@&ClnrCo2FrP@`fPZj>Nx?MSG zmzW$-pDXKvT7P7nD-KZYH2Gb-(4K#5LY>+<{`vM|fMlIl_M9Nzg&sFDxMh1Sx$FAN zyNS5Xp*8i8vW*D(Wzo<6yblm~^B-K(g|;eQAEz5;op0+`zUfbUqE*?)pEzJ#gouMw&5wJ$5g z7O&6X?E$28c7y~d9zX0u5-r!~Q19gWHGCbT#O)+s`T6`oSl0;hg?M)LPD%KWY(G}~ zPdD+DKkhF0xJcJo93M9RyHQ`Ma!%p@B@>sJrRtkFYJCR(fBO>f|2_2j;`r}G5)b~X zb|^_+HA%kmdj44W{|27NhW}pFSKvDomHP@GH--%V?if&=Qu+T*q;z)NeM3;&nk*~Nb`y9D-ejfn>xOF8W` zth2ir)}i*`P~Gqm9R{nP&YR9PN|x{ILNLO3f%yA#zR3RGyHiR0Mm-blxP0>~=4}I! zcWG8N8@1!$07b1Dn1Tz0dheC9;zzHI%k(b5xe6M zwjOPj@~h8c285NJ8l<$pNAUr8clD#hlSN0?mRUgxRCecETLzp8b-F}9Fg)>Nq^1sj+v(kDSfHre=vv0T+Y8F|#=ZLmRx9p(^6=u$ z^^{ks%5y_*0w)3y5=YMjcV^oq6sihky!wtefq=HjE&?I|3p}0e-WoRsR@{o+5k~o- ztJqsRP@m>dq&Zl`Ia^80Es;p|iWu`5y3l?dIurR}3`Qq2+sml_>v-ebg&?@w4yNm5 zI@!ZucF=hZFQV}$oWJ3>;5?z2DlgYA$q(gBC<;{^3nK=EGLL^EWbCjbTMI+v0Q9~B^^h(!p#Qd`7tL96Yxw)h8Py^ zAi=S;$dvdKHpeQ9uEpk76;dm6rZZQ5)SLK>0CuNix@+l00FHA#HYNbR%*B2g-X&b5 zUw&b$;{Ed0H>6*ldIpHnf$_n&{|?FQ_Dj3`{>jD4e{;*?H2|lH^2I+8yqR%agD=ycEq}_Dn+0*KaqT6=u`WP!*kWb>+5Mtt zr(%5dT(CIZ_j81A8w_84^Oa(JRa3P5%SI^wiHwv#%alLaQ@)`a{nj?cClcq_0|a!Z z=-@t+-JODSCfCGeoX^#$(Yw4oKzUik{3f11-aD4MAN6vk>UZ@jW;k$}#`SN%fg2eg zn^o~TC1l?CiJ(a5-V=#Ac`b1-8{Q-t%hLZ?)TH%wKY%r3|Ji5<#$hSQEOAQRC*>JF zG39dpT4zDId!t+l@@HEjCrE^o>-{i6p-EW)S!bU&Ji^*XFA~4mX5c5G)`t(nZ_^$Y zexLiCAAb9pzclU+c!N zeEO$5u6ht#kRAZeIWUzG%PxsZRE&9U#VQj5`SLGdUc7j}s~9;j36YRF-IyreaYDgk zF*>C7wCM1KYCk%(l}?A$H#Hr`T|P3O|M7(4bO@k68~u4c?*Xu0lo#W36UQ)ik|hsa z`*|n9aC9$)VL`5QA!5%~zX4XS(^xI;{{s6&|9<}%MK86XB#&Ndt|&<_)i59QQa6(q z>ZPvliC#KXLuvXoj_J zzq~9u6w^x&lXcjaM;>3f?zCchsU2Soo{#X%7dv`0ave5b#(c3|*{RKZG1%;@>jm(v zgY7Qz4w`{qL7#^oEj{AzqtLs_f(S1sycNz16-Z3UGr1uY&3B9-1t+(l&o+0@H zeaHuTPdQ1^JO1d$Lhnya6MBDeouF+K=zZ-KCDD5hTIX+vG_&2>-t*G?3xVSFe&+-M zymWd`Ph0dh^2O$hCJPSnBWo)`2z@}M^Y`n7aMN`&be!6zUzqt}M<$sqQGJG{-{X&r zOuvgDD>q_3;EBg#PYKUFgSJ!6IM=wjm~(?sn3Z+Gz!bKDd-MgJ0}m9EZ-L#*bQgEy zBVrFBKl!!_Sv23~#~)t37D00Fxw!$AKG3S#>oh2Sec@rW*RS7&nO@U*J}c^BMevS0 zMvn8QPEl|Tu_>IJ$$7k%M{SRz+4SgTKEw-^iyC$!YFzRLyjB(u<~JBP&72fVzPWlP zqBQv-&|MU3*Dg@Q##A_KoS8U))~j&hcKL?C=;yW(9$!8`_rqXOxi-EIx#(b>U!q() z=WiCDoAwzv*uEwU4v}k-{Ys)k8S{Z`%}ib>*Op(Sz! z*Fz)si;bKod+;&B4YO}Sgxd}Nn9ShU>7))j~M0#oi?>|Q1Sd)|im>RyE|*0;a<~)u+0O=$WtbeE`JG{MxLKtSWQnFk^%~vYlYd`C4!1JB zEr%lqmel{NG+fO{J{CEggW>8Uhu7fsrpVz-VzwN9_RT^$yvi=$!{>y@w_m>eUU5GE z$}z|_Ob*-SwiPY+su9W^Z_3@)?w7xLcS|YS=p`dhu>%q;^K-i&)8Cnh-;7){-(T|i z&UD=E2nBS%>GPew7WahZ_s!l@_2ZRWKI_2u3H-i`&v(vc!}p2&zK_p$$^?9$#P3J@ zd}mwneRF<4&F4F|u5iDf=kq;ieP819{ZrQW8-2dB#isr{e7$hYka;_7Mkx{=Z52-F&Xnc;`5zr-OTqIpYI&oG2f^Ae8=a2;h!(*?}qQl8#e!3 zGD`lde7@WHZ}ju}R zhn6H)rCbcpY>;uypFAsahJi&W%Y^6YYM9t!YZUBnQx}Xsh8;XXT}*j>8hG-oZzJBx z`^{>cg7d8BwAxNb6DQ$zyn(@|$}# zm!NV_Tz8Ow=(sK?=IV7aDp!8~oZY-~6A#S=I4-K!Sgl1{tmrK(cHTYI#LviUhWE)^ zlr6mMa*rX}64Mdh!X8!Qw*^!og+*+x_8bQCfXlz_HC}Kj=n4Q`ZtWoNFf73zDONA= zq2|Zy^%c3~VZZ~ZF&u{au0$(}!Peo}!S&*Beb;^Mc&txcQ2_#fE2wVvI~w2Hqf>A+ zB7Q*ohWJ|tVY}dm4@&YV_b3JfGm*PBBgp6XxSK#!wxxPeF-mq%)i~AYSJcbZI#Ydo zMSa&21xOU$==oS?_1h#dsCYw=*_9w@(XNv*$LMSXy$_0>Q(qe<<82R&0; zwE>4cZ6JN>R+&LZ9BQ9{PhMsiDA~FMM6o%^!4h^r~gLFto zK6e6yg^V*}5;oUwVEgT@gecwAC^XrzP24~fZ z4~^$7nh}B`diV(e_z9Tk%D#bdj)Mwg>~jg*2pbNfzEth!DYm&vDIK4kk(M^#L>Rqi zdn4C3q?~7yA2J@Ygv7$dcIS?VKm)w3$X~er!A>`XbU;t^9EcBM_DP@+_`<%+b!FVQ z4AiVd9hDZDFT;40h*TLW0E`2`3EGj4&&vpG*n(WZ+WxbQm}ybYoxv1sc~o3WX2UzW zLoZ3rs}`b!YbZ^zv%RLwtO_&}loj$wgIyXqr%PxZlk%jb+aku7OY<9xHGlsD+zz4p zOrZ8iW?k-Vhfm(|QSvn)bmL$mPqUp+z-9y#W0kfJCoqg=3`)^m7{;#o@UPtiiBeR!oE*m4gi`h$*RlH~~wK1Y%?4=A8 z2ZUJOUiu?7iLsZCoxdhOv0?;GUj2q< zHE8mKMU&S~1%H>O$yc{Yj=^I}&vCSE--VC%v+tTvTWIs^42FTydvbo8rE81ARo>AIOt;!@4*CJ5nU zZ;%Cmhh{jBT0=D8oy?h+dI~uULl@# zZonxYOv^x5M{dh`2%t!&_xaMfTz_>gxaY$S=XTqRyD7b=#vhYppGA9U4-P0ddc&ip z0eD}?FEvD{Ubo(H6%qhH)9{WaGav(W3k=VsiDYccxw=h{^P6&szwF_{H-V<;aQxZn z29XYMN9gD^9G+azI?cx7xRq!?W&IRxYbrd@J-{DeELDku!3%O~4pzX!?|m;Ce|uW| z-NyLaV2mj1#~%FC;xhoZ*-~RR9l#-HJh!k!!N4l<;@5AQm|yeBqQ{8`^qb0h6{{?v z--K2BbFIj-G5uz!M&Yjq`Ag|Hy-d$(?ASgmO)yz04_|-_Sr=BEQ0CCn1VKBHSlQ4q zw9LIoH(p3_;{zy8`7K^MhTrq?mhw3$30PF~#zycTc7{y(sNzR=hQ??Qk=?b33D|K; z(AOI;%uWZgKW6*)=FL$BBta4TH@S_U{dgIb5HIpkceV60 z6}NjIFDx@Kv{V$9u|sdfSIEeXi`!+k9BzmH3I%!sb#U<|dgp;_qn^v(( z$M2d(NP?aj$Tot(5=S+#(b$dVQph1YW|b&E9A8E<%?{$|f)$ZBp{^tfrid;Kb)8j? z{XuPeE^=sbyJI3~MR{m0R~`WJvM&sm6V ztiCe#NnQ@A{R2L4w8W&TMor{`Cuud2tj7Vd@%Nx0pdGF|gakk=lmXBMYWtHX@vfMb z^R5dpcmbQZ^J1o9&x8&0w!^D5#OD(ixZ;znlTl+T2pozz%bo1F8INNII=GdcMbroo z>)f^rZO<5S?5Ce1Y=O~F4w--ir=NON{y+`#m!hBA zkY02WjU!trMVzCQQo0x^sFaG^F;{@_vQ$T2MYhW$}a*LT7Ss7EHihi@A|G9-~D)ugfVc1am0xWPw<`yea{V*F$BCnUdH^PcA>{8sVy1CV)^;9x zn>q_JEqHR#{4FZ~SFQZLCjXTte-9*w)UWrXQ&p!DLzOLJNFk<1g3)gW0mC{Z4NpK&uiUG&!7Wv=Bi4Hl$_TvorxMVgT< zp1MB}q4cR!9r6fRml)qQ_LxZz_?ykX316eE=x^Jcd#TT=7yybe%s$OJoSKHvJ$yBU zZ(-h~q6sYd!%bS`3~S^~mN4-qr*0-x$S-Cr;AEB+W$;3E=WoV)r)j$_M1~vKn3njc z;e1l%_suz)43a~`N|;|CKt8a6a-@UK)W2*-EMD*#ZL^3x@xy=j)l#3Vw>uW~Wn0fM zJj_@`(S4?xnU8josWa@%cwOq8Wa^al1BLC&P06>fj_ph7`Z`8lKaiAs)#rGd`T5tR z%H{ZI#S097aCDTH!RM*0FM1|BjI1dwj0>vN`T0j?BTDX6@%Wv9TUo()dNlupdaTt zyvhAA66L?CG`Jy%a&i7SFW`lA4=rLG&F<6}Ya0*2KaABU{+ORodlFg1EZAZye7|$H z4jvkfp81-7BfWv+kF*Ui@obCbYNnZ*#FJ&v&{{i4auJ)|gpC*B>;d?Ilky?7hz_v_ zw6~vdK?^PZF2CB~t*pz`%o1txMV8XBLcEQgrA|LRWTW6P%2c;O7tB&k9JxW3i^R4# z7jC0QR&|AVr7pHBz3)ivnmk&&!n37aH?ovXXxH5{H>O?7wl3bT%swNv>)1bxLa&T! z*N<7sCba7hXKqZpevh3h$bf$IBIQc#FS8$a8#&jnzbw$e<=N}~GfDxsXn&zEU}PTQ zwDhXXdyxHkYQJ2X9$`D(d8~i!6FQKwAxc(wo_+}$QRsT(uY`m1RC(F`X{x6`eQGV_ zwvIAlLKr74!k5e(vQE8LT6DCTmTsFZIWKx_XG#IH{~Z=zaQ}d;^YX%RLfvz_8Dphh zGPc&-!Jt5Z|ia(yiv;kyD;*%H-v?G0NW=R4pBmE@c$w|K`pA%F3S zXo4MLF3S!n7^lmjnvuroCSxy;bA9z{6CtqehN`nlqIVhcxjH=PtW~j&JvGoOu0)%S zbS1v{YvLKGPxkBKsSlYx)`tT+u(pqZE0S9e-8ujHrffNwI~I9)nfA*blZ|1u5B~T| zzl7cJH=CoQA(+F;>8q>WRUEPUG}T-5>))Bz$54*jc0J2i+xwJt$&o2gl#ju0UA=>+ zfb(?$9!fJs1BYo|R_yqb_lmJ2Xl)sEF2IA zeEMmWYj~CID&*5s0KFUFJA$1i(+VnZ;{t3ZenmyjaBTBAienvc?CE<6$FA8^bL{*d zxEvcn9q8t>k%AoS>S04KR9C>Sy=d`B{CdIWNw#s>$OAAV@rSG4~$JBYzvdd7MEZu48GP9H^jj_vb=bL?x%42bt(qmF|4ugy%4 z$+nyVTNgCrQ;Sshn2C?7PsdD~*e|$tqmTLYx}?)>?vl-TjZo6tSLn(26Dn|^TMZW; zCyqJ@KW1v#p)8A{Yx**mM&vbA4U@Arz_luc{#4Yee=-o1t^F!-3VwLk?5p|J`Pl3w zQT_$ph;zHAq8whNa}aOYFU9mhcAsq#``?b_YycYVP5Wp*;jvgo`+F(q)qq zSP+U>`^CJ5%f>(h9P!CePB3_`VomHSTK&r%gf)Nj1c$)O*PkaP2A!W?;Z6{tVar_Y zXp|1tJG)H;kNL+-l)dijcQz4TO{Z@VPb~nX1iQS9`M`JGNKP4t6PAYYosG{-MBx)a z4i-iXThyYnnAddrNbqYsxeL@OKHyVRC}!F>7LyU z?qaOl=qbWNU1jMh<>%~$FWiT@Yx+){xS{>K(BcVre?M~((Dw5|CSdO)i;UkK+gyyD z(63*TP-fLL2(#L{=Gkcc4{Ev(=K1X4o z))CD?de^SQeI|SXNHy}j*vwy$Uro}VTfw87gsCRn;&v-=_M=RLhKU})^WScEzf#n8 zbIl#~myxxF{OzNM!>w8mGlGo6SdNsqbsF%}a-<&Ku&dI;_#wABZ(Z-o_z3C(7!%8V z^l%wqwFRu2&piYrj--eGz9Cpd5BIYEM1dY|`&KIjEPO~bjoJnHukD+qq^XYx@=T73j_`=`2`~X-}+7FDhWBy6_+2D!o z;2+n-<|ZSD)`zog2CEZ+$wT*+hiPJF!+>fkqMvfa5L-KNk>ct#;OaPvfj_hhOT#&f zfFbMbaIMSP)Zav+($`b*#LI0z4G$>FGz*luVL>OhoRn0TNoRwn_`eM>jmZBWkpE44 zX;_;QR&DeAok^NP4BYs33Q^}{_Na6D^l$+Zu`MM{*fD^neDI9-$YVz)&0 zKg`w$g>i6=*w$hR1~RBvZO8HtjI!F;sKAaGw0CWOX`74oKz+0kEXoG4(TyTG8(?|u zT0xg(nC|UjRI-wtL6btH+E9G!UGR|DnYKLB<+^T|l$)sp^O&Iov=Q^$)cOnZk>xl> zklWeEEth5SVtladVbOa!E-#MhTgn<=|Lc5ssqnnTQy$rd-ESFwr0Y#ifUsse4|jf> z=}~5NwC?wzMfaj&=?9k(d|J00m68F$5zn)u{6`ig|3|im**@@t8(ujS=;s_-+uyk9 zd&(3giM-<2+f`^EIGe8x8vEI_i~5?E+rRJQLqY#;o+E9i~7wSVQ_1@y)+s@_7kf7SgY5uFy{ebP@V}wDhzRl0cuEE-r)}oYRb0awV}XzGA1*@|4p^!n7-Ai=9&=FU#?O-J7_N`5HiUNh z(&$n0q&1?UUGHoVFz|5V_!ATi@fk|c-0)urCAh1fE~W8cGB88IJf&>0@-oIDBL7+;F&qRS66YXyOW*$!`hXhYuTWdVU7ZXp~tY8Kc zYyBb;I^!?%F2zcepMlp3i_m-KvhcVahxZL0ISyxN%e2(fWhlV#pUmeN1ay{8C?=oM zpsea&EZ%uq1q)xtTfwQw71qIv_F@ajje30S#V7A5ZZED@=(&hMcEDA8`)8Q{#~~j)Og=j>v^hPRk*X9V=4o_?BH|aOC0RZw&-~gnim{k z8ES5QF*}HO9UY$|wQv0!Lcd_;w>*`7Z1lSt^^txf#1;JP)**m5#<+q9FJj))SS!_U z{pae9g0ua~|1q3LyKu5QQkI&Fa!sa?OxoW0?(<^rOu`qD#o|{JR;KUY zQl;-h`a*lhF1HiuR`00d3HJLol|LI;NG?u^DcKd>NhSw()taq*#T$p~qsA=_u2_E+ z^XKD;=R~_2k#0sMLf_-(UW9@0C^io2aF^207k@3?4Ef3#jTk1B(}c05PyA&Hk~Gvp zRbHp-4riD}81QRen=GJ>CB@ zTP{6HF@uZn3@| zDr^pPETaJqNbdP_9ultk)$y?i3UR*mFQZ?Uvrt@q<;%`cnMw#3RV+*~5oA*Qxg!+6 zJBrtSZejW4aq=20dIu+~ZYXS@Fe3W_O`Hv!<4poP$04cMQRF{Oa)Ry7vjARP`+tAZ z7{=((p#?()plkg(FWXZa^LWvw_y?OSNnz^XYhJLY)V#(Y@S(sL3@#yx^1k4~y0=f0 ztn$y`7yW(pWS{v(WYolQJUiTNhJ?#U+d@zJAA2}<6iU9Pvp#;Pw z)^8)ySjiiML4!Zb&fbD{HfnBVzI@HY^Q9)a_0GX`S$!VyiKvHNQRy0-KW#sYv4=B> zLyKgkD1_XQg6_{BD(L*;Lxk0W?|iNWH0K)MgnV{wZ+M}mt%d_S4flA3?;hw}$MEWl)Z~!U1{;gJ^$UrTQ}M1;T9LHsb(xJr$^D z68i2oQcny(dy3CEyZ;SCRBAuF2+E=*WXdJ&c`^PH9PiRUwCGN}5FUsV2Qz7_$siMz zuVts3{G{U`v=`v2GV3*Fv!#W>(wUd%!x5>bA2$J3XiKq_Yfx2vqM;(?uHvG{&m9;7 zf8q#B`S-E$7;)vCHp2~iSD|9(mubP4HNSN{Ui0F-k|4FJj-RPDY2Sub$%73NM_qIv zzF{h)=F*&V+<(oaiWu{o%kU}MR}hRXJC=K#!W1({+xrA#oudGt@V%kqFn`XE|C+i! zG5(wN%Et0v06-V;-w$6biU0Z#y#SqbTm*eF`kmptr~Pf4@7kCTg0KzAmHc%Y|E;L# zIj^G<>1_V2Bi9KJnl7pMaDXj9zXTtOh0Spv#fR;G5Izh|MTO+UC%@?B!+juRyncce zkCAqH&-LoM6dO=t&U4qy2+GSkpTkbS%1UP99G!qTiSCUQ_qCy!{ZqZg`(7 zVn1{uzuljF?T1}1Eowis1Ks}iL-JASXQyLxF6n1GHhTNn#Skd8it>DI+Yf_l^ZiWh zhb-Ep?T7vMMUl4sFkWjOEuSf)d2OQo@Zt01KKPSHZkA*}bYK68@!zfhc;n=KEr2fI zzb`*i692U-d6>5!I+qRSJs(_kbedawce-^VJa%_RG{ZPZnK8flW)dmKfH^bZ%eQreuY(U8)HADzx#>t(;p#%HjbaV0dxUB zg&mk^vfeuNy^{DT{a@sRehqxz<);V!?!!+#NN3BtV*C_Ewf_8+c}V!_ z%Fk(jI$Cx<&hyjvp0)YO=xXv6?aAC*(!RX?FaUsIi;iYLB$*HG%P@JO`ghniQ+JyK z{xpL9aNXAhO0WIEGiV5x_-VwO-Y;+w1A{=0>uh~ZIn&&Q2d6)DU5Zm6F5eeI_`t52 zhl%$%1ZzgNQRlj4fHySI1MuSSa~OUNBfeNq^|nm8n*#W;S7i$Ga?&#F$whGS8FX)l zoKK(Yj?QyzgIa;{G}^7aD93BjV4H4H@gs()ec&*p`IPB{ir`b$xE2h}VkZKbKN+sN zLCv3hkz^J3-?9M0Z?*aaCT@KIWGoI`_s$ARTK=$Ay;s1)oXw6pM{NO9=Aw#_jxp!u;`<)hyQW zp(WiY1h{jf=(3q^rk5O!U1QXqRx$8ZJ&r11Wz9D#OubG_t#uj)T`WaVl5?MULePtL z{VgD~4gc!h)Vu~{Q0*)D4tSy_W^oFsmu!M2AUuP78mbft(g4ch0EY}^iGs6@?-NL1 z$Qu5E0`?IBRxFL1R=NO3Q9YZ~jwU&O#j0`g)gl6g%h(5)H;Q;i%kS9&35k_C=i}f| z-+0|n13HxUZ^Yh?q5d(%>$;I&+uJGREVQ@dxBsv0?Eyex?Ctxp{CuqTcI+l$_)_E8 z#JkOln-Z`4?2{X-pQ-?KfqwdWUKT_EBV~~Bn<*=KQGPco`AvH#Z*RwLCJsu9*Oei^ zEysNA?O&W%)ZWeza^HAe({I7QiSmCjxW+ii&!&3q?e*BEg01qmx0~N&ZnaKM?Cq9Y zTzmV0T~MTLZ(qMkshp42-sV0UW4E^hKm5e_?+(b5jkAyXf!qTAd+RY*Xhpzh#rQAx zhR`W*Z|9`_Uf%Pux0B2VK^W; zN^K>38HCKH#Otm)sx*810di9es2rRB*7T!KjGtyf1Z^BY1pssbKmG90lK81l?WdjR zr|6G|%Q7E+YSa5`w;{PUL>r&?;ipQZD}|p1*aBbwt^Ho%r_g?ypPs~7q&7e81M?)$ zPlfh&=Rc&s!z0++dwxZrRQ9&fAGEi5(cbPs zL6Eaa=nssGuB;nO3p^Z4n!XLpY@qtm-C$<#1ATG;=IIP!fgz0MMi|XlgAt#BjX`Bh zXpp9$ri&?`_Dl`SM_4la6QN7Ij>;hCJpOwn{6)T=Kwxk&eGutEpIU8;xm)(uaAN$D zmqLqaEMY`-+`OY{mkrj!Tp*_nO@*nJq9yh?vZqjGF!EEN3cDdDs?YhS*!hH?vHOeU4%4~lnq5g7e+V}b-lT9-B|ZRdVC-`m z2==JwO;)C6MnVf&%Ne_ztGP}6?_MC7Wf%SYA)B$=z%`uQ@X&G zb^VN>b7&r5<7cGNBxmkJ1iUuTp$$jUmzVN00{v`(_!$vrTn+pToBx^tzb!8n|8;Ye z795=x{%gfhs_-`nDLhWk%Q!@3eZ%;#>vt|@#m{}`kzxFo)bg$txkuu^9-S_RbQ{Be z&CFk%|B@_rB>pQa%s(pswQwW|6juIYEg}}i&#k@P!+&4Ri-riO<^1VkAO35nOtauG ztx`EDLaEdFo z-IWt4rg4Yn!NzgWwO3R$xtomdkE$Btv-=ymX7Pl<*+~dkOkJ!)ve{6{IG3UeIYlqy zrWQ9)&Jxk;cbs0#6H1hS#~HYQ+GV45XP0(u@;& z3<+iG$GzByn2Hi5BW!F=VRt)CGVX59sx_Hf0I2i$gII6IIJw~&+zNeaRtbI7yuEAj z5=t%Gdk4|Y^J?7bEcUt%<6l!w=F-Ry`z4Jm9`zPv7!4CwY0gkUS>sucuyS0?KY;uU zqphq9NA9F7;TA=Df1T*w1H+|?;9=tn_jFBkf=crF;e+!|WM>#u zouPpm{8UaWp*%uo$TW<5p7Khm16G$`_yS|rGy8b8bgNNIvd(!eECGGkoXR#|R$`@9 zkE2KgkXf0?1c|tc@a62KrB;ut1dyP4O($s<2MRh?)Hny`jgMM>*=7s({cZii2#DWtUD7F)-~r(FatM{v6G29N%+{fqgCcd3n91*^tn2j?l1oz^@|8cwX&_I(C7mCcrE2e{qJ2{9uUZ_A0p{1| zRXr7rufZHpIp?+KDN$lWRARMIV$yffhtYSj{fLZAaMr$3WUAxNyGlClEiV~8yizYX zx9Hhw?1DD*LDL_pkb+Q1=#xD8t1dzo@6G;-R>G-N`g5t2W@&qYy#^WyeUoYlebdt? zkSs@2p;ws-Y8#N+Jc(OL;{9L%L2mfzp(eCj``MvIPiVfcyoVi#D_cg@Lt*A$SvS

z#t($eH_E?EpXVDfP(dr-9@0J{=*oNYy8>SeVo>dKeM!AzJNb5n{~v%X?RiQ7asEJq&yeG~eS7kHHT)qDz^%za8mbtp5)wxb9eFXF9@`SR?aj8?sD84lKI@$SytP3~ z5&oLPebQ~6mI?mG%Ue25X5cb>g?3$#Q&<50MOTQOZrZ2AGXYX9EbUm*iWZ9LHU%G1 zZKhMIQd7aPtVyi6{7xb4_WAKzQy%M2(vK-3SD*k6g913Fp=;(zn5ufZ+MJ^6xG&35 zAW+ojMIknuqFvW7MM*sNyt%&XQm!TIZXTe7n^n;QF~^fqYax_+cmqFWUN3Lp-^}Zi zLsW6o4|z2Jd6k4FAB0wbW}l4%$|=VfZ8R3%G?oWp*0G|SEi&scOh0FPvfPIbWauFP z#;%muloo^?YOj2oU!OrfUd-Q*{AS_UV%cY>s}8yayO16+J2-cLkm_PaHW#kwL1O2` zA0p=49hQiy%HPELyXsm1qpTPX|CWg0aaCc0?1_hk^$yIew@l@02JO^7yW{3wh;{^` z%#R^GZ+q3w&CHipc66XqrQ6B*)gH1BR5%3$G<4k;LmF1@{Hn!FXu$p!`TXJsbk#Mp zt^ozB51dL~u)a3d*HzbU!O89V16f}<^Z9BtoMpe0_Uz9qPO)qY$c!R!CSHqir+|=?$*(`WMlwexLAa0s?qjb%h-=a}y zUE17acoXef5+g83mgT=3GPNp8=BA2o06Z{qClcgU1smeb{FT@p}8HCdENBI1N^9B8!dq6!Ot)F8Lsq_c%%tDdhVH~B!i|yhCKIz4e z%O`*0JMamGInQ!K6WZ(Ji!0jjyea(CMpADQ|0EVyTtFaDPG;;p#6~(h-Rb&);b2}4 zgrAnUvTL`LK)03$iCB#B(D)|Zj?4#0g>HA;!K!KlKKSmp@$G1QHy7Z$MdRC|15mh$ zbYN%fyW>~vgQfOk3+t(TU&h-rH=Y(mfYbF0)t@aobi%I~WBG({J+fmvBK&CGq3RsfqYZc@!<^H%+?VSp7-*jZc4S`Dpsn zgJYtjMLuwCo_s>f6F0t35joCbeMDXix1dvAzE%Bk%yg<16gsu_!_KTlMzcPNZ84Iw+kKA>shf}bo27gUI89`V+WozI&F~*Y; z6G{2cS77a_9P#?r<1qZb*u@^;&aH+$*oW1C$`P$43&=%3v;PuIyl~f@*?#7mXXpLQ z!u>#x!{S!Bo7;0rHyj7&y2G*czq`MaE?)MJQmYWvI!Uh|d$m=5p&xtsFLc3Y?Y2I@ zag<$d3)*Ag_Llp(5z74(a}nUFldW{iGvuHJ!zg;I?3k80W6NCa8TG zi9gz-{ak(M#$`f_V|WL=y78@Zh_%7Y3N}J{CeTgFSFy0i-qV+b*n;>{i=w}tzh?LQcfVA;->+8KxrmKoH=29~Tr#)cE3FLu0tE3g z?H(3qYI~ey%EvH^$CwBKAfK>ed$8vq}JA2@$6wCEe4Ao@b86ZJI2pHP7_Zm+cfGXWqo zAWrFRn|K-J7cYtDupIPWv!BaZC?}XCy!l;KOuh*!o8+ruKE{2RG*LbCNV5&1bM&nn zHYoqsPM>~E)r0e$7)(PGJtLefs^*WZl{+#aL?9bOX+E~g>0vpR+=>Gx#0nrca+`$~ zLrr_EWLeRXtrE7S@WSpz7=A#MdE4bECUMl)WcTjsh6hAQ-T7<6$ODHkD~iL%SS&+< z2El>>5rFJ`=CiIHAfD&J5L6H}(*YC(4Q^vAPzD9uzBp8ntqT5$t$M=7KaVltMf~?M zJp`*8Pa8ky0&FCVt#LRQXj}ZpQ6guDz_M05>Sa;kQMV@9oa)6`Is#$)+I@H`fIaNI ze1I4B%WkGzT8nLN8VYK9L23%3=>Z7B8>VSO0r{;}Zs zs1IbxTJ_)V7ch?|nAqn{oMcGy&je2g*t4PPhz_tVDwZHt$BMMmw1)>9p`{0j^8t*s zT5!gm6viz9&Kwy4e2+?kDHqOlg2$syRd7}-IKRh&^c)J+b7Bw~yH&-eRz1Lg%sef;c7KuRePG2`6c z{eId2v7Lrd>cVvOiNz(a<&JIkRVgcIE zHTfyGI*}i6xqel#^%<2YmJtZ}Rt5X1R4yU&mOsP;q&YzGEu2gr%W_?PHTOi|ENp1GKlp7&%7$DkDl)QR=viWHZpB(i z@|lOio5b#J--d&$aYJL!`Q7*NY?bsXN(xCywN^>}R!Q6Hl4?0habzf9r%e@cKBqU`vibYPWgJ&EcCW#U70;a+YnDSCZ<)aCOBlho1UeL7GJamO+@2Ag;uhc zC_C23PvU?V;iy3h*x%GAb2xaK%RNW=>7F5BkB>^kOhAJMA3mi##lv~wo{N-QjG`|k+A zDJNJ>RB3*Fngqr$D^SHn){`3LgN1VIR&D{0Mrk_y0@&dkO{s_|g!fk`rp$S26&cBbT*lk?}eD?4bUC~{28>l=e__S+%YVy2z@VFJZY zuzru`QrN^%2iV)q0Rv+1vgMz}Y+x2@;vL36GyHDKPWj&2_q}M=S`RKtAsw~*W#1gKAR3P`bOZl6w0AAEXLo>OqbVp zTS83XxHBOT=KNrv)9M|O0_YvLKo!V{kh9q#>o?@r1KafC?meRC4+FwS(DOYeT_~T< z$PdGZh4`c#ltvA_NP#boa?bf#R%W(6gk{VM69x^^f2-)<01s(o83_+Trpx1DhRwq@ zuHJ7#DTYElFXi?AIiIE8*RHUl)l#^cwut-rUaZc>tNW4Mzs&&{>+MI;9{>Pq9NRRIz&XX1PnKR{Z^*A!hYe>t@)D<@jr+DXAmS107d3)SE>9mt|4*gz$=Eg^Kt0Qe$4GB>j^FjIs#b$BX6fV}7I^P-!v$Z5?oqX*xdyEV>`q?QS>qsVHQ2 z^*7IT;|#=ebK&m^lm<()~{dNW$%`mLBu6C1@%ceU(3+>~_cKpCN6J!PC;Uu3trZP{#9*7yavY z29vbCM*hyFrIJfGhw46*-_V1d_tDdoj*Ky%xrj$z=zKTs4Mhe%6hBA3Rp;R7@)^IL zbEIcJ?qhXmm7b3)ksdQ27f@tc{w{6LI88rADl<}|>1@hp{bec`7U*P#MEUJ82!Ule zHo4X$6MFXF?Ujocc;zB67I_siJF#`mPiVGGOx;1e9Ca`UR57e|o7ggQd+`MQrX!i@ zJrK!cY!7My(^ps4Wgq7_IgqHsnJH%>_RO@!sS(llzsF zUyOeSzB@Yq{CBY~m-?Tw%9cN|i-9goz(6?C`Nv-CVeZuW#`loT(@xm*YF(GMZIs`- zF7LC_iqUqxsh4H&qTL!qy}+9rZ~YAWT_*BR<5;nCMCIvFkHdF#spBtWfx8GOi5@}iW1NL5-_>Kbo|baaA5zSU`SeU^ z#sv%0x%R;K2@KZ~V-7YuQ(1=f%7pG>`dsSay!|7NJ8Ui&4apMP7G$JNO1^EsA5#cq zNt1XfIp@CzlRaRq8UAtg5ABMsC~S*n{FX%*zTbXJQ(*3n#3cS0$N-_P{-w6K&7eIN zIQ;?ZLbf?p(*vnj50U>yz_-LTjv;sf2cVV^2O?^Kk}4#pJs0JH7K!pLG%(U0;)0jk zo<#YHyA_j%$mq{kmmOW4ug+PDT;!|zb=LY8Rjbm|8Lraz<=5RtDEB(%V!2b^EmCf- zXt|FaRUFp__O*pNFv>68fcS0$ntRahN~b*a;9u{b7*#W78gQq5*@Op93@)2bK8 zoYE#MW01E!+Vz7Nil;~^IQ}5@BOZo8!7QNluVzP)?JE&9eSixI=w`yRSP+YLUBTrv z3p#ld#Z5PFnsC#@8vwGP7xV1<)Uuko0a)}&%mTo&nnoKDoh{;lILl4)nzf=BXp{KCJ>Es+mFnQOz9!h-y_s4~Kzz@zl(OeYk1i zO+QgGuu#n=Y~`CIK4CKHG+F1+&YK~;iSj0enIh!3uSayU9B=+ z+=UKAeO?bxTRL;TWye3L8hC-<<=od<9zKBenR-KnABO}o6o5tM*%<$oC%*oeexfpf z@$|s$?vsUQQ?J2yG_k~8-&L*n)691ZE!`O}JaB!K{E0|nOSJ3$7?IHRgHHUAFiCS% zhgxc)c-0)-(F2^+$B!iE66p3fiK1B*E#%iEc$YlJ`;U{4S+Vor`7R$v0k{u-i}CS& z(oWBMod}sI1}3WH4f(i=H{@gCxE{mD!oK8V;o5%OlriA|ZiIc4xM}B`!DxOh4p~_^ zn5^8)uW8(XUyHFa_@0K0%gUro0W04I3q<=tgD|Uksa0M`ip#{{c~3j1M-0%qUJ-&d zW}lU2pmx>-{%@m!~3#^?GVb9KfqIq$_P$v28hibd)0=A`HURio(S$^ z#zgrGEpX)Chv&g}DfMmz-~CIxkr?w8mV>0Z;5!2F{ecMDs^Vigr(+Ru;hVnYzdq?t zQR$7GcjZyXqs?YKa~|>5-?lk7(3vG-MD$rQPgW4>9!d%dkqB>6(Zq3K5h6^K;bK(Y zWZ4wnyzc~h=fxvcW zH$>QVhwH{W=gE179-16^{HWdA+;N&uny-TI+I;oBg>E~9uO_+e@Z+l*Ha>Fs!6hlsVmE=(b$BQMmD zV&nzk4)TI<2YI21pU4YBK=OjH33)-dgS;S=CocpIF9@5E7lf6-3yOot2%x_*Punyj zwADg2FyI@5qG<;Uv^l$g&ov9M0nQVbO8Z8mztQn*|3I(OD`~A+$tu_t$?1MIs8@e0 ze0C$99Ve1_hczxl-3q-*K8M6u7foz^7%W=nft)+Y#op*l0fgOl{WYpwH;y8^c4pMN z4235(#UMX(WC1mJ6>6%XSYmC6tu$Z=>g0S~5!Us<9L*QDoiX^sQriI*n~T86JrRV;R4A&k1Q3HR{qaTKW1g>XdW`S-y@%{@ZN3ra z`Bvt=6`FVCnIu~6thsm${mt|Tb_%=ivA<=0ApK4GGv85F4E25hLZH7D;gUkX#gtF{ z^{_lZ8TpX*P9sLd(Rbi!AifmVkw{Ot91Wqp zhV)h(I<&M8K#6@9k-2u*-$&VYd`e8KaI`kbbpv23Qf^EJJJk#$P^ij~yVXAp4%yzm z8&!LQ>!rO2abYyQYXRCk4;lbo7Q~lk#Dh_e2vsD%`afe)Nir(l-Dny^}tVAg2fw;Uts(JYmiT@ zwx+L@iqCB-N5E%UAgb`$gF(Ym@L9_Y*tql*;Ijc9Nilr3FJPL`6Qu5dsC~s{ylb2={iNmZCb~%vH5Wu?u#T#9!DRy>1NiA9k&^h zdN*R+rfjn)y+!|Vo1=E#m~op#`L8+ENe$mfbfsY2<}|~H@J7|RjhP2wts@b6a1NwK zKF*JEu_V9+-orpt8JH=9S_HE?&dVOe%k9tZypFlt#-CkBth+?wG%#;_OqXnc7_hdPeFf^IRD<@gWMqMmI>J_>oO{^A^XX4pfKZ1-f6u| zbWw2;@>F4-(~jaxEL&7O+5m-myxh{DJmmNMObFr?88w!Jg#AC`M_&bYMgLJ{jog zI-VQY#xQV;P4MbEIe?4bZv5_!-yZz#i{D=S9){mO{2qhfe*B(*-vRudgx@57Psi^d zez9R&-4K4y!*2?|U&n76zw_~%!S9v$&DM8arM7W{B3DC0h4IL3b%VrSxE}4v^M9+Y z!)vKsGGUQ8$~mTqP-PrnXmzy!q-7FNo~WMRO>az{g%)(qo8|hx5!B~A^_3tMK{M)O zZ%6uHb7~L0sD&%Kkpd{!c7=8~gf2nC2eS5{4l##RfJJLuwk+=_+3gy-&TiMdCbY}7 zZ&ge)CQPb4`NDmP6X}>Nta{KE4*48rH|(#!S(M z_#^f4 zNqNv<7;hiq*3T@JgQv}evfC~Y6G3R;VH6*<#2Tyxt)95AjW^)g=1VS>&-F+?n8cWh zZZSZa2x#El=mobwqps+uP!~2Xb9nwJD<5JZ*qw(pYkjb-mMCsMw?BlIY=!=f_)|Z? zapO-JJTNZVjQByjs2YZa)c#+fHE_JxZ||=#J5CGcL<_&2H(-q=F+z{~9PT^ip7Rv% zmDX58Q@Ts)@Dz7IM%v(MgZ zulHVi?X^enlaOT;Uz+)Z^bxX*;Y%x@c=W-OAfIIMMaTmBxMU%T6j>CBNCzrf9}*4X zCvW*AB>L=GibSbhZ4wDKJw54%_Z(j!edaw*pSv4fkCUfTIk53u_`ic^V6~0t1%v+E z@H}ND;vJ=YUWy-EPZa*|=n0@j7}BdvhbIt_f0>^66HGtXdDFo|##bXhNjxm=66AfjUndvFUv8q~gbb|voDTrO z*+w&X;jC?!PBiw81}Y2kpCJiU01#5KT(CHzkr(-c5T1x(u{7fiaiw>VRHVdqox%dN{WPYI>uc!FuS034Bhd8@Ba6bFy=n5hISAr z)b})+i?c*L_47iDB^Y3UM-2yAIe&<>A7-w>i0oQ3*C55V`f>$$ifoZ)eSf7w_)Y9x zmYE1S*5J>x78e9;HxaOSWAapNP{T9DgfKnlT)?31%N6gcYB(<35}PHyN^?Cs_jivL zxL)S{$n885$7jR`Mp;@+dSrJ@THW?!=cQh;tpq7V)nr zmU1%H#f+8o5AH#L&a6S_Z_`h2gIEvnOB7!Q`6Y%gL;Qj!8-|hZHxf&nik@&o29o^X zotuO|Q%9TSfT$iM&$quw?q&~^;M2(al#WKCCrxO4&f(0?m%N9z1MlN9nkBP0)FCYe z(?^YlUEfw4BUO8{qZMQ-``(<{gQa-pu`ks0Ni3@e%SO=`(kvU0X1SyVS2_TT%Yj;4 zRG|>a!e|P2SRYG0@}+`g@ckM|iQ#n=t>~n6>w!)2-WqyIP2|6Z#I(^x{nM&Y_dd35 zb5lb76r2C(hUrc7|F9m((RbE#qcKBniR;8!d%zQ ziygggPDdw+pQS=zY8KG3p&6VCzD2q4IF_#QWkN~NNu4j7UBF!NvE;Irrb*u+5}W^2 z$BAOkRK`|2=-C!KdRc4dQP7I9_?u$V9^;@f2&A%gIhF3MBb^u#Iy>j=G#wdOXxFtD zfkQwPC8NM6@ntbExGXGeIiCHFGOR9KhQCoq`eDF}xd*{(z=2#z5h4E)Ht3g!qJwvT=-!ltxsQxWY@kg-h z%9V3(%`k>-ieFVT#Np$Y*HEkD8kO9&djv%>ks0MTa20=xC9bNWN6!i^^EY?!#5@F_ zXHK0UcN0`wF22mCDqFLa{c4ZvRm@V5l`TL%2ChysVrO^0^2G#$NW#`^ccb8!X7*%hhp zP4PbfJ-9ChzbuJoobOB3Bq_s;lJ@5m+tNcA6qg8@8H@DZ?CsS{Gd<|zJYVx(rJs_xZz7&25^YF&q1p@7q zp>cz)V-6nly574($F{6WK9=V&Me(zfKE=BSgj~%3^ffq~598ROjX%Xhpr|O8J+Kew zvk(M9T|g_AZOv-|UgO8eg*~s+z5NF>uXVT$XyH8ccX(_nE=MxvT`YTPo*^_Y?72A1 zYR`^yv-Xyv7}j~Mxw!5TVd2N~r}X`L_h8nrv9PTxPk^0088#M&RUvSj8#3J=AX_{u zaUtevZUAHG`yzT&Mun@Nw7clemnci|^$PEacu0ZgzHiRC^hp*5mFUq8!BFo^KnrgS zVj!np!r>1RLiY*?Z#~^x(jV||VvR^vQoR89#mMtSjf_OI;5^?BMs1AmiCQb|$dUn` zWAQGip8D9O+eGyopPvNgT>01t%ZbYg=PQArtVAS3y-Toy1I-yfucvBCRzHY}53*r{6-;bj zqMb8aikacIH%N`#kq4(dz6>PX0N@dbmP}M=6s%}Gc>4EOh%1$5&@*1hT;g(LhJL zsxX$bAJh*q8mQ(J)y*9WkK^D*Y_b`xpd0HwaU&um{}ypq>*T!ihqEyb_7~7j1q7l+`|uII4{E0I z8adGRDL5&NyItV?P(FL5mVL43PgpJZy!}!&#kxq*6qUT#^DBA( z6X12Xj#@R~kQzS4XFm1hwD8aga5kO@VY1$2(UcjA=OwE~pBB|`f*)`cD(dnS@zQ<~ zu%`1#4k^V+VE^$raSocNtXy%Om0I)zNZkADIspkZ;bIUDs~6ZMN7T|9 zk5ejXvZ%B*Tz%~LNS!?hHeb%wUZbubQwwV*0u7nS#um)bvc_%1&8kL|XY3c>7`)h> zcWC3c(4KS8W4?^RRdA183*Yzna|vD#)E+=|DGgapt|EL7Lv^98Y|j?g!G>xW6mCA^ z&uFJ61!>+LZ&8}neyv)SC^<>%vO_~08wYEbfD91VE61i5*Uf5WI}hG7Kr3TY)_zjZ zJ4%+-db2=LRmep&1N|miMDAW&k6x11PxH_>f_Tox5@r6%2|@IMQ;W&D{fEjMALbiK zwxp!ul`7{&=UtOePyI%jGWOW`Nr26q4_kXaVG{;nbY_fysoLlGqAs<-m+b5>tLiqn zQ+U!GPx5UzpusPaxJF(9H&Gha*K7fBM*~ezBku=NoM*b;HTEt>K1f#AXv2=bKT&fI^*eQTw4@PE8o#`$j|zX!_sjL%xfJh}dn5BnE>^6md?6ZF4yt@Qs7 z)BkPnT4n2t`fpSGE_UNM*EaFKxPvC>KLM!*o~H9#_kYa^uq_v;jp&AS@F3bd z+&706xLKRge`7(y4TvtQBU3b6p5LpY4@w?WB!%(6acAx!kR&D>hI5Bf;LD^A9r+sg z0&e6GMpp_`4nQH=B$3O#)oqxy%9YenFDX5=0lArd-gMlQK z8?Nl?qvt9)qMs3^zQL9wT=;sd-(zs^>Y$Nov3`$W{T}2MsyiBQ3nP>kN^Zs|2&aXT zzvLIp8*u>!-!7Y0-w?VhwJ1Jq&;;P{+tx>+P_A2NoUv}a6WHPLK3wX84KRnKOVS6n82VPo6>&Ao! z2BF(aV|!f?CQeOlyn-1@V&kMTY;F@{~)zTDlP5BjX*plBxc#j|Qb=y~juY;^3(fN5Qlp*OV1NukMPXzCW zsg|twK~4Ga{aU<_BmQ%sQQ(%La3L0{qK*;^u|C7flsb#aBn*kbi$`|_=NrhV7XHH8 zNQdKsP-Di&ff9w|zG}eMGpR1X34NSBg6+(a&gFH1nCiU(GgWubkcfw_WSA^UrXj)CQ|x735ft7jeUt{?lfqUU_;6&!(-!0Yb+ zNEE=p-G_Gkuzis2W$`Sr(<t+P7ECRpu^Yvu)C*&y(H{ST8Ai<1)D#5LDeBg_+CG;@I zVFxL8pcqcosS_qsdeeqC$oDM!(5mc%7r(h)+lSIKu)JS=(^1wZ2#clA&f}+|5Z>Xyt-dcB7P9yxk`6t9T@cDG zjh{VoAgQY9&vg(KF0?4@#j+^u2JDB}4cH91dK>m*qJ0|ZZSK?PEf#mHM(v`Yt17V` zydzPp#{>Kl?^RK7DB~_a1EPN3`k?arul&2pv>>0fz;haJH`)PqE9^!TAje=gS}-oQ znO4At!1I9i#k{C;l-+>2Xu^IQs*S`Dy6;A>m^n~*XHCC+hvh`DD;C!w`%(kaE0O$C z8`5iR$d%}02X%LEO*dZ#yy;j%?P6(919%cwV`58E>t{)v-v3VkSti97knJ@oDZovW zvg9o-HZUopc&1ItNS!O;WlW0EcZ={6KjfdPHNx+fJ;_TynF{SmhAW%xwI>U)axJkZ zEn+8%?*q2=Qai?h9?J(lX3KwxJxP4uwI33){QP|P?{3T$?~k>AlD8#FtUsCwe!Y^a^BCa$zS$W66 zu=1d@_#)1=GA#8?Jh8d=eCB715+!C8g3!s$Tgw_+OV2cx4u{o!Fk|y{h zWET1+Blwq$G!6TuDr5FedB)8+`Yno~q8XrC6*p%U(w+yS&IkX;4GD|A-nE`Ma_{gV ze#Y7bKc2m~84rmcWiL1{P#)72TTw4c=bxNb8Y6I8WB8ZTI_wQ^T71T7rSPwsR(JrO z0CI>W>xk0|JByxnrzLE26e3%UkJB2ZVa=v-Qj>bT3d+sp1r2s7HLbfAauKtHd7hy%vg{-LP z5^0}X%x)3qhffyM<$4iGRWA?k37%U}*A9570>A)tDg0S(DPaq(*jF#wJSz6pkzzsU z-gwPGC!0s~(gOv6iHnl**VfS(GC5h7xUV>~NX7$9DBrZCESv^oZyx=}@(FL(Xuw-E^ zE+ptQ>+}Y;#xCTyg|*(7b-hl zEGFMlPs8xCNr>S_2HZ`_(m=~Ww8XL_ONZiNbtYD3u%e(4f4MB~@EwS!Q^l1D+)U@} zKe|E1D7!!zh|j}dPE=F}@l>p_Oui^y5p^{~Ce9hkTg%9NzQR3%yx90fA`UK9nJF)`>>8W2Kj1w9Tgl#-zt4rG)EEL zZ2b{o|G2%8ZU>86AV#k&9Xo zU!tl}3Ir4fUi1!L6hk?wj~3^{aQra;hY#>oKEG%1nE#XW$sgv;$1i>#Wo@!#!>Hu> z%mW2Ur?yX$8F`OFfn+Y#bB4}BAHL6cfV={gznGK(Ro1}tt~(j3hbA!#o1HU3d#Dw1 zPlnwV$%P$v8AkCl$Y~w;x|Vq`$@hQszFqNT->0@=Qe~hld8Kry8txZn+^yi&71cCI2K@ z{mA(uAob3r*UL{gou~i4Q2l*?`TK1C4L=+{9;OQ6J-Rd4u?~PzL4|V!S_Tp2Z}j50 z`Dr~H>f4_L)L28ezzA-p00pua|KLj(_PYNwHW$L zHw0D^%wh>V!Ny%C7XK>V`-F+ZqTZgwl_U=9o)BbAqlJ#$ep`)Whu}DUO&mIx1xYg` zMgi7S{DtC)p6~F`BUd|)n%_GZ9>zJAhy_l$T0eZrE#C)i~bLWDieD(JWFO=8c zM}J22cOPE{TR1bHv-P*#f1zyuUz?!+HELV>YSaI1S-XGwN5=MXEUuqM)j0j4e?ATN zMIK(Lw4QX}ILd)nmw=mp2w&?RHdpTLbwDfoHS#`xEY$mV3SBkoItn%t4!OVBTQ=#OXw)1_sJt@x!FFC*sCOx~ z03(IUg@tNbeU4I1wx#?1!6qMLre>`YeHU{T6E8n`%J~Ln5@Oz~-M(-(@C?6e0B9}M zqjtMA+qvgY5Y@y!pw4gX{3JU_qXR%XjCRiAYb2gwzfb&n?`wrAZ~@zHrp_W_x)A$c zoESRf_pvvgX~c0VcHRXB(r25Z_p!V;4l}_h%xqCRp~wu!jtkhyc^Ii;RzeTotp{LE z`~c_;qkRxIXM)%gBM7ts0}xTe+ZE+Er59no|FZn1a07Z1OCj#&zbn7#rVj<_jk)-) zEWe5Ojv3h`9o@Kz@uwanaW^;QvY3U+_kpO%IWut$jomZ&HGB$4CdqH=79@AVSa+DC zLtqd|U*V%MvP*iXPL&n3@|(bELHdz!8o4$GOysN}b;k1?+W^1wwHmNU zvU+d0$STp#oiqI|evH1}pS)OVp+9cL{@MoCvn(6nMq{KpXo7x3{1>Y97k6 z!TU6gc;Y>(+T{kN9g^FS0-V5-kvY-y{ft``m(y=Kr)$l-+w6RdfF38s_mgvPtX26@ z7v7BgD7#%|1>mvPv)vfm(yMFF6`eY8JfZbeX)TGC#gmAl9>|-w?;jK@j+xA(mzfrI zvRK65%$Dibr&L;0y_0^xRRmEC?F>@^V9nSS6Z268QU#ssRx@`hVEbbc!VNqQp&h#4 z|8O~;k%T;2I~tiasd{I4kImJ2#?ll9zG-t3c$rN}Kf6Tv|^FwsWl&32$R zSK`}k5HP?LcHY<szG|D%H_u}I^Z_@%YVI54@BCPD&vONcKp+&UZczxRcfCQQ>6}>QBCj3*J3o#v-`MD`?UUpEaBikpjw#RlP>!1czg~B(=6U0EV6lDIf*bJ}U1=gG6_pK_W%Lx>!xMYpu$wmeVQ3We>)RJ&Z8w3|qt znGun5hQIvoHp0&j-|yGs4DkKr+$}YV-*5a5_}y;T%62ZlhkCp5?s$1_Ig!wM@+@LZ z`iWrYC>N8+^XOvX@u|DY^rM=`qfX%7VtLN&2lj$I$C@m8e)LNs&$b>KhR2L{fp)aR z{7yMk&F|hDO7vAX+qv`GF?kLz@sa0)_jFk@0-QN>2srcPaZlY8nd>E}2?r28-L+>* z$+J!8EIo5s?^!hldk~JJ@2B@es_>OOWawteE6(p8W=QCHJZh_6eb!ZR%Fl*7Z3rYLT zki{Ql3nkY0B8&nHq!!>YR2Dja(EunSH%FX$DTtd-QZ5Q?ILPG2eXm zNg#Y;;T&#NCDy?tsxznBW6V3xDszpK{;odceEA_1=ps0RE@aLUHFduIF?zR)R2%-^ zZI8ggD29h=fp4*Dz|h0ABt5DWe5~WPntntkax&@RLyTX(Plz!OFDQdwwEj<@City2 z`m{TE zbPjr8lkUdp32l>VF$ZVO2gSeNs3+#mAMa=6eRX(&ueO7w%*SnqYcGCk;mOz;(~fwG zVt$~bs&}^u4**;)+6-DsTx)XwlJAp#a`fmab*I3Tjt`@o{0O?i#hhS=*>JPO16l}& z3qqi-NJCyRm_oIHXCy6{YP|?gAs+v=Oi`rhKFa|-)bfcjr3NT{j9Mpzm#n-ZnrPeZ z4ll)f`W~yJ{=%lpPO^>7*UjkP@O2A_<+|`uFgJGV81-is&+<7Gv_ej%h`nJl$5EhXq>W@!mCE(7kWY*@))rV16Ul@4=9!>ti z+5^O=(lu7ZZ!Vbak(ae>X$Gb>a&CM-?6mR!4SuMh^YH%-TouSq23%m|Cx;o7(Jvc| z%coDEU&5zVCO=WM8>e4({YXXf<42F$le~EgJ%%~JczO)tyq*I8UrLYn!L9M7N2|pr z70{y%P#b!5onDq6uONA*GJQ6LPAbu7X|x+hk98leh#r3WtWD8F{3Fq4^(_$5@ixDl zJ`;L+e!S?jA$C!!&&~=$gFyZwpOGJn_1SU!Fojs31@KQ$+KMQs7BI>|`?hW+9D zc3^*aDD3U0`s#xw(FZBn&xl~gsP#z2`|Sh zTqOOA_EQJgZ_$40UbkBNsS&fE+9KnY-%qVQQQ!-7vmN$P?RnVotpM9ugo;##;tphGpBb~x(Scp?^`cgHQ@Uk_b>Q9KfcU! z+`r)49``T!J-2-YyH;J3mqtN9!3u`cPau(_n7DHx9J`{pXO5J?uPOYBG?iLs+w<=F zrig#gi#2v=(*V1b1sPIf6p=tIwKts~g0hgk9=$b<yNZ$&}ykz78F=Day7j8gFJfjPs^7T5+&p(RBFz?FO7hTX8I?S67p2hED zdi{mfB)Cp?Kl9Exf2-6U*P)Y2>~SmFjkCvF5&ZUzZxpY;{Nfcc(p#;=RlFk20sP_> zv!_6WlhyO^g7))_e<|{b$K&ngz)GkA9sMct|CJ|;pRf?%G2?OmKaad!b7>y^-@ zfOg~PvJ|oX3h3gO_mgdqc}RWoeE>+V^=zRFBuA2da?Zurw*fu=fQFhL1`nji5FT6d zxfYo|I#_~bRzwyREdZJOXIN0Ex(A{toQvL>!8f@98_Z(RSp0Dyu4^v(lWHIhEnB9__~AZ;wbt`19j~p+zNpFpL2_KKTAoC43OXoXYwC zoJYFCc?8b&naAQe70tu=E5sc?jFZLGJcJL{1CT;12bjF>X_)VMezF9L#_%fQqq7<7 zOq4{#23TPQ;!=<{Qu^Ktm+e7mOjiHTLd9w}pS9r`@iTlL`sz~h z3)k zyg9sc5O8sbc6O`Ly z9R;Exa6Zw1>R8ZdsKZ{I*KYUQ&T&2ZP&@@jjOB*@#GZS1v7s^=!sTz#nmZT%!ks3) zbz-TX6d;1W&9w%n#D|2ZH1EKc)7&T2{I|ltu%D;(b0oW>BwP$7;iMd3AtxQe??nyo zM3f;U*&v{btTOq1_B{L9k2}v$Upth!0dA-mxB+?Jj%NHuRxJ;qqQZR)gE8LRb+?zt zK|NP%;KXEygd5z{=cs|lo>yT$Is&0a(Uw4eOd6^4f_A$!+X0ECcp25tk;O|fB1nJ! zIXQiimpetc2J|?=3&!g|8$WHjT@3Jy*MBMwkM2abn!3@(zC|z*FHa#kcjW?6YAQ`( z^E2iSWLGa+>$-xhf0F1JeH2CjBq+)k<*=k75tcBp>CS?nier+winuQ2qG<6R$AzvG&(Id|}L1 zvneB&wGP*}aqjDDMmb_CfI>ngrB|Q}kh=mbu|f7&)?Pt!OO85Xn9o)AfU3Yhtw#O@ zxLW}3dB+O37E&thq2RnZ`ko2!v;u4>F|1rgOJ;l(b z&A49Txo>2oCNPzukrbmMvMhu3=NS_WBm zgX(uEhO;aE_?aeSSWcDj@kkR+O%32N>l2SQCDhRrmMu=16D>_sP&@lfo;bWy#wAhG ztT-HvB|ZZUernCN>U7lmOtB5@_~?__*kWOd*-Q7Rg$W6p3BVw*Ohi}H6r?19(j@Sc zKxP&i7(5?ip>Cc6lJdP%HuKsGL5ftTXSanohRQ5&E-bERkHs_pUlcD85X^H2w1yF-E3|cuKyx+DDRG13`4jy0!OP3JCHa@ zzA%b|WjI~F6qH|Hi=5RF`0%5!oGGjm$FM=4M(NTFHtDmdOOu0k8m3{g;%WW*e529B z7&_3VhJ#3|JvhE%;#FfM?ZJZP1l!uPV@Yl&;-y0YCNf#4h*r|suPjb*CWT-{gkLiF zf(6={OxfaD)H9iI2YrPX>-nXCFHxh~S>ZEA)vmA{1>&6D;W$#YD*I~ms+E5!dR&6I zUcQ}`Yj@jCN;U83`=2X%A5;@tSW-V#_SHN)ikzphF9|JypyJx8+Ac0YKl~Va0Kcx! zw!hfLsYq`CyB5fp20zSTvTCl;m^rV!ZR2MjJo3}Wv1DJft}DOsLudf{XS%+umI0;p z8+v@sZ4|B3F$Uhxrtv-_V5$ZuIEN>7mP3g@E6h=J97N7J(L>IX%e-?=LG;Cs!2|jo zi?-YS!dkGl=Q@^ALG@T1zm(DwPhpHGm_IFv-0=-ye4N}tiXsF7s}9^qpsJOO6^{qk zym&k=>yK`z3SIFGrbwyi;^^vX_%6Py@@zxLDvG;sqBb#>9PLP@fJjQ+3LFndStx|9 zPy`}^0uZ%`ebrGF$H3w-o{@+ifjn+h7f0=9>gg7|*d-@Bo8p^QHSi_zrvTu{Qh^>eI z1s=wY4~o^U9`7HQwzK3bwCO<12Q;Y!XwV2nWcr>C_15Dh^paQTB>8R9f*?zxjZ={H zq$biDn}VpZx-X$CcE~f9{tRteOWoi1dgux|&lK`8+9dHE#9p;koru3!?3wneTQmty zx>9+faFR-Q4`9+*!;@7uqjb+h%y@6e&{pMO4&XPeufdti4e$`x^As&A`D|`bK45$a zuuO(r0scVc?l>sZgQ`CJ+{S3928Qlun$E|=fIN-=Oy+86)3*S<02bANL49)xD-j^T z%Ok<9Bpz@l>_=i_{RkH%ijG=bw{X7hXk_FI^nQ8Y1ALn?S_Rm0sY3}I=&~cH*5v7V zVg9?})cgYRtwtvDt$14Vio3M`aOs2HKy|TYp|E#fNL8Z{0z>X1#999eA_U3`iI%GJXY1}nSAjG(cfY)8VRY@jg3SQ1DF)H(&F7rQyr^Xa;0wSVh`4XV>3$7d zi+&!(M4T7B=cavLbm{%hukaHjE`~m0U7cJfq8|O`hB{RmpG638Z+x5@wSnAF=j?H- z)WqySkc&%$uW3c?>OUZF2>nn)+WV~I+DWYdx(looFwWicO3y*#p{_mHIrrq9if9bd zV?`dmh$I3pqdMUD^TX4%VRGS;I!?P{IuTBTE;AsFu@9V;^Yr<2I%W8{@1a$fv=Y}Q z0z5?6+W13ez2mmm!I2Sphjpejgv{s)dgGMdcdge~VadCWKLaw*DAqc^!WGZtFMV-`XU6@XlQ73GyPm{lf@(aX;9 zap$oaby3lsis!+0Bc^RK+)_7r@ywm|<@D}*oWDAs85|)vUVy0RyyrMP%X={5JjcAB zU?Vww^!*{sXG7S{qpNe8kQIVoYa39rfGO%G!>-P`3H72^x$A5-8@28%9D$Xtsb~Kl zegUp>&0PeJ=Ujo1iO-vi@_lH@0eK}OntyxFX?Nj$$hFB|3T^5m40JHCT-hDJWUyrT z)t;Cuwlm3@%sWK*;{);&yr$&bS?mHT9Sxj^|IYXv)_^(Tv1Rb9<%l!#+ri60OX;q! z`6DthvDSaA4m04p|ND%jA* z^I8^)V_HD+7e{kEr=dt3J^$A}k3n7*b}3E>I2P9cF%X-sTSqzFzB;KhyVX3?;6Y1l{*$4;mtf%WPAEA|`PSJ2W&ly9a}bpiv<!2}U&{&bJ0c&Pna3z=i&>@d- zLak^VlzHF{XdS}Kdt2arwBat6*pxSv?Ej)B1=OhmED~k;1tK(@}i!0Aqqv#2U)K zY-ybTSg0>Yj3!jAx){&CQn6F!WEIX@EW_x7wOG=OVsQXQu|Q}QAfqn@*9sv-f=oE5 zPbB69PYx~?4jbe*Qq+K)M!7pRq6)OAo1|*RH-x#U6Mgev-s36vOml)XzE;srqoGn5WM)`!VhN)a{l%Fz>=;~jYl&>KhQ>I=;psT#SIVYS;i*^ zql4H z!gFZTQ?htjgaDSTW)-eS65EOEQ?J*HQpW1HPp$0$Zlw-Iy>l}+7)_WSikwTyg~Mu9 zLc}{8y@gp6$aKDxa~EXt_sWvLPb&HQQzd_YwB+yo@VCPIjJ?o5J|5m#E0w-C3>R+i zDY*+}ch~CB%sD7s;7tU%Y&g}Pw$s_Z^gTT(C@~5tOOdrYx8SXRZrpPw8Ta+?`i=XM ze|p@PkY?`^&S$5{Hd_cxU z7193G{?v77NewK6(w{o&O||;cyBgO^U-XgE1b_obh>Cv@D*oa5 zQ-ou@Kh;*bB|ZNt@uz~}O_n;3fr=7Zuyyu|_ zts$PLVa&&@A=)q7&LK{bA+%>p8j-3JB;+585{tOc)T=3hCA0Qydxay|R?I7jJDGXa zCSa&wX%cM$qBmJ4;1V>@6OVG@pZ_BRgn`EoRSMhC1GwG9Gj{xYR3%J*{1@&L>O&Veh>B3ie|am4LkmD7GM+-b*8Y=Uf`K11#A#N zimW;hBDCTv$%jw#_@QcMW`5+G44lAH{FSyV!o$6C;W`Z<0%lWXTU4v%$wi19l=l;z7#=p4 zK|`lsTzbI`E($1APVzO}7e}S1L&?G?BxksRigr#}j!Yk{wU1W*0i1_?4%1Jh2_|Dq5!; z1xL&jz971&H*u)n`;&zBQR;n!7Nt6_EF`K-92v8c59ylS7xSeYdU<{yP)F%mq6T5f zYuKO%X>PyY0ubUUI4?XijbApHUw(mK5FPy;{w@tzzVCl$1O{~69OENQta3!zWv%lu zU<`6<;&t2(AZ$T_4(LiY3^H!M0<#(!x`GOeMRXP-jMXrTe|ee`@JJ@>82+7&ztg;n z8~$@ z+|6B}y+6W_Kq!P%7eM?EQbP{xO!PkdLy4<*Fo+vy#!K*AYw=xOfXqw{3B;g~ZV$?Q zOu78sZ37SQrT}r_1so7F3~lym+*+s~wABL6!{q9&Gm4X^U;-l^l-_#t;p*c4-8o*X z<`^||%zJO!diCK?7QYX9aNU>B3)3CFa8BoG_!a>ZL#A=X5j~EoEO{KOPYGt}l{B(x z?Ul4u-BoL`mEY1c>UpqPt!HyUm3&ouf#TzIKQ+VUHzNn8{*B42{4_9R{!h_zvhI^M}E;{Vl5l=YhA;rV;p#k|plR%Do zgr_P9$Tyk2F+K#a?k2L^iaOYoP~RTNIJ5GS?e@dEefnmreNVV-`!3zS`&O&{R5*lX z`j6@Mk?&dU*C201+AoMtixb-1H}ET}XeJj-fm#xm$XeITJky(BVK2-N##*hzxu%iz zO}(=Q$viqQW#%HU{g||0q1!jakaeR@tjdI~c`eZNJFX~E`caqfGt%c`p@#n;&T%iwDvxMe|n-z(W& zn{;=7EP0%Zep@fu`0py$->XpWKKPGG`^oViDQQ;*|0zHU{C{k91^E9E&Lwkp(Qj6O z|Dio?{Cl|X{1l|f`folYmJ1)eF!nfcBj}gcKx1bsbX=%7TEr1kpdC~s3jps1n z@#XVNaVpK=+2Wt<9!lGFu1$T2c>fOq?W^3 zltU05{BWs}$zkdKH?eIgqr&{~UyuGv@h^B=2*q#Yu^?SlB#*iGmFe$Q#2$R;Fe>dQ zr^7%=yE1fWzE*_b<}X!1hpV}Q1s&3OXHtC_#`vB-wB)g|R33#E+wQeRbMRXN)n0(A zjA-s6t7%U(+wevS&wGBW&G%j5GWd?e>ofSaGKCx&O2!Pgp8-8S;rFWprnk1gf;I}rUD{;>37t+byU|ACTrW$>Q`q`?0k zpRWM_(-E^E{#(CIWKDwq?pZeeEqN?!A0syiC|BYhkTOEp`zipi>||!$e*zD7f((~}e4SW_KM5O)Xd{Eex z^Y+@6;e(t){;s(7V^aJ0E|Tbonzrv$zz1Cze{wnWvyWra{bcsBO6KR|-{ZL}k5xm2 zv?6&Nn^}fW?gorLbQqNO9)8RDDeWcg%Fv-5kU}1NE~tPGoq0uvyv%MAdCc!()4`I* zO6=q4jRMu{xWJ-}XgbI@v_-QYZ`5r zUPK@f3AoE=$C6*gTJdqURvc7ol}+c9_Gum~XOWnPFk8J=B0f?_#TYsGQvl`D-+3}TH9R-6KGnq;9jZoTr_UrF>8bx?G& zEbL-Tz*-af`Lk_+qZE&#=jbZ?(7T@PG0}pGH`r9wS>FAuUE8M2GGg~ zXp8_^w5nx1#-dfZ_50}b@%R#YJ?u}fezwQNhgH0%EWKKN`t_q%y>C04UN=Ided#r- ze4BZ=+hS6B9fH!I1UvfO3h6a8tqi?N{To-F+7ylMzy%g%0-FjYsyjii{#L+l^GNsEtoc zu(uKEt;mV@FK#}Lhp0{AacgN04Q{ohu@W$Cq$up)j&cA;j? z#zst3&s%Qfmx&S0XgaFGzjBuGOgxFN0LTrn`pYsr>=wfxS){Qd{drj)R=*&VK`YkC z7i?7-1^0U16!U8|*VtX-h(@)p?q?nI-T(_^|xsfWTdZ4|AVVsMmpNv2~4&nCO2R#BeXD zC{M-am!WqBFQ(6qI>J?e!NN=*JA=50PJxWt^H5$aF>*I*`mue6W0AeQ80bQKU&xZ% zIyIh-tb6-7TMsIh?_imBwnf4f72sGO4?Lw-!P5c%q#nZ?e^hhm`VsL}>VX&WlkJDM zy)&!CF2QZ*G2x!Kv2U{&OKXoXXVAyH*7)NiLKw-;_O`u3eJ{G=M*1JVu_()sCT2{i@4u%yyfZ!mo-z8Hq{4!*dnWfH!)`8kEtJjbexFRIjd zlk!FWEnAK~{;~PubZ!9o@x_qZJ^1VC74XHgSv7}&k?rD(X256bF6bPKFZN)yZrArO z=8G{QOnJWGdxnRq?hqoD>QRe7#@-~JmKD>l1toL-dbR$<(97FTFGH{4H~i(OlwRFs+S&AaQ8rb4=vAe5%{QD{0lmKbziJKv*x~Ka z!`as-qSqc!L^i$ZiJ+nYqD8L(+h6EszsXsw7pION+ZNEX-)3GbtZf+Q> z`Y$H`=!2eVAzQrM(QOQc)##mggd?_Lb`UZIW~1e(z=ynb?`@y~bG ziE`$>qP)vbi3`aD+r>x>!kw8ul~^`UyFpCNw)^poI!dyDRQ3=KAM(s{hN(bV=KbWD zCxkiR>shHEd)9nDC1%HBoT^gSv;=e0A0C30bT%*Ys0CRNo^g740IBaw}d5BzH{ zfC8QncAR4fFN*JZ!}fxVv{_Zhw907$oOT-cc`RO#tp4_Ev+O*^C?IqirLKW4{)PI! zJXQ49HEzOL-pQiXbgZ=bG4r8|75phsqdfvcx9Pgbk7=iL$4;TX>+mw>4Fsv&!5Cjw zxr6q4w)B0h^W+})j+M|vVT>9cz>AV`v$;W6MqYxBgU8w2Cns52?c=n)R88h zJS-I3Q-cTc;Sk?9_W~bsZ>;a(P;ZD}ppZL?km@V6H#ejQIe_RkRCC6~UpR*_hvyKW zdm(QeO>zfKWhp430@mi}2Rz>MVA|HBL0#aD<40tC>{oj=OM7p_^CI2)Jv;zEM==nb zM4YPO&EQr*BcXLX*qc`6lbsg6Q&B{Q}ywJOv`OEjHULwrhpzfx2&=jhLY ziaj`+i(SkfDY6E(gM2d>QRP(QR}gk~UJ(}0>QqCk=zA1hI=#2+Iym^Flo+`mzR00fV9RwvF0k9FBf7Uen{8!-^f==Zbu2b zsoxrO`j~dh``n~4{>S^fWgJ~c{Af3M`WdMGgFdg-eqX9%UrNU?&r<<*q`Kb5QJ^WE z`CHz>QU=%E1BZD7zg72+_n(9|zKVg^gIoJKdq)Cw$GV-HP!|itgB0+f zs++jKfV^jJsK<8XV<@iH6h}GP6w86)n5uh2{Yt}^EaArpCaOO~o8qsKH0c7wg&EvR z*>SiILS5OvXmtWZm%fKca0@FNKcPh@`@;6ACCHN1gnm`ff{GYl9vFp*J^Sj%q zuHdIE(hSdW_(4B`R_O=!MZ`bo6yTsuD`^Ludv$E%c#-oSY@gv4j#Vf1R7$*fy~#y2 z*AY#lY?%^%Pc8(%LmcRr@rx1#g26Uf^M#>Od6L(6b;(P)}3|@gR_k4zZmxxquqZ6V_u=8|S8~xJa-(x(bMcEIsHX3-RtzZCI00c@NLW* zErwN#2UQCwNS@Vt8NqO;F`gKnkU!N$u)yTi?X=d)<65fx7*SWm+%U{6YTWhx88fJvmRf zB&gOOQ$sy3;s*pmcM5I%Z>4#IX#t12k1{F;n7ufN4M*LJf~S1d0|Ezt=fz0Np%0#- z$$;X7`$Yu`^$G)7WRF;)k{`mAdqLql#(wBO^5A8I98-1YZ?_*sd&KP`tfL7RjMr#C zz7Sy-9-iX#Pzp}WKKj4{s19RCoZTK1t_Y6E7)6sS@;mJLH7mICg@1B>K|R0P2P>Oj z=Fj8i_rh_L%nA4ZcSN9;s>Pye3CLqk$fwilWN^;Gi62 zRG(Ev{aJdq4ed-UEQ%MZ!Vd`$bh_mw%a76B3*GDR-Y+Et0cR1M=KLK+^&ps^Ss)81 z9+4c-G={m9dnS}&IUK#{yp>V-ar``B94`E1c%Ea4KE=P#bLL#;+NF*2^Xt17CZ>H& zo!oeYzt7KyuJ|UuB%|9FsGnwat`L2nVzEys{@nf>PKRRUaVTi@KcdTgV^8Wm>@#j1 z(#o+GJzxe0kwfJa6SbUs8#6t_0$$6&xQjxCF`20IZDZ)$S%B$H3WsXCmuVW2`lQBN zlQ97Db2Mf+VRuYT0d z=YvFa2F~epdX`3FOI!e5ngniXZRnIGTR?+-Z-8E!)p;0t$$_hKk%y`Bqrf*#y8J~(;OS&z|3X9K^rF5&vme_fIV#E8ihL(ANp<-Rils>qm|^8H;n!_{EVL3%+(KHWG_PlKnl5bgt1ZOG^+a_notTC4bnq(CxDa9{ST~c zk>>5Giz}MGofeCx`R`6bO?$v*Uhw>#XB{i?K0Vr_hEqF}rVf;lS zhCIg_i<4_#M;*YOogaQm-7|0e42C&^&qI$V8+iZW>LVaY_S!Qu_NbxpVi?oq5lB-O zQo=Q8##wo}sjq1GhIASQEELG_ujEyPU=|;Ya5HP$zKN!!Of2 z&jh3J^mA=9`xQnJAE3xSV|e)xjzSji>o{m9@;a;YykJLh1pa!GKjSZ1lWTtgc4Pw{ zbi%Et$*FVp)%uV4B2EqcgZQ3*4jriaq^l1DVA;U0p;TCHk%#`cPN(z5Bif0DduuI} zb!OJ9kf4vhhyK7%roPD96UY{0T|xl0EP?N%u1U_~i!42S#2sotaX;@yqLI{`5(UW4 z1K(D1ZurFT0q4`I=94BLv~fOZ%m=XRy0pvTML(r#(!yxz6qp_riE#Ze(;x94W`AI( z;A4Uo_++s?Gh2U7T}MHF~h&IBf^s!cVsC31Oh4i7VsrP^zl}uCunY-6E1k+8^z1e zldi|gRXDKDdEy%CY0jIxp~Hsci&4>=dw^?*1S_618hu>w3TC5BErnOQrVi`1?eFpyKPos>ylXCVsKcOgE_Yt*YYU%rEr z`qZ;V&J3MJ&YlrD8zx`Y1DBchH1WsV381-=*^^j|H3c`+d_^wf9P3`_=gKefHOPL! zXM^aDXtni_k#n|dSMAbuTgbpgxvnP_X#Wj`=}q3F zf?A4yK+?7UF?aHBQK$NNoNqo$rgqA3Dd|J%VxKN=@ zKPCY4f4|{pcnXL-(C~MQ8=U(gTCvv=wGWEhgJ|JXtVJ`%GOTHqUsVbQEv0Erz9eFB z?M|&hxTiVTmYPnu^~*5L5*hPb;2!L0deP!)3Pwj8j>QT z-7wuWZ6HDiuV66o`YN!3AfFVDl1%{!-Fq`X0!kJvxOx(=_G%B5esRPpA=Bk2B-0d@7V-}1~|vmk6b$x5RKp}CGXsXA8jLhThjQQ z7()Dk2*v^25hI|dLy1r`Kr3L23U{f>6>GVEkV6Z;b{6O5KU*_5;%T4px_vn zzk-Q$p@UL6@@W?yLAw$;;=W+m`3}nJYX8foE9VR4TO?0D{RRpZj$ik5nepdTKE7Gk zQ6KSR#VHIwuiaaCxf#66>ucyFz3E(!7cK6>^7yMDx5$R*2{Ui{cl?9<+n)c5x>W;s=DHTIuy6X!<7?y2!=(nuvs-!sE;TqAbi#J; zB3wI=Sa_DX)ZhYLvv%p1b2;4n6~1p{-gnZ zpU&U+@%f!Rf!}xL?;rE|oqZYj7wg{*|FCZx{_`ez|3aVN?e{P7`Q4uX6+XY)^JicD zl<2|L`;XIsSx*N#AAQTjN!8n){-XkL_Fn7S7b8EWoh3i+KK%Qsf$}35z+69;2Wqv< z=$(pRJm$rN4b1G*^k@9L_Y>~n=cqqaBA+vpCC-!8J-UN3`U9?oynq~rSOpOKyu&G!q0Bl3L3^R?lK zh@pH#;tmA`jta8*fpZ;w%VhPRex-FO;4(7Cxt8!nXydJTNZv?k*eb~LWIuQ%kjE>^ zhO0yzx&UUqynv1H@x$wfV&)#&(Ct;eIJWE#1<-luYci?5&7|f?{B^>4-GcWxufabl zoNvdx#_-CH%&W$o*P)e7>+gLst=OZU-D6z2qItFddAsK|gjfE#c}=ZsUVE!~bv@$E zYclx|IgP%c<#fM)h@2klb^xrXj~_oNIgLP0Q3Oh&&whgOEi5%Am($NtPR9U8g?h=B z)BWJjYAIE~l$X+f^a$lwJ*+UaYG6{j-;DW_pW9yCZn_WR6>+s!1ohh0%j20yP7fqM zW8Gt>@u2ivL3A5@dozE<;TE13?M2z&w!bVoy+VX+*g-{`)_>+{JwIM-_M@pci+6p zFJq;v*LyY|DGLT#l}9wgS$`UvMhUX4Z%n+ztSe8k5jUU0<^~9HkVV9LNET2Cq$fYw zaxWuVbDL2nUBZ!|e%_gKUQtL=Vq%PtiQiz#x0~@+VLUgWbyDeg2u6yBnn}r+*m5KU zvPUeSTze08q>|ji6-Tk7<`s3!3U{L{bAe!_i$I9HmVqO*k$LQZrP&16)|7)~v@XvD z02ZOM?={S%%;cTBkK4(F0-9ZbqXbuCRrF8z zF?jnjV09B_P9G1eO8O#_(xVz)#51{dScJeW8eT*_sig&hOrXj;OHtTfGe1voCRw!_9lb#y-zFc|(u2y{u3L`ba!=903hZu+yo>2TpEUG&A7*V1bJdj%vmyPcyD# z@PYA7Qo!1yyz!Stz&f>@YqlUT;PM%Ua|?!1fQ*Nn$3N+&<8e!#V|4KV89omfLxShi z@Spi`y`4RoT(8b?P+naAozDR?U9T{}1M)MRj8RP*0~BlbtH1}aoWU%AwNNNuaPEz| zGbO9SKF;}N`7~oK=LR0yxn{tl^4@~Z<==Wo@_q^D1b+IO4`Z0I|27IZ8d#t^bnPbd zW#E^gUqqd2p&8rCN6m9TPd3p!m9hqf zr`E_R0_OlgKnkdM^aTF6DtM*Qcq<>GU0KI0?YyvY{4IxWg~go+Mlkw?M|=(M za^P|Cwaf7kB-SNJJ1%0*kEM#&LI3T{v$35A35SVgfbz@muk0zPQbnG60gS5SmbxbOM&BUy^tRHeC~!c#KMoI+5pa_; z4@wXGR1WXw6qy*{y|%Dpc-Qgg7QXJCx9`jVqb<3mWfAw%O~{xxD~d=o$)p;{I) zOT!E(LeTNpq?k9~)GQn^#7Aki%4BZDBiaxCrFQFinnR1GdN#Blr^8 zPUgWYReVL1NC^W$@_ATVD-JS>bLf{b3zj2DR)2+c(NzmSd+yH%_3!KuAGGnce=8qw z1ZTsSc9ajI?^enOZ$2Y@a5Sr_C##RbKbjBjtc(x({P`d+jQIbJ4-WjI%Lf;--n!<4 z3FL?V-I{YS<>8;0iAKeqfUR78j@)1PWNuDXv#sA*uRwIGrT8R)0e6b^MIIP>xB``pV==G-|-)Lt~e^lRfQv8~rm z>Pf9R2J;;Iu{TfC*2uN-tNOlBY@OW!Kjx{VCadnofr0Vcqba%21}qjybz z7S874^+Fi0qg(FfW`{;mv_c(_%?S!sE<1D7NVlx>#xb(}@)g!o?~yVNfWAZh6#;WX z&rdMl6zCe-IE;A^?y5lJ4#M3*xLf!-uXju=XU+@Zkr=3%cPSqE&M4jy6nb;5!n>R+ zkLy4SOJ2X4>#l09N8O=lgNc6nXA*v<8c`nUTm|@_= zdF!(xC|GUCAq_gPwaycA{0REq@EV&A0479B;`oQF9;f;6cedHT56bV7pEW)&p??Yy zr*gBL8<0UQYo#K8sfF(w*_ztHBLQwsp&SXw)%_evzw|27cj#2!3xA9+dYA1bfNo_q zML4^CF+2TO{3s*;hCeO2ko8@oEzn2EShav$pF_yE?}YD=V-yj~!&a`Fi#4!uQGa%X zyAIaL5SvGgfVp_2JPhEmJFjjcu@Xv3Mi&)3{Kk{fC(O) z6+A*~)p0Nt%vl3nH`V_6>t*uU3$Io3QYthqgceTcP7Gnqdhh6Z1>Q`8&!lc@RYN%lCd{_~kH!!HW6iH~38j z5xRi_*EUig@MGeV#raeT9pB;k(;fsB_sbZ37(TY%SLZiwXJ_COH%7F%Av3r$aq7hu z-9uwN4`#?fR-UTSOFsN_CS=8p6>?9&^)<2q8DL46i|xEP%SP+R;?GiFfw3OK462-C z0G>unExtPMoU3L8J98q-sw?xlYM`7w1q^PybRPBASQKM3NSM)qsPz^DtKeZ0t=u3K z_)(7^C8ml;qw3908Hu2!%+UVnEw~z zH;eymd}uuT>x1Yn7Cv4$$qyghmE&XZE^R+f;g<>Q$9ZS_h@_YaQQy(Zq z{A!%xc;$ySzu956>*|!$WQ5cyRrfDLmX1Hc|0?i}Yhe7y({ zxCv8yhf@3+zL**7+qU5d=V~m&AzT-kcLz3V10w$aZCpTM?VCVdIv8B37i0FQI;T6$ z&{^oF;~@AEx%Sz_=gQf#&`zGPO)ocOvHf!uGCRlJL!YTNJLYQbX7q&F-+w{> zZuB1K!SBeEmvabPeSRnC=6&PG^BF%z|6u-J9(5PaW>%Q5h$Z11;2`KEVjy6$`U}7f z%~VC>WVdUac{0v{YMk9B8ArfJ97Y{ypFICa@;lnY70(-fRM>3QN8roNU>b)k*`-2K zamtal5qorr(oNTyyGZd5zusDL%OOa&ar@l z;bZ(%dp=&?@l>6kD|7NvVXf7R%xUdsWKNl3Jtyq*Y&uBsvB~T={8}j=ej0Nw1a_~O z9x_jz^t0e~=y@GV5Vtw#{5m2Ls84AK)wxZ=WbNx@v%O z<3~5((M^juhnED}`*7fo%%zu{4s}J39&WX@4@c%nM=@dThO>wU9(lPYe6e^x*mK3X zhJ^54@I6BS{H^o?^J|7A5{$y><~*xe+qm<3reh~PFZ;a+x`SSj_s+t^+>NjkiWW#Z zFDD<_gA0jiH7J>X&ues806lVaZvH8InS0Eyp)`|or$cT*8|0hpGQ}(;7!@H_xj$%d zYVG&P_~rNQFWXm&!RUQ^pZ8^7)iV-`ISs#I4-@o%1>JPzy#T z&q*Siq5NhQoyMW2+cWzNE>bE}4 z;y1%@QPL~07ih#<;Zn;}3OySAW%LQ@G0gX1kHOAT8_d~TS?>`&7WvA=4bfaal;8H! z@!Bz7NiMJ7c=e^@eUAn|S=~Izcy)X){)RfU_#yn^-1QN2FPxvfOy4Z{5WBn(_$Y+; zu1Fsa%6oG^@v_8uiISi*O@a7p{6zCSu8-!7AZJxN+Ed^(rrx#t)6ZM!p=piF~O<9!Kfv zCz`a47Lqf^E`9bQ?7R^J8~cl~KgfFBK41gzx^w$Oc$loN!*ddqgof&%mXI1#5$B^1 zn)9`GKLG_7u)GAj2B_!b!SxG}#Z5u{G$ns@SWpjTV4|4_WHO%w*=$)h$kk#RR2iZX z@_bZi|Bn;pkz>L}JV0Y@Tr^`g&H~)d>Yj5mcnji})*H#VsC|@J7czOHUjYA7j{WpT z9opM^c8-9R29~JT5Kq$?aLie7Jfj&QN|V();ca41#jlM1p3we?-K5>1A-n8ey+)G# ziL!E`?dS>+FrWQ^5PpW}8ZUv(rn})=*WUE3n{fz=AW7K(Ykv_FIA#mjLPd(bc^G|X z`Z4keJh}0|MPNRueK^(vfT+(wReC0*>JT4+s;~jD<7KGoAu|eOa&$9)gU4O*eCRu# z9^?LuEB8l;*QSdB6>2}I7IGAg;J%c$XOY%ML&$Bfg0l};pjgmRe*@ji$Kc8CUY+9_ zATR2br(a#ipCcxw>aejR;w^uJz$c{!#yq&FnX_W(M|Xb{W*_OxXScrR8DQ!DV#jT z^kJny zk}1jm%)CGqPMq7wqK^%nrTToSE!RgEF`dY@%KO*ZZ!8Ul5{AsIqdIy;nb*AYA9uUt zG%{`E*^Ep5$B#W6YU;93iK>C7hkyW?Al56+ym9>&Yk4h<-cpc^L!-V=~ zsV)O~>2mpWJ6>V%>C)M}hf8372mF$M>JJc5#^rX{cGcj~?MM7GxwG>l9jBr&^oovM z$UjcE>NMERPQB{FW<9VGKl5Yy(fKx=SmUvF~9=F z4b=Ji?OntH{oR8<2Sqri8=boC3|~;r2Cor&)ncaHYWR}#83`V!)KH3W17uU#ZWPZs zpAkOKvS}`>A3e!O%DRbmL@U>$eao|MEf`y=a&Mh!;4=ErmVcEm60D&(!eUVFk&Z&m zg3{ynJM({9q*cHK_k7c6Jl9Szg20dQ6QoX=SwgvSor|B=u@TqLF2%nM*M7to5s)tc zHlvOp%lA9C-cXY1ANVV{N%>A&-XeqA^35JiW@yih{bkgER>=gxrQde#F)TI-|E zk)G1y9tR!2?VqQ+2S>r^MG%=o?;qfkQB`i_7Rq zVEM_Kkdm?|*#|}X)$~t&5*0X#*PqWr+TNbt$!p6CtuoZgspyP4rYH}N^2!hUDezRU zt8Y8&un_dtj@$=!z>9Oqafo~SAjA0^mMTg8AH>sC{Y*(t6M?Uf|)62st!ckr?7i6f(^>Qow z*#W&g_7hJpw;d+asz@*A@4(CZFLe< zr-zYq{&t(aA4-7C`V4y6g-6$OE7=^kGT5mvozDC0Zi)%p`j?N_0^vK2CLI_9hV6{AmOl6s!}4*8NeRg}(PhQMN;+UKG-T5Y4% zHui08v@J%h8U!KLR^wKqwm2@eb4Bam#sDhc|NoqG?mhQrCYiW=zwf)hS~B;Z<=M}3 zp7We@3Y=-GpUHXlBlIggdLa0y`L#vARHMQvANomujRWd0tivBJzv>6j-w!Asnf&{+ zWme6rqbE~db;$0JzaZ@lF-ArvEX8EB&RKP=aCply+g{}2vxuu3rid9amHT~*_jAXO z+5SA|Q$8F9EzFYV44wR-NHjFj|H1I56TpcrSI46U*NKh)N_v;DKJZEBiBE{-`@v_%Qj{S> zK4hxB$Db2^Dfs*gpL62V&ALH+T8_&bpBB~!KAotNkGxg0d_VYHw?yM}kRPAJTLqsJ z`@*Nh#zzN>)77PUGG`L+;F!H9S}CX<%U0H_4IKr} zn{$8woNA?3cQPuL%9L+MU`=|8hHUPt|}f5F$t|3b&)D)iYrW*oKcWd7$EIDa3_ zVLi(_%NJ~K;aA+=w@iD+pEY>XZq|^PMve{NtG=B#--}rvd~ZaReE6PO+!x<#j`#8X z`4u+be}Ap!`-CFJ_YQyQyIC51FZ92@p05){zeLAhE#F@}@~h?h(yzF^F~Rn@->7;I zm*0VL_|Xly$KgX+iy^VszX{R@$6*t{qdf6}JjwjwRGibmV_5X~xR;EN--tKh6v25T zz>>LOs55^bVP>lJM6!OZ3*6hBsh~whWmAzjMpr*<3I#h@C{hco!Fd;?$?WIr>`4C5HL%lAjV^ zlq&9BYA2S$r>fqcKBymzbz&Qj^di9{LVu!{Jq%?|aPcSC;@*E040 zroWqdrkwen%l`#_GJli#)C#!R1Dd}Yx!UKFft~_NApJ6**I;GvYf<#!=vev^bD-UM&XFRxn+T#qzT1r!M{uZ9*hR6Eaa; zfhLrJj``Lj(Y(v20pwv+f|3jbW+YDxo}iwerk!P8hMUPJ$t4&5Je&UHB3U<1^=V@5 zyGept(zR@9XUNZ8;V9O^kt^R)5~U$PH3SQd3cJWJjUm%l^x=+ zoES6o%^Plu%qPsK8m= zjm}sE*7)`LF>8UUn;~^vMZ@PiEc~6@Mn&Qjw86zYw5p^O2$}oU)p=t)c1vSKP63(u zp5ITq&i{h@TB3dtnS%>L=M+|KQfF8f}KK<88Mk~URUPSKT}5lU)l(hTI^_cSJoYMwpK#Xo>y@)^U+c$VIjrJpQZ z!IcI`YlMzec`^lQ>#jnPR@^|s+qg~6S7&}Ie#A#8!|Dl`>U(woaj{E@M0t1V)} z%!V~x&ab>n<4XY+xO$K4)k7ZnkT2ZNvx4&s?Qe|olk#eun>A)4zC)T94iElgb+X2n*pSSRG3|}d z`-W1%Z+{>v7;%nz7XfTpJkr7I*<9wrkPG^H{3R{;Sa_)M>LI-J(FC?B9(Qr-?_M!$ zocbT))yS#?#YFKO#m5V z(E4Pkm`ph&9cc*L!E6nQ$eXqxu*LV6} zA7EZL`(E#4UeEQt-u#{>%1pc#xi)?#{p149;$U^v>lShmxM&+x5E^qP{Nb z?1N$$f3n4aT3Ala+rx`LKsm~D_2j(extjG||24ei7pjR&8=8Ro+H39HUe7Y{(ry-_ z9k9b42ItZ7lpAdABa`NnR8HIgcXR)UZ%>uIh|$uuI()vrA}ImF5;!~nT!r66<#{A$#VLLvzgv_yD7E3(zc@tT|1v5#DxCc zAwjKynf5cB-UKbEuFfIAd4v(FMA0v>B=qmI#cg6J3*1Z0 zoL-LI>nWY8az+ADZ6qF}vE>1)qv1-(i$qZ^+9MLwWBNe+FF2p+Z@z8s-=H$>LbqLd zwC)&q|3g=1s139o^skK!<4^Z|4B%(x4fCfl_KRu537EVMTXd|9(J5fdTUwKW*&F*F znvq@K+&kAe#CA|ERE=sF zzYx#qecv8OT|TbA&$CXDJ16I!F!H(qY7a>N`9lS%p_vuG;{Ms$=lbMoU3pJZb&AF& zMKN2zrr0U)px~o7sI%1ce8V0$2?x$vDPS73$^kBP_QgB$s~`G=7vI9l-g)WQ#G5v& zW3^*OT;oWyc0*8IEr3rY)52PVo4uk8$}HoyUJgZOJCL&k*CcAg8e@;(O3#@bSs3qE zdtsc)J#bPdj%#oF9P=CJ40W;MujUzHuSdO5Z@hJ$AZdOI=IMd`53Iw-k_(B`%6{?K zbR`!J{onJ1Y2yw!HWw-n4;|sn7t+GsoiucAJfGtNA7eLi`)#kF6gkv;T+sC?AK}G6 zV`K2g%-#k3-BWOu2qt9&6G)uh*HjJ}L8wv7h_!zvNH6HA>t7v7;TET=7KEUbODqO| zM2s83SOQutbl&pv$fAJAxobDIt2dh;q2X6~+;406+X-`ieuUKbjURI_1l+Dbo@)CL zUG0FKMg<15FM$;Q!ar5A-}4teMV?0w3E@fTpAa?8V- zU4)@0UZEJO{Dse6+n#}lh;#2N#$V_|{$(AM`k#^mpc(i@z=WG5(MHO-^=+{rvvdzx z&ZiT+wf~WQ|I%4#Lu^Q2=UKYGuR1@l<7_WKH0_+}xP0Ug4;g-?R?Dy(XCWL`97*yq zv%|C2&D%G0p>M*+tk-$lZ=LgDt=;vNU^#QH!JnWNb{<}^9L(Qv=g7~7VQyQ`ezN&r zd=Gi4F$3DAw0W)ZbCmzp&R-pk`d24^b+zkXYBth?Ukr=1Qmm3JkgA!jUg<1eeEcgv zO1$$SBUjd03N-)$wEfZL#y({62N<85{Vj1Sv7XfPC=LyW?2Nvi3otlmNgbq3ThE=N zNoV<+n)kw|Tuy^dIBKp|YtGf=PYipK73Cz;J z$cgVz*9mCa8^{8%B-7_A#f1YP(QIyiLwFg}`(OW4^e*ij`x2-3OB>Ofw+K^D{!)0& zS`dF*I%wjWP+T>jK6!vxDoNI4o&h`flKCXXf#W(bnC{)j;WO)v`0Zrwy zb=Bw$fxJONeoX-Dj+eRK39c5Yaq4KQ}XjH9_kF(|RP=cJU`mQoa;7%rmzsYqTK7PY1 z0#wF{0Vqq{0N-gEKL7a!sW(T!@-voO;EcrC?X(-&;EA9%HXF>>#hg^6EPzD&`+C7^-Y`rRP$aABsO2BlIoj<>gPdvL5Caoh;7%HkYFVV6_78 zp-VEaBklMY`2*PkdG*nL^6K~Ak^IUvU)wOjtkZF_Hh^`y6QGp~aF5?M9HP@}scz7` zd&p9~+}GDq9h>o;f2Eh|?z%+L!1kZo@UDM<`Z-W5yFXo{>eGLkJsO1fOb~qO%JYQ@ zQEg+BVj}f?%Ncf++2>&3kvJvV13z3pTITbq&T3i%eK8reTMYv^E*kT)vPbC%LNW`T z#Te1FG)M8ynY}&vWX4Opk%xLyz;zFOuU0MLP7_w{fADf<>Ww=^yDNP-CG`!cEo?<{p9JISpd~PcgaTg2>bWw&Z81Dovf-z2;i|0b%LS@@CNAX}GeYQSrc&SqM~PVe`+t-my81;q?8Zy1*bbUE z-X6rggdrn@?qM)u;%W56I}x{yewuU5P)x1>a0da9L>DZ{t#yjW4)(=&s@Wgsee22# zQUWWAsp0)anHEg&d=0`^!14k8EB#&${cA24ME`UlanhF&A%1K4!S-VO1|6#iP2ExnU=hudJ3nn+c4*?k6nL6L=EW9MiuTbr_-(Y%&xd*wO>bea# z3gVA6XW5);rQ(SyWUB1+$;~^2mhaN|jpb7ZHBK9}eCpuFX@i$f9nv^$$nvQ}8>bCj zK6SgsY1=KII;?Tpu;o*SH%=SAd}=}Cw1VYRw{M)b{qm_hG)~)L`P3a7r|r0W>WIc^ zBbHCysd3s)%ct(#IBn?~M06x`t2@MTNo^pO3 zas#_je5QpH|3S~k@k$=*6Cc#URJLcsGX34?8^`a?YL8#J$ANb~vF)f`zdo<}zxCBO z`b&EpQ}wg^iFKF42sF=$X7v--U!KiROrMv{PfU?`dH9LveB}2NCvF>-%TGLC=%(hm zKPQpFqv&NacBp*AzV9#VBHqSs4w-{^{}h~Ak{LXQn_P#-9}a~s{LLR%CU=UD?cpNF zJVb|8P&nL!c?*nl7y3e)JO=wQY>M-*V{kzSKegeLG1?tJ5R-c?%0Nso%?a3VKn}`y z=eo7Ow9UPLi}I5JJzY2lDZjSx`{+6`=7-BY3-(19s%X!Uu;630+fh&r$Q1AJ{* z(<6jK&x)7@&aK~fceaardk%tHem}5vreB`aondWCo-o}&{7DHGm6zwq$zWON)UZbt zHHiWZCxn&_9jJF95=hT8g69h+YknYd4@Ux_BQ-BdI@cd*+9UqJxA zE-Z-?e*X8hte^hDBfNo${TQ2rKP5g=55BtNiR_QWjoxo#o#}HVP&|S{vW|*0xz+Ke zReFa=xM2*y#w(RIJ|w(&GYZC=GN5Z<%#VVD6pmz;ypinrmP%GQ=7Zent}CeB5++MK zzuSV5Gg0*34DBC|Lm@t-FCTU91JZWH&aZ>IS^$NYZ9|cGb8I*+Hu5bG7Yj?j*z$12 zi!e2ECZh8R7UFyFYl#9_QB@j&rgZ?wbz#&IzKud5S+ZPUJ7CmmL!sa_3g6s?Yi}y$ zjg@r5NWG9yPaV+h{9yAi6UoxlP1V$ry2zIH^1_`{Q7o_?K>Ajl>*3+-CLVCscy}es z>3CZ?V8|3BTAjy!ltQU@;(<6#4W3K+=ugCwUjQuz$9Kd>Wwq-8O6aw9Dxz;>+1LTI zPv+nHJInH$DQCX(Js~p*80B2|GqU$EQUXxSj+m}xHyVq;%po-d@c?jlmiTru&E*?rzlwTZ;XGC z10{!Mo=05yaGqC)(hx#-9Ql?E9~m%-llC-!Whx(n(k4V{)!Bht5rA+`s&Sny9WQ(L zY{izz%~PV2W$qzEG|qaL`AV^~6&5&K-Z?I~#CSdN+3iD4^07hw@c=LaKG!@SD7N32 z}TS3Zz)k(TVl zWUcRbd!CZDK$Z62bheu!zz>B0V{qo0CP309z@}$h0+{~$#Q!0MzYQP2Dlze@6FvMr zuzI>RSa4J195&8CwOI8)0@|MjAx?S3B}9oPgtm(*jNN>;GY8}0Gh_7TG4T`|4!I4! zrxu8-od;C5DP+JDo%qy))D!2N2VHSypNz|&#r1-DJ&3!4MhjC|Gs3!&B(3x)lNfW? zJZN`V-pFN?V}P5xkr=apZ9(_Ma=qWN)$9u)?f6h%s=WH)#f$L*NW={>B_QcGC~~fR zrOw*<(3jKldMzJmo(6sKw0RctO=MPg3+oyYY4j_NA zUEmbc)+>4Fe19sKm5a9e0T&<+oeH2>i2GQ~*n&UBzQz<>-OQh9xEzuT9?rl!@@k1D zH1)WU<#1s;9Fjt?DO7nShhnag?f)@WteR#LMIo zyI3zV=1RPV*^NR(SeY!&IEVj<4a7p_Qd`w;mHNDmSkjw|5i5dwy|6%^kvn%jYL>v< zV-RVv>(%sAkH@cvS`;wvPNQD0b$<89-u*{&v;#47b1JUnDAZL|r%VSF!(C0pdw1g% zB35F!ailju=A;7x^f?yR!b?toa#l2-f+4X=F2U}(ip0eMt~{y}B>u~XLSk55p4O=r zVV(VMbD10i!H7=;^_)H4#au}EFkTxX@rQsTXb9THgb#%-|ISm5(?7^KfBpGZFV8@; zLF9yg17|n>vAc}CHCL@xK-p=G3MY)jBBh?v zu5})SNLy|JnDPu7AXDJy(C!;v;7^y&GQa->j<$2g`XQKC_h0UkJj*SXa_o!!?#4gx z82c|{t!1v=`?4yY{V$|5?Hq){q>LWdM&M^Q_;q{go@NNGAy#2+J!C+xi=DT%05{;D7>_ubrMC@m43n7TZB&L+_Fk!V!@skP~f1I>BdFW zW<4id0qyiNEJOd!={N-9Y8VQy9QB0{@D;zEm(qLVC;av_d)9tC zgYh}`-`RQ%LyIuhvl2niBqw;`&1}~lJcXk$EPhZ=`Cl+TFbN&F3VXBQ0iY zV9-Up+EITf4lC2*)e#3QauO~5DYbCXu3uTp6%ad&A2bm7tHXqrtzEj6f^X4SKt`bv zJ5Re_*3`)%vS}TiZTuA~lelBlc?lJ)`7!l{{z&Y3+F2c!UxpXpk?VwBPA3%kvdz=> zMaC=zy{EBoBAR59HO8^GxTtH_P&jia^8H#U4*Nwjl_$8lYDqwg0df9NBOw}uDr^}E> zpD71LKP^|6X=F+l{A8kYa2krsE0vX&$So5W z&ODahiToZ2`AyXCSbNAoKG2i>JhU03h_CB z_?Y&raZ~IECp4Mpk1A-awCZJ?Q(sW32S3R?hOR-q<2}J(+#cLYuf`59p4CgPCZbTH zob#>O`;vZL=vT=VD5ut*oP+)`gp%-4g_49PG~jOkG7p2tG*F3Q{5T3;AlAPD-bo3*Lk`r5D&% z_P|#ad%HSFucp_;j9`3((qpi6SHL~H$|_!-rizn&8=ZRo6kU~vwZ*vx%X{K499SW+~){OQ^in~pJ|W2jNtT}4NlTorWzRo(fcKDYx$7Bfkm zc;GpkF|-endG=JxjvCnu#=-pYUH^SpX=g1!Ciwn)%m_c^mg~LY#sB0Fn>Ook2Wk_Q z*h`s)DM;qI&juDLV&?M`&~B)WZ8fb9=8w>O=i}py_{L_dq(gKzHqSDn|KzH$oWPnpqd4)Wtku1hMYJ-E@1nUc&uocvFf zT*Y>9?H7M#BK!qDJBH7JtLCC;&^aAV>v6D;eQRo+dta~=G)WaSTec>Tb9GESA4_W~ z^ob@iRct~Zv&5@zvHuBN2DfAxOHTQK`+`V6=x5~5<(Jjojc5;as4@P>Wu{S5ptT43 zV3vp5&4E2|hZ&i}_pU-PSJ@r78%fAdVQ;@f$6G+hRzt_YnNBsNLpd)jo-hLBIzbk`WrD3I=bj%l52u%4JrM^LUnMgl{B^PhlJ1Dwqc&}43`nv0 z7eMoE4LO3Cr+Nf)iF*%aoFJ4DP=RFHbfWjzB7I{1vEsy8g0#V3a?vccnADzvNzCh(O>XFC79hgsIk z*7UAp_i4aFAs3z0FmNF0Lry^p*RBuvzWQ~qm>7uIJNoR_cq@M1iG<6IYppBqZfhZo zbD}T^B?4w9UuJqpc-Jik7qs@?Ls4Txw`b z(`ynB1Su)DQRgn0A8j$BXwDf56c~4}h9%)Ml*H9faGj_!Ch{$KU5XS61gH@v8$S2w ziiWo{70o+0Pkon1g3hCaCkt-?p5j1OH2niwNG)}D5p8?j6ye+fREgflG{1#hIMB=lP`$luls+>*lDs;}!4vpAk{7pj2 zIET4Ud{qYbL}o$@YcV?nVL_4h!VNF}Re4J8zCn_gUxG&z;>#q76Nz3siG8K>zTC{oE$mTg%wK})3 zX-ap~^d5;QiFS86le-iF*97Dia#E+|B)n`mK2o<^jE}g2zgih{gMgJmTH5%cUA@2r zhjBx^=u|HX_@aw1x+6>AR^pEy#^5+;uAfpmWREz-AHXX8yRNh4F zW=2^R^Fmk|{P7d~5e3<0Ltl>b7Hm7E^6*;VH*?@;A8GsnJ0()DMw$1~o|Oh41?ipY z7u~pd9e-EiH^~;@ODFjf5AdZkdb9AQnCj6yDbhTxuz3z6n{q4kQ*aHsfQ9A`)~wNe zr}Gk`N_rl!bT~S~r@V(3_LMRz9)M!E(Uc9am(G&2VN%bmQAP#WJrekF*gs zWuZ4~3mtI=f8ttbDy?(D3!Fy;=d~5ruBpdYS5#Ku2N~RG2}cWGtgwWml`q;X;ZR{d zBOIMZIPM`!y2#>N_*XZp^}MEqqlvGQe3g>&_#<7yxe$s=2oM%b@p2Q0Y30TfUgyT= z)p$ex1;$G?U)h~9?@bQE%OqdVRyI*CD?Tmy!1%PM3}sk`^)#Ujafz&IFoSBqxHckT zPy@5<{~y70#z?4vzWzh2L9%iM8MfMJ0i{LGs@+RZdtxG&K+TmGpyK-RDh^j^$-j?O zi~(BCymRq$uGn+7BEEpcc>;3ZLAgI8Aom^7TSV@)J(`5Ukdhy5zItTyxljg-w9jKy z?u77nHO=eB&^y7Kw0AhWuh#bcM?v|g%f1c=c1!b9kQ;TyV9o^@|ATi-8+--owmd-~ z@ff`U9Xz`h>C3J~gLX{}oySdyRg^+ua4A=ofQ5g-hQ&Y2Ri^ii*Hr24Zw58=mNPhOSb0 zWwDQpy}0)AKK!Uyw`61;#(XoH){}2vpTXSJhrz6@^BK&U>lfhHFCNaxFHDxY zrO9%PxwRN`5jBwgt7^{lDQa>ae~O-{m~j_84u$R@D3}W;YKN$Lj4~8DU8u8GFYKA} z@GIMG{-!j4IagA4^ETl%`Aa_Y9ow#GQv5bHR&lh1W4Uc+i}}L#OGOA;$*DHO;&#Jg zaXvf9V(~dUS*q&~!eV1DjdNv_^e;3qvrWj_{S&f)e-W6N$@sYS387!tf1x3GmOu&26O02^ zeGAc+M7h|#Lt$WgTJEL;313&|0VD&7Gd<4156G(aNvN4Cu||!nreE5l^x;^?9@0E% zX!EoJtXiX|WYw>+3_K-;t3q)3kvdEx>6E-VB-EuZ95Hqb`i;oT6ogo($B=7`tlQ5If$7-q}%vi#(xbyJ$UDw6XrPSRlQ^LM6VibeS$lNb=KEr_( zYLPweOnneMY{(oOzK&-eE5MEmUv~q3*wu}N}1C|_yH7lcgq>0s*&LgP*AwVZJWeB2q`8{||QjBryAL>LZ9 zsq^Div_bU%FVq$EV|wXvZ#V&=7h|{yjSx!lEeV$ASQ1j@Rnki#@Et7KX&jI)0xlGw;UG7)WdK|8L!7!n{tuSjsj7?*3D=u_2J+~Xs`b)6E~ z54HZDv<2y*rifC4I1k;Yk{dej1)CGwy>JhVaMMd_J9)uK{+LJTeA{u@R`a69S&YN?O#XF#)A?v~W*^ zP5j9g@yQBBe8URm$QxGZc=cok>LxQ#H<^JtlV&trSTUL0q1fqoHCM;$weTTUttfw+ zCwv5#G|K$eqI}HR^)b%J`k+f-9O*@uoO;rJ+ko_B`=ebUF{&N;odqgJFr1WO^d#?b zFMoJz5qc3K=cm_aAJq%qPCvX4Jn{wLb^aH8^6?`B0fvr8U0LJg#2x5yzQDownj~wZ zN=G_>O^JU-?N$0HiX{3I(Nk(bmd{*xN~9L^!qK@Bzt#wZfrSjCso zQ6D2Qbm@7qkYU_Hs*QT77SdYS0q4BGxbeX#-aFsJZ^Qq9odgBkxa9HF!(`ph6clN! zgmU(kfw#ebKb0jUn5pJ@7`1Q+7Uq*N0i&_R1*4eVB_AH<_h;}D{gfJ)V+#A}j$#2! zuq8)i7}Fi1W9jfC=@0;*K#3Sg-E+6w^Uhw+B!F`fdRBg6{(9;BDueSgS089{8|v8)JP~;!`d=*b zN9=qX`qHKhi&%NJ8OC)NL3}gq?HtMTyVu^$tD1Wnc;c=#d=s%EBps{!@Y0oN&}?0V zo6b{73Y=T6arXxm0upEQgBW@eMfV?|5W=6a??8W06i6FdYH_3gFY~Hi=LFW>2UC?J z7tmSszh=J6wI4pNzYeW!ldAI&-xzbzq7flpz&X8MujdBi(Iiun<^6FGM(y|2i!t?V zKbXe@8hQ5PW)z_8rn)(9W3eX<(JTO+MdcyvH;-RFu9zqX%`-!07Zh`7-%PbVQjMH?PXCo5XcIJR{<=i@&UE}OIjE`GkI6p&s+Y5$)%Be z1=7IK($c>)^=}^%r0P%9zfT~C@9!rXkZ~qFCz(vY$8VuWkl%8z090ke9y#N~u5LyfHlNrI_;I)QaU(v}bDTa9)sdozCy?Bf22-QzxiX~&`d$zppt z1U|j1pFMT3b#eL;n1*rEERk&|uDvlbz_G5(?{|PS<3yL=+Vdz55 zu}?8S-f`Z(*y6l>oCn%KG>bckApP=;b6cy*WNLkY?_6xvOH{P&%Fox-D`&`7X zWw(o@s*?YH{F3nEKe7`rFaDsKN%9BI|(*kj5WzLL*;XLQSqOR#yj zz>GK_%~j_Upol!oH}1Jw^iKHe&o|!V`@pxvOF>|?v0GxRidF1l&YF2}aDy_;Q1 zov8kcj0a5cmt7E6zOjLWn#PA>C+C=h+T4e4;80)ncn&!1aYOPgQXzE0d5W@Y#q#SI zxj5(@x)7V4Rd@URMqqp-XcXutC|}0@e}^Ma$s@ocQPj1sMCmgmZ(n{u_a0yY9A+pm ze1LOhJ-HT5m@zA?9=d9dw%{sRegI({W~?{&A=0Nva00o7)yYR9W; z1+!sB+eXJ5O11Vp#C@vr-)6eiywk8 z9{y2>#bTdk(`pXnLZed8z8P3LeI#@F*Yd z1YCO1z+WMNML5uH!Q{mGaACd?pLK3YeASyH;@c31{YQMz`iiDMSFs47YObn_55nuJ zIv5rVao2{g+ki&!*S7GFU*}(6CB`kq8naEW29bVo*C5ifGZNiU6twr z9(icTOLox)>pVo7bR5pu4_!?3rUiA4zVghWOe17JkGM`1>%l&mlLcGV9^K zCO99a-QorCwS?5{R~?79#He5m$LR6HNPlZMBNj|_^T&psbCSB`M$U}ubJ;r{dH z81J6IBAo1a_Rs%-4vjw z+!$Y6uz`KxA-}uBY?nMS^qUU)?LhjqN|T^pSx)*DP`pCbYX#LJG)3V6k5ydIhaW!L z@_snvQSKGYbWz2S&ZXiM3r23i!Gi*J>Lv-qz9XV5mp>y8~pC9h*bq9n}!cK+G?YD6S4dam+M-9AOPVJd3_i)KLISYuU zs-Dz*Y(6*4#QH?hpIO8^kxzu!XJ1Tv#EXxzTkbq5)QBcAPjYTk_d#YBt77gr0)7r& z?eeqGnTvAdXEu0?gYXtS6@+)YFAHxenk2mM;=V`Pfh_Qz@wf#q?}f|-Z`~CE`gZh! zcRGuF8TzI)yeH&__s&%oyu0-QZ&z&q-kQG!>3cVed>MFGph?pAx=2p?e$Z*bdm+l@ zqHkdk-on2J;r;mXF9~lPO%mRJhI7I@&W86-D3=S~8UmyJQqi}rUhtNGS$H!V-otal zd&6TEeTVh|Z^sV;@YX#Yr0-2E@@3?q4Na213wF*)-!~q$;5`%Na?!US2ygK-L3scD z{Vxe`6`CZxf7>Z1yhqva-i30x;H@GswmkIof_Kc9g}0zv!Mks6co#on(f1?V>PUF$ z|MKBFNaZjTQ1gu0-@-VNtVg355Rq7iGYGhkU+w2l^u7hN|WvW01tX_BQ%@`TjStRTJgKovRh;9p? zrBuu;bPARs4yOlv!WCzK9Pgz7?|Gjz3KJ9zg;M~B+UXvQ6B;_Peu0A5w!7Y{AG@Vxy~&3A`M%k;iYeo z!$2eYykbAW_vZJu9K=}PmAmi~33Z`njnu?NiHV}3)wCmu20nktrbFGuC}iMp=WyYr z2SMiG@44&b`_bP^_lPBwv{IEbkxhnA{F(9REV+$X{q%0POGezj+a+DPft~a5&5GBR zF9@&0K=r7{Jyb1vftq|M_boM9@mxZR_lBo9A3UcM4jzMj{Is3JH?9t^L?jRw&5ee; zxVnSf;i_uXIcYfV%2fWXMURjLPw)O4#e(-wk0eOo{QIUX^lts0hwlc=fCbF32WEH) z56$V_bDfOM{r4Pu5j|fjJ&XONOby0=d^q3bW9%{aC8Q$%;Cwd?;>`aXpe2fa%zxyZ zLVem^;yTbXQM4Y*z4U6m`xwZ-RxScV0%B|?G3IF1#*X;MnT~owU(-L!SL*ULC=X*G z2|^~mw3xu*VYy;eF5S*@j8{zJ^2weEXUMX@KCnoIYb5Gp*)!X&CPNCo9_df+gL2lK zrPdGZaw}MlaT9M|B}c7AULu_54x`2!IPH4XsHe_m8!{VLTrqsKb?EHvX^Wj3kylRI zw4n`-`)l6hsYM(Mwho?spo%ClO8>V(+hK0F2Ep_(&piP!ShsCE;jav$6eB|Z5y~q%_RIdH{=dAPM-e_jFUe2S_ zi9yG#JeP3%#XTWv;Tf-yGG`4)OqP6-qf(DxGjX{)&5Qv!=l&bSR77ff$X)7V#94Wb z$z!zT0Hp))&Be(vI4e|7QtNU3Bk1ic-5^cr=k+FHFOPEjiOBC{qjX4Iz; z(lp}6X8v#F)aVK5;Kp6W&Sp9RFOOwG?a^pRtto!L$wiKlC#cGY5PubPs>h40@rA0Z zy?DuAN^-|b+R&7&!|`6{KH}*0C)IOjGU zmp6P-UseAdp9!7;zC_W9=F2TC0Kwbrya*RfuUcuoG~-(qzS!;8posHx0U#^>rTDJQ zWeNU*$T>eiH~#fJ|Z_grVFxf`{$|32Qg&ah}QbOY9ac?mrK$G6VV_NtiK zoo__#25h(Z=vkKgfsTKwJ{nM*Qeh(6lz#aM6Yt8=-M5~@QT2o-It9Z$2%M_3+3 zTUiwMAMhuZ)Sc=j-lZ)DZ%FYghl*_^CfVbaom-`WVb00In|k)eu`*~cx>!!pv$*f^KK>d39`&Z0l89M7pHp1ij7MWS2fi)??qV zK8wbm1ok?kgrszIJ$eBSTR`qVZh;iGCb;+U;% zqo0GO0FBwRwQSSiKk}*e4~(AoZ-3LkN9*~0n~k2o*We>9xPLsr?MKfGiILWGj)%k{ z*#G3jP8YOuxp2GYd$~HZ2?J>a^+1rTHlX^azf}1~gx}Brf4X+k=mljwQ~jFAIMhqh zUvkMg>x-&3barEjeEaato#B<8@l{Ej&AlRhv8-}Ys)6O-K>?8?13&BXp`C8QN7MiD z71w?~AHqGq5SRZ&=N(5FQ2)GQS4U9b^KFsP!kL7$I0+3#5og3wWDO;XzOVbKNSuOA zv6-RsahTf^nGKJiQY(6zS1dp8^`AQyVgC(Vi{|f!|KDS73(9c0?2S?C#D9JD@~v1n zQTiFAUnb+hFY7X`fGUr5;ZD?(csu%YwyJfRzu+AS1z_c&{q0cgOZ?hze?LE^5BppE zx|pAxE*q8GpJLlaFC;H5 zLxh-|1)1gmWX&TC9IjoXOwkWhwk4~7P>-N|Z$E4WI`Q(MI^~zo4?6_Tua$-j3NQP_ z*f6&r8{b0oWAI(@&D{7_q8Z>T>ur+1mVT4?%6i*Se(PtwEyOYshj7D7f>uV5!v^YSZ_Exu@&i$~DT_NG@Ofb{6qF28*A+6+fBKri&9`I2oM zCv1lA;+Lj@gyFk$)F-+86jiTiId(7+5Ai3=Jz+sS&_37qXGftZsp@}=qI6CtpS-;$ z&bp7GXjqqa!HtE+u@gKZXCxSm@CsJPyf;yF>_@^Sb}s_z#ZekmHL2IeQsmRR@`7&G z#hN2|lqfn45C{uil$$^&gna!~s(M)0pINZsB<05%IU_tJrd^u+{nU3G-iTG-c8|*G z+>K#ASo4IQLh+M2L~N9E5qVqe=nHbUR*(4Wki-J#fCb=d!|^xn84$GYzWd&HdGOHEMkonG#5DIj*Pl9L9%FaWU8#u!oWXQO|2@04GMFu3 z@;Ti}_@Zi4AbsLh>>3Vcx0`zo%|Uxza=GqW=k=K`6s71E6#U)?uKxCMUb~EM3#nfn zDZ^Lnu#}VpIT^Unc}GdY>Wv20 zdY0?Y|KmBRnQBMDtF_pMlWp*E;Y2(G+m$95`TNrhNiUhMdzF2g1~=9-{4#PMquh7v z{`!%7*5`@5y0eILs_HDAHYmmK0KT@4tV>;WvfBBt`vd+yoh&?}gTugeDyq7mUVE5d3RZ)1Q4jaV()%WFb*TcmD z(cXX0C}O{MM&RoDvT&)~Qnief?aq!*Fhm2c^YVv_S(cgV|H{~%aZY=85bKZf>QmxBcL5pdM!Sa1(hYk&F}N9eqDm->ymXadRgD0Na>x4^Ka{?Q7vG7B#H%rFY@!6s zg7Ls?cy*x47s2bmcw+qUrbGqdgUBpvlQ?BP|talm-B zpvsrQYjA#e9de~`>v3m5c>PH8tMr2b<5hzy`Qk-W8D0rLZS3msjlIKQKb}c@)CvIdh<{Q3NH@4Task(9^ukGuqSZHi zzeZ{ZScebeNGn)EkHg3N;z(~F4N=kS61#ly1URpqrGUVINa zByM#d`EWD-IAP*LyA(w|$W3@S?+yeRba9pxHN7pNeK;$Ab31Z@O*khi*v#W$5kj0UkAJLg|rg{?k^hs+(nx{v?&%C zStw~4z|2@r(^H0Sznvp=``>@}OSj~jEOhJMlsDa4Ss!!@W%8q2Ez0+z+qrCnbo=1E zub6JT$6cAqf#zG#HF1J4p4^=Tw@1X0)8>pW6W}28CEbLb?^L3A!(&oIqNUM7$*K?Hn@9G z!`N4WyEZg2AGljl&xZTZUhy-I!aZmV$r%@-u%z8Mhy2pL9!;VWWdIIv&(?4&I7KM6 zTvk4!#`Dl1X=!hEi_O_r9*=Vp?Q;B^WG`Vkp32Le(j3G^>eYVdY~xwAD$n=})r6r9 zcmHd!Jn(gwdDOXhQCU9^oQoG2vKb9`&b}DuQ)JVdS_;gb7KzMJt{11BD3IlvlUXk&?p%MWL;t3o z@7fGMrB|c<3T+xj1x;w7O*_{i$J3Hj)jifh`I!DQuY7&|kI2zKB{R70Rtq=)dzG69 z)`&v!v6~i-rFYlfGkBt`SakANmpSXHo&KCU5lS7xIbr0JXaqBg)g%QgMo^I}>YY5n zvx|!!s(h7h&|1HPTZlurw1bGIl{NT4T9S3cDuR?KN&r-b_(VTkd9djCW#pme<*$z) z3%2wx52>E7um4XsXYW6oJX8aYZ1S*3$wO-B7nFx6DrS?18r|R*kq3a@>&F-SA%}4gfNC;sOxHU09hIXuJ>+umuO} z!L10RU4(j&2?phZwxSxxl>}^s$hYag`yXF#|H)0+`#1VkY~i0jJs%NkF<=6dgzLH=8@Uh1NAYU?!Aogyq zUf#>Ogn2ece<0hsdHe;D4>e!8ml&-pPqpu$d`HQv@^U{+Ji++eoNpAcK0L%Es^pr7 zjYBy;EZ_6IDj(U=l#eu)%Pu8vz3g!*t;)BdJlc&lu0wPXEA5Cylr_@TDRh1hr33x% zMG4Yh<;NPiXFX%bjtiJBBxB)R(Xp##0+{?11>reSMiO%d84KA87%0p^KdR(8uidZO zkDBmdFWV&kKF>QdG$(1OPi@c2xK(NLhsr5t9dS^VqYfO9x!M6~#jD<@ihB+SB-Iu= zaX>230VsPRa3y84^&jUqt-kTGJ&Sfg`J1*XRcpdHv)(}-lwR-8<_{NIbd*DfqB|Lx zbJr$~yxIPH5_nVIDp5R_yp@qicqnh}C@=EkNlwHWuVz_y;T!Q|S>va+vVFZib967c zk#pokZ0_0Oij6)ZC+*yZb|^D;d!cTxy{}qccJp6usl*k2_fU-w;ow7gse4A`#Xb2n zMtSM12NfwV%2(~yzx?*e6BXFAUZTQ7PQm(%fhI{Q@|vyxI14aENJuE+auHJ4>GWdf z-UXDEtoL|F75!vBeiHbRiHGx=*QS6k_^xaP&J|P~e*036x;YCX@2MQD{41P1gx=2>-M ze>T6m6YtqzF4^s4p7k$)N}&)x)RhN|j$cL|LVx@E__5o2+4*71L;X`hJ^0VH$f!T1v$799`kH7;PD)v&rSe%KHk4C>9Y zKGm}<^24-~{;S82uVa1{!k*}Wj*48H{%gPH{_EfAyZ?H~fw8kk`N}^Ac=M~k7y#&2e1p*W zT1v{R8O*xRv!$%@;I?(1T#A1iLW-qCv-{pBQOkPpZ%a@-AOALn^1b}q57o?QGQN>$ zj~}e|Lx3~lCm6Xg`ytl$^Zm(wzCYd1chfK9(A9sEalj2L9qdMqOujBo9i03=3UPZc zPM>wIN8WJ2qUnA5#?PcJ;A7$purJ~-j)SDSfqvPrpH70T+~7)2vTZLgAHDEwjs~E> zMFyvSZ+BsX0e?vM)5x4575)1!iw^;adY9#e`doYi$F8VY_ebHs?5E&4q?yRx;6LxQ z!2G)IkCjX^=Se->iIZ{`7Y5@;#E0{j5^3keZzF>m$F!Q$c(1}CCfV~@qbkow@IMv! zy9X8=N!3Yp5ob938AF72fJGvtK!imjH4(1f%Oye-Fn|aSGIvM>*Z$(Qz!xp{=rCiB zT355_PpxEeBcX&`q>$I&=UmLx(X3 zX*$d)4ANmEGI6rfp>UK(hcjm@I+%GY{UJVpNA|BB0vT}Qv|1*TA`_5}JCbKn5|hp^ zKKxw8Xx)A618QfgY3Ho3sGXhNc5MD?yn47VFL)1EDpch1y2q0FB=GBTuHRkrTKp5X zLwV-|@`R$O$|ypKoIa}Fo9_^7*M6vF)qc)vb{?9-{GYwh4A)N0LwgZpicq4wmGDzf zyE_SU(>$#0%)=Yl<0N_?E*=B4U)i~V)Y2|J@PRQ9?JzAkPT34QI z?VxSJAvieujTuPTy#*tqPDf2T&lb57P4nh7;V_Jr;rNRW;VL0q?)h5tX4rk7EPY4! zmA)go?@(lajRAyLcV5CiP3NRs%1PrQVQs~w;|NdTXr71Lkmp5FAm*G7XIa~I8=l%# zfJdEIU82qb8Z;M&z9GW&v{Z|11xFw+HGqP#I|BsIJ;dFA07UiQvFo;N!wUpWSI%tQ zj+ga%94IF^)(DPMfa3@`tD)QA2ri+?h{3JIY1_w-SLvi-Asc@7sNu(veA7$07mWMf z97ee{z6IJ)Sn_R#t?;tXqyg?M(6G@pUOoZgH2ni!z=*q`o2T>a0Z7klydARX1MEfv z&DHXI!en(<~RTp)W0E>qNE5G7*k$|LnruJogm ze~^Dn)7;9U=s4n>Gtn(BQu9g$^|%*(p#gR16tcuE=SBtCV+y#G;9oQ^=L095y6da?(5xr`ch>USpSZVrD}as$pcKmxkP{I%a;Y?vvRMqUlx*%B zq3EkTKjWJbF50Ko2;|?KYyJzoK&$D>14*(EbDd{y#vS6-`lzkXbEl$uriIm;aaJA= zc(<}EOuW_Dch;|Febnhub-2NWbmb70ab}H?tdHA~MoV@{2)*bC)KLD?c+}^^b_&^! z-v3*05W#1V7_|zV7eCwr^e1>RZkA6mUqqKLRpmiPbS)`C1x^YZ?QA^RkFC!tufxYP zb1($?MObZfbnU6IgS6ws-Ly-uxrK0;bNuhc3(~)v0D*Wm1FUlmOnu_v=Dmy*nv;Ie z29=;<=v{_#d{{ne@RlPJ^qKhUu|sHdCrn=I+S`YM)N2aLnsL;l+!I*MhUGlyg(m@2 z9EYj1#GFS~s!jL4JnPoKpwKKFqqeOJ3%J)X;cY!qO+gZsD#rZlRX9mx_b$HO*0tg6 zi&~awga}_X>o?DgD*M25@S)wH=Z4Yo=3`dTcqVK1tl9EFxW9y)zC6K_Q=_M5-h*~szewai(*i-Ir_bSF z%cC6r%H;o@i$C9DPpTjV>mD*bjjY=eW&=0%Ao6|Ssr_l3^tjViyGVlF)yPc6gzZxK zXUySEc*$MWV8{Wutrir>I2ZllGda-1J9mZiHa-S!(=O+0E&?)N%dGgOH(#q7g@Fc$ zY(^&9m6xDjwq9_@X8}a^(}?)zYoSKZKcBnubK#?cLhZ{bL@mG}=K%Qk<(vk8EZ4rA z<0}M=v~zYxV1G%_j&vQ)Ohk2l%HeOQ`2lTxkj{k3CIePQ^?uf>cW@4sUVz!`nJ-QX zlrJiNsF4Y_L;BV~D0s;{l;`Yc8jCR^d6yj8dc`_?s8?~;gTi#NI9b{}9*09>z*6IA z+WF26z&KIFa;p27*iKWwK-CYWQJ?1{o+{*b${ru&KX1SNF!bX;7c$Fv`#oem;xuWR zluU?iYVVhh#yjeK3$6*5jdfK%3Q(MTpw=`A{PwLA1LtAc@?8u#41cam_MXQQFC!mv z%8$vzllhyur*h)`Vsdp}jo}630Wr`6e06;%9&ZNYsg9ILtvJN>p|}Yb%NU^9-49U3 z#w0tCIk*`jWBE;>c-qq^8;>aIuIHKR{)a=wFy?))0(v9gJ5Vhv-_L7t?^iIs3gx9u z)e9xrU1H3&<%-`^JHcD0T>;d$wu)SCr&AJ=!uLi1is0EL^RoU6gUUq5wW zsAoN6Pxv=wkLT#{vGE(tqltKKwz+SIS1%o(Q1|T!?$P(-p|U>h4BI5WjOXz&dXfEp z&trc-h=hW?8u(b3|1pl8S}F1>c6TNKH4~rtd$Rc0@_91l zQ^-z6+~8vbW}$2G@{vOoFY=RC;L*ogkhb0NSJO;PE%iL^-KSlF(?()BN|2l$MwLyP2N0x9-4v%;PsI;d<@^kE7$?-Q zXDN_YTmhc7a;wB5u-d_QKb~;4sik?%be{^0u`{#b%47A_a4gbBd>p$7f z^|yle#vVOb)O;@f5f$I^H^9oh$uux>?s8BM*q;UvpzUgKQ;H2G!pp=cTerhYZ`D=Q zHGiiEzRDhVsZQ11#rJjIWr~daGT;B@4DZWA{};ht^>vW{3v;SoU#8a95=Ci5z||n| z3-_-zFum}`7}k9_toWl7k}&#{TPn_?jeRi71&(4ObLbPT<7>n z-UvZH5G-;*dnno^O_TQ2bB+^nz-RoDE7*bYpYV4wdNhSM0(1{RF-C0=0H@Te{T{X* zVw)Y1*KM31AF!I1`+y#rWX@#YdO_rZCKJD2^L|l0Jb#I8@S&Y-zfa(j^^&UrOQsF5 zx)6nxwI45#aED1K{61 zANI|^mo0cQ1K}TG3BvIMTaM21$XwB4gMy|i^z4#H&v=v3l4xb#?(d1AfI$h1a3D-*=QCZdg7Xh~ObU z#i~Cy+%`(^Vd&OOu!&D6x}Zd(bP@ud;{0S}i{ zEz*w?h_^|jMA32gfG-E)5>uNmSM_S2T}jN|c(IsI7=5A4@^8v*6mY=5k#%t9jrSCs zKoB_DrpO}HKL=ua?x?2e5I#6Kvb921m3y2s5wzmKKY_}Jhy3XVl%S&<7m;a6Pl&QD zc*))m20yUKDUq=tdC9hyLBwKbI+j{Bk|k)_x#V{uK^`>adr*komYS-gDw93a{5&`yT0s+HA zI&^_el*E#gWF8b=8U~TX*}SO5E|)<$kf0$mIQ-*dSj2V3cHSG_6{qe?JHtzn*dom} z0!9eIB>>O!Gwt?jReO3FGzyIMsD?=>2A+7+nIq#|kcmG1vAU`lE-3RlLJ?{C#CtM3 zqJuF%KT+@>DZh#~{1`HKGh|Lf7jKp|*{3HrVXao%^w*xy4XQZ?h7{PshZ`#P~;+vjyTff$7T}BLse@5umSqncGUadzJVABq= zGk%Kew4C1~1}1)(-G4Fq?=7bt&^N!FYVqX4r^u@>j;G}G_gFKv<@CM7bbn_4E<%C- zqu*YDe$9Mhi~<~Sy3~DFxv(c2PbTay1AIg|#M}c7%3acVLoHms`5P1MsAt>bE&Xf5 zC*b8SP>rD-OV*20tGm%sOb|?GQ@hvEN7Pv#chTYMld~Vt@z&d^Z@Rk>*H;?RAMjE8 zu-;Qrnl6ozj5+TMH}$C}an?72phU-I`ej$TM9H+U$)=Yv!!avhSVf@zTc_S5G9IQn6RddE1NGa zljbXQ^S=Ar?Dk6m7uyGt51HxUrsv}aJkRyW171;BB^b@Z%9V*h`&3yA_U3o#P z>hz;up-pw=mG9i*G9rUV=)p3Y&TEGj%35WQs{SHAk&=aCo?yr9daQ5NBMEP2ikb@W z(ePc=V&t5%!H06r2Xg3+Z+pr(oq=dq$hscl)6Pd&W3)ywG=0w9O0aXwTgRQ~+{oJr zTHe~mPKK-F5Z=vx6leZ|^bpun)K%PQT!$uNCL-CCSK2_U)TOLR!%EN=U zFg!)kJK*IF2PryaE1z9HCmIY8c3CZ4lGSm5QmR0?@(u;cbpnbWxANy-4G8V=?-=AT z`T6${L`h_#&v~zZ>iz3Cy{T>tR11c1esqgU9WcR?2NYs5<4zRa@BKo@Fw+R<82^B@ zz$7aH5mc%&wKdYYrp6!lw%pe zpB_15+~#39Ex(da$vlW;O*!K>^HOlE)N$oWXYM`%(IXHW60>EsHkgFR$S-nAnipcc z+&U<{^dr1SQ-yV>3QC3Mez@jIh4H3~BNfewI*^3v3&$m1Y16aqMlz^;2@+9t~7#uGSf4pp?}*=q^>G zqUni>=A||0Jl-6KdAT?;Iq_g8pw&`?zi>m6Ko@VGihJ%Z!0+fU-AGRB5g}~3k0(54Zjw~a_7>Uy;a!$JO zmyCCc0(pLDuzfTB?gU1K;;8G~S_sL;j}HDw;D_i*upZ4b4y8PTz(b%m?3ZJmO2f}$ zlm=er$qN>x&O7X;g~EZ0iU6#$Y!CKUPyB-Y@k)xlS$*zqtkte+9m!f#QH$?t3Gk=K zunBekk{RpRo~QrHzDPW_v?8x~EbH6jWFQ{<@+#$3%joG_;nY}L_SczvfY^<@0l3%= zh5-iQKOGKm;Y5G#e%i~}a%U*4?p0BnXj)57g@#TT*|YIM+}1$<@#M?ZAE|0b{gE!! ze`KUgV#3JBRm5+>$Y(Kqm@!(W5B~-vp#Se0K*^VGcHPQ2V8ZM744lSZb2?6VIWO&& zs^t<-Vg5%?WDg!%Gq1U?a=)o z_U{%{G$FrbQw67DlM$+@<}9y@S+td6#HV1s7kOAu&oFhXiXZY6wpN9gEJvqbDgS|C zL29C!MpF*XJW}M~U$=`K+;uJfLH~e?NxBm_jFd+y$j(?wN5h&9^%-l(dKwbxvM0Q63MW8z+3Di>vYo>uZ=eXS* zPCy~JaV^_f`qcSzw2vXE;B>*TSeXHA7f77=2c`~53gudc6PTXc3}Ija#?f}(e9z9nSn#b>fe_;s5?}vYl)#-K~ zd%_(jZ9ObyyBNnJXRx`M#Z*`5HPjXB)OrJujDNaZOv=FoB#Mq0gsPykGx=ccM_J{Q zKNI<`H2HM1$<>a^;irI@+~JE~U2S{eS3=)Ts*e76@H^Obri~eJQRYo0aFbLb8uACM z8o^EyoNb-(DgjB9jbV-fkeUv3$z6%^&LQwkefB4&;43xo#o2UsNDQ2^x3sQeZwZI8 zt`cd(FEO#Su2ExMp9TL*oH+>RX(pGl*FWw_!npac+DwIZ#J9}N!cUnuo()Wr?b9?r zo6iL!87%}Nu%uiZ5=$zH2);O!b~9xBXk&XINDrDB{Ry+g-~OfS+e19ZE?19o5OO!3 zDC;}P77-?eH^&gcJMChsb}TFy`NpHPjA*=K)!Tzb1@Gy01Lwu~WFT;!h1$t}WcF?F zw)|?zcZ#BTs`X6Zjr`r6VL|Ns^OpTcoZkrGrSnTa-Lyk_?72zd+lA_sS=-Lq<=RmW z_`2zC$3ihAc9pIcg3rX*DkJ4g;H+|9KY&5Ie|J=aX3+!LZk3z!DvLk=+MQg*`ips( zmr$tqDfumx^xQ^CR1) z2l69Z&Qb#f7uW7f2&S{}k6wI9J14feGDP|k2o-NB!!JJMcj`vP?-Uw?t5@Ls;T3nE zo?VXRA-4q^F1e`J{8`?g;eX$v+l_puw;b8+*07xA|NmO|0}o{w63sDdYW72=UXpz06W_NZVi4{A|WZ z-sH_pBhAMc0fQmv0HK_tzM-bO-S`0|`_)e|aXSLnC@cC>nT@XCPnl1)q6o$rk>gRs z1rj{re2v07>|d)wOR|zd?+)j@!huA~KS4DmJz~Tkj8G(~ci@yiU$X>j zxf&Buw%T2(Y)c4UsDr?+zUT<^dvvGu1NzZ1$p8J?|Af+^(CE%r_Vc|y+jpn=-jBC==(aff{K5bGu>1VKkH6pl`_*>e@6nykJ-@{p zkABWA_HSpy|N6>1TLbNF2>d?G-@daCe(Uj$tT2zU`?ehHN7+ty|5!;n&eIq=^7wao zm*k9*A9=z|5rB04@h3*Q>e;4|S?*`xW8~Gh9|99IZ0f~12b9tSQHn-X$$hqS;H-A$ zOyqdvb{TVRuIs09?<|xK10iEseSL=}rfbhtkt3br?8Vm%jePAI8#5HwDKuoZ3pacQ z&_FrYlR66{*ie|A5u{*8+c`>;y11=PnUDX&-kX3&S)J|UVUMEDXsf2xX!MI3wQ8`R z8nkK)cL+q7<}-D2yKDq`G&2*jltwc1e&Mr`Z6 z;xev`P~m^y&pGFP&->0yl7abpUH|L)&2>TE?VR(R`#jru&L*cnD38^@_{~-y-9~)` zRw0VFw0Rc@bz^eGyvykLn)1Y4?u*0A6{EXna zO%JZmS1!eC4DTD4Vn}i%GGx{jeZ0_KS7hP^CLj8>m8h1X&$oc;7`q|j2_Quihi;U_ zeiEIt#IDfB!RghYHKI6e42qDqGBAF5?58IIc{F$xL6fJWtDE0x+(b`=XKUW&91>ID zZmNFT|FHSDUObj{bUmb95_oCqO+8el@)v*pbdmbsWB&urFM)4gugXFY0sDQ@t8Y}( zigjGXE+-r)rx`D)xorP8sP|4`dHwz}gzKnktnqZa9FPq1y!w>58(Wo&|Ht>_fBp<^ zJeSyAICh+`lCp>l!&9wi7f~(6J3x&Vw4Jb!jCx2II^i7Q^%#nfH|u8F%k)#&-{mi; z^<)kciV*+3JAaNUqE~GkiP0^!KUDvb72;dSt`ksmFf$}6nSiY!dtm{vngac$XJ@GO z$X%K3Lw&2uKcU6@14&o*M}`)wnfg%Hi;v+Ov_|zg8W1~=y zRr?7P>~;jPZW^&R0M%axQ4Ew-6U5G1_^JDSiN5nF!CG=3$`^Ha;y5V&LW}kp1T4>?3}vt(=A28a z+${>6A`oWNL4s1~2peyHci|k?Uael9QEXKlnnsF<2a0%XjJ6+kIb|(r>T834@@N6S z58$(|X&TyP+)Z918}KUye6O10L4&(r5Ap79_R4ogV$%Zfp{>6J2U|aybrF93KYvjD zk8;qGu9`T=ul7NvR{P{xr52n^umCGX&7&V-^n#(2_9d~@mBYEB$74UBh$tKHvfrtS z&NOhdC=I|Day=`I9~z-o1P<93mE-1K7bNsMmlfJJ@wT`E{k=4lY1(DFFHH zVC)*UuV)7fFqzBn9~qTD=y8d=T;WsQYbxU53y9&_^p)eZ8QLzXR5|mjem_!y);1)( zeg6BVrzLo){de|T`Lpbk%y&I1P_J0t4_U8yC1|@M@Ca>hKmJ1Dhz*W8JK`V|S|FvL z3|+>L^!od?vu*7}9Sx`T>|H3aeboSu>Jm9KhD04r4W-PG?yS2Sii;9Cg-5q0wUiSb z0bMC$-#EJ%ueF&_e8Q-Yx_J;WvK z)91WBS5ca28&d?uqKKj;S%c?b;ESuPr;%i@mrF z-){%Lv5Pa|yVYBIQG_-l{*Cd& zeCdycSxB{8K{@i3@AF>{xl}c-vU}F!2a&!4H|Rs(MD zV?2Ebs_p(fwjNv&<;J*O&D8E63bV`$dm+y1O(2rn${|Dt3iIaF2q#$nc9ii>vk(Ly!IH*rfvLURNWM`&Ksond$jXDX4<#Xi;Oz@TS0Lc6)X3g~;LS0ccKD(3ETX&?r*_bPUESaiIenc7j_v zv73fnE*VD4zv2@&0tPNs(8S6_>U}}4gyvFoZgddO&!r4{iSnt{{J_~l`OYCI{Q|e& zY4Irl!CWzFEYz-?+5vMF%QuXZ@%>bKb(n!^AZqI&`{V*#V`wq$0odI*m^z17$93av zBuKW*mA!MP!{B~ZZSad?=!sL63G13bP}sTr2RQ6I(Gb>CINW_tN4-tN@qG#omOobCy(u+LX4<1w#S_z=>n3>WxDz*Vb^)0LbAW*U zEZOKdUIdbK9PC>JBHoJ!Q(HcAv7l0n>p7t8pv0XE&hy~`DE>1~RX(NOFc1mW8H;Q% z4B>orz3PWACUN+g_VWDC0;d_XO9$bvx!)zBRX;(Cwa$VgR+pIEda@Zyvg2qe^l<*+ znu>5clB!J$++n2`fh1~jtgeajV-=Maoro8_4c&wF5eMPpwzi33ATEL(1{%N{$?wggVoH>DVg8kp}l>E*3a(44v zx-Jzu)%xz?s44AZ!6NDZ>M8p&SZUie8;@?L_x0Q6&SYOF)X2RNZ#BUs4n7Eq!5ZFl^17tH@$!j~LX? zfM3xr-(tUL>C0ERy?7h{O!lK!(k_HA%JEYY;7ovb)i$8Lfd7aJ&$tB5sJw>2{=`TO z@52TH;ep)PizMmAev!AltL%l%R|O=6HzR~;?Q%LCeeuB^Q9&=hm`>kSU*xsN0P(>X zYM||e8sBVNEIi=H^XBjS@T4Xt-8PQN3;j5j;mp5u{#hTt)Ad^fAENQ!aFn(TtG!4~ zcd%y|OtHrBK&I7CLr*+W1VSnFGTGJ}zw^AHGD-@R=bT2?NE?zB?~H=m`ib-6-$buG z3~JKbl@6(o^yk9PdDtvK&kJFlzk+}KnR@KUVyrkYI;|56aM~+2e8JqtlkugrRhwxi zgB$nr;7@c*BL)}s{1eU_H$2GqMlK-q?zm#rw5HGNzJez`*fysY3qFCR^U3$vPLqmz z8&GFXIE=Av`}ru|%SX`UyH=wEjuJ-v5LJLu*r{#7NA#SNIK+`vyq>IUKW&H8)R zk#%J{{XJSa*4ad6qUYNmIP@n*Yohj{wDT*I{E&wkLmWA`3e$XGkN<yWp!k~=-L3WQH?*#cG@ z?L0Rf1C6kQHP?vxLf42VsmS5lzImH=J!&rSaCGZ3thR*tlpt@kEyPvki85wW5ZSr{ zy+MxT7dSIe9>g2VVj1Hj!{GHoK^{QXR&GBfaLFTS0MZL2D{q<5pstycr)He;s%s{F{8?f4$8=jy8?DP(>5 zOO-lRB3Fq!N};R_fQq8BYWWuC)nHLTKu<*rzlRJJ1G{@z1jp-m?v$%%uqGP|9Tyb& z##c@SWuj}OpK0XL;FU?=6d;wEv%v})eFOc*@%PZ;KOzT|-QU@4xF7!DLM(g|tttzj zY=6kezuSI>_lJd+Oi@`Slgvs_(~z(pkBgZG*+SPFE)bakdPdF1Gqk14Z%>_Hq$QYN zfzFTe;?K|M7&kxgaJ@>8Zig&REFuABe97o1^F7+VQb)~0OMeHz;BXg3j+;29ZWg(q zJC1h8qXM>gFD}q61#i$R=LP&$wOmaxNg05kUhd{Q6@5(A%cw#rIi~TcF6h7$&jnwr zCnEA{8EujC>9--*(Za&>6erfD zC3Y^SL;ot8AmI>Ct%r57i6Pthbb1BZ(XXJr3oUNq%^Hk(N>4tEW!J%TlCW)_e)c0}|FMw!u%tp(M-A_?b#)4@LIb3k)`!qGL+)dkLNd>k$O z`y98u46asruy5{o>mz{I$cI`d-(A|u($(}UaX=^yA|I3n5ep>^UHEV)(h%fmXYD9; zE)#W~!Nc$~)Fk+sXR3^GIv5JIzQLud?`*bEd|VP8l#kcUc5yM~vft2+$HqVOjq~R~ zU#FwLa*C9v;s)1(05*E%bwiFD6Z@&hgXqd|W%9dgkNjMQda zF1C!?_ndj!`6gzt9ng-q!vtu5*_1DZ<3IWfz4#90yJKwXe3o#V?GIJsj?E&AB>e+z zZWqLwJ6(!wp?KCIXGNc(E9m#7KTm|*h;({Ccas(mU3rImQeNimhEke!DdY<3NU(nM z&y@6N_raUD!94hL^`GV6yo%>c+=s-2$&I1O%?Ii7Z;*5*{E0SK&PyhFBOQJ@2{o0W zPi41-+9)9p6p;_qm!S)C3{JJW64W=vZ*l2SRw82jD2w!;s5meT8Dy9Vu4TMefXp?Ia_w*N;ZpZ_BP=SzeTQXHaOu8ZJFe@6FH%tvR@rT#e7!wr#(J91m@rvk$Uq#YKKX2>Y1a z?c*w0w)Kdy|I|xu{`A};I$7S%^mT|sA+AFojQW82nRzD9juE}^zf23IttP2O3y5(p(jJVbnzq2D@+VL(_)+zP96XG)B=uU}(2^H;zosHq z{wo4BdlwasAsmSkSp=O$55sKj~LEn588^3%DNNh5K3(5ccvV{US@xEykKKNq{Ei3x5=g{oSwzdT8^)7= zCuzYFeDIx;AN4KftVC8gCvqqCVb4Sw*Ke78@T&-=*Ou7Mvp7sD$be`=(n(UIk%KL0OgL8J8~7+sK2kf*RTRN4klPzj#k{Aqks*Ek(}fxG zxk-{b;vAvr6(lh-tT*x^dgpJF`L=M}FkQSL!SqH>WS*%dCmT@!=#5q1LgpK?oX`&P zNBY{BzvbUPglB}HlUcfaB3_QmCwBTusUQ5f#$?GNZor$@d@G6JZUP9RpwWQM2yh}_ zC56tJ5`44dcBEzyq32A{gHPw&##|8Bj~=z|41o}`M43WkEW=PYq-ZssYk5K!88%{*#lZUOF{Nfe}VS)3rP2jI3l1im3VLG;!!kO~r zd}E!GL%aTY3VgxK=oR~Y|94bAF{x4vEr2$vkQR3NWr-yZUHo3*4=k-YpYDWCwUoOpUHK?Rj+jY874J;(S-mc*@1G0 z(0^e%sFbjoU0q0LpZ)Pn3BuL;dO@k(vKg%#GR zG@Fc_E3n5!`Z#g*x6!V8o+0<*h$le^d}+wds_P)n(fl#+WecWaP7k93fEn} zlT%!ov9mu&z98ee&)_+E@$x%d+U_8PbuP0p=ka)(!Yl3+8pCeZrGjzK|U3(>!+{~h^+Yo(_kM8SOxz2N{lwK{HLw@3FhE8aoP zA4&m>J^#et54~rdYJJ~h8Y_|fJ(=-Lj*VfUuccQHkBM0(Ugw}3OZQT6(#M$z5pso} z=*@!}Dt;B`SonR2P2;tE4mJHKJN>=cr(cDkF}M9L%RYURo&E?feLYkSf2Q9FdXIQ>#QK(qB%c2X8OOGUcGna1fSG86nLm+j2Q(?4A2?y`c~6R-FrTi-A1DU3*f$rlfC0`KjC^nbGjy05lIr6ZP|;nUT1z|3Zw+i# zu?}$As_%pckiUZ3DY--F+Iv;ib__L5BLt}0+)4O<{Co+`q*lq91{M-MX!MBd56V8= z(>dWHv0)@?#SMqtR#!U!*8Gt*+ex-4hllnuzAbTDaV()F)gUrl{wFjhVouJ9kB&0$ zsP~-HdxY@(Q1m`UIMzenC|4kSA_yNh|M>K6;oOLDV$dHzO0);}4D<6F&WoTu@GPb+8OVVA&7jpZ9VCc1(%JR&zU<7HM?N`DRv9o=}LpM8)}C0C#`a7 zvMWcm`Q{08C!m~@=gX*|VNvXms-@2P6T%zm*8dIO&Ryy7+kle`1N_;4m&Wh*hkX1A z9!Q4yu4N|MJn3AO`o7+NKO64@a->x36 z4NK@ujU+i=MYX`5{QqMNq6K-ZT|95J(|DnLCl{uMo>xeflN&o%-;^sdSLyE<3I&E zbei>1yB)5q!2dheU7_lCm0Lfa6_LJvPB{#sW_U4CcR{3)N&dpg_12y*{3l)c)gmU;}JLfYuj!*Dx zoYv{!os7EtR(y_92GixIrY)zVe2C@D|31o?Fn2%vfAajj?7CQb{NJz_8jfF&S8#aB zg;=9Oll_0O)NOcKiaL(mXT49{4|R)#Mh0;yesA(be;i29*CLz250iO;>E|83iG);f zR{veY?&@#U!0nSBYxHJ+&5?+KfzjhvU-vy(GokcZDIY_NVj0uk;w5cCFW9-T#I-zyAS`LRQITKmt?d_y*F}X=*w8| zqVAm38}eRiZ1n6%?P~cpmdrGU$i#TCQHP7zOE{yw&d2W2F59aRS zZ@TEP-kMiRsWoQYM;AH${IEI4ir%g^bX8Hkb@V{Jaj8-l@4DjDrs#4RWz!v7%Rx{fjLJY4oaV4)!tjC#lX1{9my#n`mQ3d1vS_ zQ&vy;5hg!AO_WK!hH7VGsI}1x?GJl;;l7upwc}2+7fIKJ=EBY#(lrnsXcvjg&!lNA zc|^%ZHvK8E{^4~vf0Ztj$Rkt%_jAIOx>Bi^+n377ADzbt-@5j$guK~b0*J_)$`yzU zV2t=cvr0J0bAD*uP~Ojw&47GZgAaUs7=Bdq;UdL{v)vq!qxu;=mpvcecMoy5`Gq+e zyo+pC1Y;oY_kcDNr(U|R8)r50Wb!fofzr2LJlA}u$yW1xj`r$19Tji^mY`676>9GR z+<`j^zW@y4l99(e7G1=gD6l{Jt82P6>Kk02ufdefznO6x%rCm)?rd=T*W(s$r{kPM zaDY92v@N(*A2lFuZ2-o@EhaEoxHUZP;kFNRB5p@L7sPEPoG-<#Il}FvyKFf(cF>xC zC*#`tvuO*S;F#G)oJn*zr~vmJLr;)&HuZ`^K3Wqul=17q+Vf9;&Za#_J!ZA%ReR^8 zJ>xW|+Ww@GgE>IMYtK&H`Q)Io$7|2qlwnRf=RXr{&qLuP=CnQM{wW*W-hafx?Gzlk zodY?D9XTLw?EuEZtzTfWjN+zZUs*U_^n4Cs4nOt=0w~+TNA|X4LEx_<+tIT+2D5TLl$m-#|eWuz^$7O zLuNV6Uuol3i94U1Cgp*`?Na4>B%Q}r2XVXK^)+*(cc1w~Hn`PwTe#hhGZJ%vTjvo2 z;#U5YjaxJBe7Kda^5k?Da}qnSDu`PvoZX!A+YP_Z2DfPsTDbiXCoJXwxAwya#H}8{ zcyih!Fj@ModbNk!Y0QbZO?xVc+j*`}nInEX>v!4UcEEBAwV3GnNxn-|F_xT_T@4Qw~aVTFbDir|BV50ivt)Bx695VxYIZQQDH=hJWD zXFPt}hdB|q-}eM@+W^-tr?}nMkqvHl-)G^rbl05VR&~gLxK#ldkKZ~3CQD8u&w9A+ z!kmcPkDdtPwi2#gPI0^9_H1x#`iq6z>EWE<7CCr8+}Z$)hg(cwvT$p7&ckg>iN@`y z$Ah@t4A(BFxSe!cHn`2~vT)loloQ;_Sli70TQ7j|a0~x6AgA5(KSGcghKF1*~mm+{#|CacjVx54Vy&PfnjdK;ssDIEdT-z_rUMZomF@ zHn@FumxbG9V{?LAK5Ls9w;BNB$!WL1Wa+m#FM7B=UaWDO{!kFN&2Uk2ircxr$_BT; z{@KFqm>qM1Tk?Mf#H|y+c(^45CJVRrmpt6=VNSHCh225iUWSX3Q``<|&jz>O|H;B_ zD-H|#1yfSmTp1Et??V@|~FU(18I{TVJwPI3GA7un#p@JQ%U|_yTg04*TivoCZfC>U$tiA&Z_Ea_!~SUD_PtR#!L57W z0dZ>vFdlAw0+WSX{og&@E@e){?fCnHxP24OPEK(<_2=2(HtG)+Zu{y}83&lJG?a0+ z&V2^Ntp~t(xaG$Ja@r*ilzyAVoQT_~`+~TQg|m}W+;+Pm8{F3Z&cf{-eJbI0;?`a` zAZ|$j#BJt1LEL^07bT~-U36VGxSjtS3%3(-EIDWZfbsaPO<=O*wCpVp zw-5HvxGlUhh}$PHwK>J@r!Cpww(1rOx7j$|FbBAmu(p|TYXC4FZoLANgQ@r=9XZ>9^ z^B;q_{T8M+r?`E6X*Rgk{o2CqLmViW1AfbAZ8PJR05BeIW&aG|)-MkfZjXNjInge> z^7|le3t(zUw+gcN zodHvuQ{4WvBpcjD+3}F8aMq#5&CFxu#9;owKdJj^U?yLM9Tzy!OK;|fnzcS=zXRl> z_S4Yo+v8>Ls5!vs_`2)&-1Pthuiq28WIcea1*o692j=SkWL~*9mtQT@ll20Po4-Hz z>v(@zU6HpwK)omYcvCeG=lX0uy|y27dpk!;gK=@1nul%bBVgb^GtUvzTm$RJ=b+sw zPCcAe+}ok=Vlu}#EpL^SYVEIoP3#-iRO6Z9-?F&;UVkCu`W$3CvV+FkRG)S z&kMf?`IuII56&%2okuRXWoXZxcSTAwFZePf&ypXaVJrO+*{A=jo&Lj*vo8NIJN>=e znf|iu)Bh-B*FXF8JKO0${3z@C-@S`f{=M0!pJu1OEc^8D?`)NS#DM8#9Ye}~N2MF6 z4`dIl-0ydE-Bk)ue>^2Vbu9Ip(BnVX7ujSl&vJ%=NOzr{tv}n8zb$mieE#b9IIo(U z;p0p*Y%63=Mw*T2v9c-d9=I|;p7o@@P zTk$1!fPnhb>*Ea_%%^*bO5c6-Cdh>ELB;o0ibcy47HzA!AV?JDO+gZNXN<8 zy8MuQER(~sM{K*uLuA6vC>+>mEj!|*@h((Oj{TtBeBdWshJ?*ij2<@jiR%;EEr0rZ zHZdof1vjz8yGki5f=ZCJyV3|7d&pYMWcT~ZV1ERPlFr56jKoruq2MgXmHKV_dV?Jo zW@De%+Vc43`&sLQg?9Sevrk`Wr=OjD`p0a2uy6M1XWHrC#0i2~+M_Rbvh>mI*{8qN zPCq;Q^vB!j_su^2+OZb>Z*IuC{tNB&w`ZTe&`v))`}B|PXwkoK_UUKZ>EFa*hS|3N z4p#ZMXP^F7JN@kJ(;siA-#7d8Yx6Do-*mFB|3W+c?b)X;L6wtNh!uPk*bOes=chkGIqBn|=DVqb&O0#EFNR|I^t)S|*r3ch{$bjQLB@ z0<%w&Vtk!zk)<}g-0WDHIoMfaU)lfbqYcpKX7Wr}cR_1~y{Hg{g{2=8`IOcbHZ^)w zHBzFJSVbnn8u0r2E2WQ&ZDP~`o6ciVw?Ax_p!)k;MJS&?Z+&%B65AulkxGYP(OG1T z+~+4vFOsXv&%kag^Y+D2K?mXZt0Qm}+%Z#I&p2^v>)EGF#dcohxHz2`5nOza7nQh} z&5J5r{E!!OaB&$gs&O%YDt5f7K^9l>qJC=Y&)IpM+HzxY1OK-E{Ca)ctZsj)Z`;)E z?fSM|-TqPEcBtEX^=+rReNf+asoN*?ZMV8zqi=iE?F;(0SKajHfp z!F7?oF2{9=zOKP_sa!A9**{Rm+m@TShs)H~8;gaMmYX8_wqIzt31<$;Td79NO;!3< zD%o<=9DOSgwA@s!Z+leQ8htD9wcJ#%Zw1_z=?yHjQ@)(u% z>t=P`$?FDn-8Hq9Y|%2kduq$fo~bRQ&@kYd_8+WWk^D zC&iC%OwO5iB6f%?pF2L%*wX`t{QVtxF2=}}Sm@k3vs_j_U%g7sQIW;ZturGj&!UBI ze*!;UeFjIKqK(9rDId1ZtV;82PMT-cX`a=jc~+nL?A8WUGRx}RqG$9hq^ziH5Q#JXw!vw}3wiqbqQN%O2U&9k!9XSepH zCGpl+`p5n0AIH-_PNaXFO#hhHBuHRj-?bv7y5RRF2bTc?DUt`!kkFlJV$X*n(@uUS&eZJtjE#--~ zG|RZ9F!Gj`8MhQ!-qJYZwqM`UKI4|+&$l$uxTTWdEv+F)cK%u?5YNVwz`MWAm9M#k9>Rf~u0Yw9UBf(YLhCxb4=rw9UBf zlG{ne4Y=;q*Uh-@(ARCaZr9iCxNg(e9k_1R*PXa-(AQlcrk=5$Zd}yxq6Zh%yy(Tn z9A5O{qKX$WTvYO+9~Ti`#Bov13p+%=r1&GWgS#<^XJXN)akdanta>kKdX1BfrgO$z z%xD%#boE^b*KH%j&*nHwXz>A1ddROCKCa6oqeT(=w-obl<-DL29&Z^u-g3lHBjln6 zZ2pw@0X_0tirZu(s3pbi_*<@@b?Rqb_}ieL_2_54_}inO#q_g&{LTAN<(JUUlK5M$ zpXJM@T;M+ZZP3q(^s^HD?a|N5^s{pO%}c2KD)qA}{4Lkds`axP{B6+B8uYVf{O!@t z+V!&z{LTAF<=3U3b>nZje%7m>_2F-We%7y_#qqaCKTGOod1%nQk5ztQHajpaz~6HH ztVBO6#oq?~tXw~f;BSw9R;8cK!QZ@3RDL!3Sv~%i>u1gSSsVT~=w}`JSttJX=x5#f zSr7i^NssH6;y(Q>hQA&9SzJF$;BR;{%8lMq%zVfXN&dw>^WZ)83GZ1p@2OCDPx^RI zjlz4@f%jA?ypQO6>J;9W>U$~`NEca^zUk&oSl{&UhRn|luwVL;VoC>Z`glX};Z2M;lrP@&^M(S*8w>#| z3FS>D6|=0E?a6RCx9v(ecV2|VYTG+%2L=Q#Xv?QE!H;^RlhONVMW^Ty_C6qp@dsylB-{NvBi>*AciL!uKIO)`1L!@!XU=;zZT2r!_FjLqGr1GI|nsjZWEPvqE# zBywr`kd3Q4*@4_$_PsLn1p1HX%{>bJ$J)8);QzYN;-8VY#^mL)ahB?PG_I;L8)rT8 zFSHx((MiNd=gh^{smXKaa*r+5)o?#;ovHd6=7Dr68^Q^}#{&zJU++4>e6vA5==e!u`NI z6iO3dddB7p(~fLI{y2_b{~z$%)lYSzeO*)gAa1DYsp@Lt96VZ9TtoGPXH`dPDn zMwOY+&pPxos@YOUrR~6HV4;gHH#1lX@c5T zYId1654BXYk80a+WpVQ~`tLDJe7Y;334c638qOhcw5bQ*>PA!*7G@TQA5tQK#& zDWg5yaKCqQ%az;<@XX>EbL&?_iSFKPW}?JzCbw{Jwq?qGP(M0R@Qv1uY)*J$k8B#N zqnZtDZ^|%#)H{861^JbEE$Po4J`fI<(yxYZOnP@;G@V}dvrF!vWIxOO>}I6j&#rjA zh-Lcy?1FSaUltjC`3)2Ijdz0}qH3EKZq+Tg;fMrCyhf`Ccu<^8zQm{Di^1?&4Lg<@ zp9WTd=S?5c$W8Sdkfl3*YsQl~FQ`P7BjehaLWjm9V-=3jk?x!z|DN6jqPwsj#N_K`I8WJ%rjEyU zB!Tu8n_^6&7Pd4dY&r{HCp3E$S#nB0@>g$NyJG4=JPKG3Gf(OcJRl}>c4Cq0?4T_7 zIq%&F{nqGh$A`me7mS%vC&w@K=Ly#O_$7axjGTEBl0Y@5L?N>n>e2Y7)WhuHt!r8W zf}I0q1;*>``r!kwesX>U>Q}yVYW=d92L_VdaSy~oS-;)!4E;CPhA1vz`^k8SI@lDG z5%zN@BdC433!M4S%Qy>0OJoz~0@mn^nXHk^zi_C_FvucC)1uhFN{B#&^?)#WBK7^bK zq&f||P!4Bk#nd%URT_$3?YqrAQNe2o=l$p0;VJT!=o;TV5JQKVUug5epyw%F@8!-m zrv5W}e!KELCUd@qZ|FbPe+q2Pd7o!O13}LFE5k+({QD$BE6TYB(~|&Z;C+&dnC}`K z`>e9UfEeaSwp38($gzU<`SUPv@}u61W4yq^FSPV2Jftka-Qw|QB2Q~7@?y+a&I`p< zqKbUqc?foX?Hqq_^=N2Glgh)D({BhHcZ67BrAw2zfUAzN!`8Y2H9?4H)XZl>OBUCB zpIiYEh#;-Var$&8A{`smPTPvKPzpubZ!8f*azPvWO{UFpDSlzs$AU+>v8$pmdwYa+ zYw4QQ!ZiUI@g&ILT|)M&*V8&j%I?07v)(&Swj3El5*v^&$>P4s#_rJG@&|tK&Vwx9 zjnK$kxS^Z}S&h%txrN_->q~8yRj%In657xmzE#uHhHxGvGj=Yj$}n%qqc@Qqy#-$} z^!@=67?JI^oY2dRork|?=q1KHm%891@S`5bo(=)=ZOsopFF34jUy5KqlB?qluV050 zEz)c4cP8wE^WyM&&R5Or8vFJBcrA4h{bbsea@CRW$<_RE!n@r97WrPLpXHZJwr{HQ zE~7_%gL%_Ud3UL+$;A*o^Ig`<#;F@~bj)PJ8(Vl}oyS)!zk98}{DYAa=#JY#gFm0B;cZT60 zM=hzP$dwXuK^yHW<3;)FrTO^?A3uXjoA)5?6R{aS z&*@yvPg^u2*YD+>&uQvUK54^8mj0iw_@r4t(0uCg$+gUpd~#}&4_)UFq0{CQ(#!r* zsmkAV55|#C$Rqt_AXX_*+{y0f^nrZtfV2K7mp!yAz;izg{cOMb_d$}L$2){`IN~T& z3tzl@Ph7JH39N3o9AWrI%=WFm*{vC~r*OC7ul$G?f2sOZdII2U)_|RW;C}Htp22oZ zhfg~P4Rn8!=MyI)1yk6DLp^V*is@ml539oou$bn%2K^o6@c3b*Q+IlvLXQms(EBn! zl@5xM1E~!D+xB`L`JGJl>e&#eSJBt9s#gQkqh5!4^{Pe=j~{B)>pfUm)GP5)&g*s7 zw}Wz5s_N4(@zrJ$(fCxvI0-dALDX}idLra6cyaf+>*{g-bhIi$|1P;Bfo9ebEi(rr01GhuC52|kK56451vZofm%(z zNO!VqA4UF0ApdKM{8L}i5eHuz0LfLeJ!%pG-`F;^PtVdIp#k)Xq@9zw66=)k#=U_S*Sb}=Sa3OvZ0+^%z9Np zjRIt^MZ@(g3|<53!KxzQHFSSK>I=JhPugVbOL!cs>b_@J z-^hNstnc5RNmJheaA!O^w78#417EB!JuT*3N7HVGU&-G2`z!Ln4G3eWkG~ka-E?%^ zT3%~>3#VIsF|77Nu$dcwzpY>D( z`WTJLgKE#i|0-zTlQwAI+wnhX`6vv6hQddB;DQ|b%xXa(FmNHjQrewxwtEAUy4hAPX)zghVAYpXw{-Kiq{*{ z_8&T<6L4^%R`aHVp1z-}@l^e%(a8Lkf?l)30r852YtT*{TXzclwG z@`sUs@>$I)!5Q9+tn*De!=Xri+}D4A zLQ9!}gvKr*y4ehKX_JLsmh^g2+l2EMug6pd3aF(${xWovpX;gMbR6g$yR{~xGlLGz zL}6_I;n|=x-god6q&xmNB&S08ScT3SSv&8D%D6NBl`qX41LKzaaU(v$pX4gD(0W+y zaUjKY8I^C{C+?x@GHsS^DOMFYU;M?DBckiPR*ris>Dz)-Sh`{=>6a$y<4Ee)=cb+5 zzb`}l&EQhV3U?lY3RC~0dQ)5KIIT$A}R<2Q!+H#zUwbIbZnUNvnDK6KejPT^tzIg>+U>%6fgYs~hvQ9X`KbCm^7A51J)tFX zboCmHI(&oBav)EiaUMsDCD3vi#shT$#$LGm$SjVVSx|dIB)WU2FvL+iqpZ;K6CzDp zLra#Dmhqcw_l;~_z2V&p+D2r^2W{`!3%0$s6K2i-w=t+Ld@3w%+Y0bGyFo?HuJ^ip zPJ01{%%iesqO!PFq&EsH)g__P&%CQKH^!DRp^T0&XuQ7O2 zqIzOkwSNtH*KPkikT}HlpO9Vqd*@=7AI`Q;v4sQq<8;CIPv6h`$7852I(XOFPB#^Im`ywb(~#j%b@O?TiT>WnM+(vgg6J|_2`WiQSMbr`khY%SLR#-a z>Yd-43D4QYv%55FJhj}_?gAL+J>tTs@U_loCFj}kKaeIr#)WDS@Uq#ilE8FVqua<( znZl$4DDX}>4fP;2z-Hq90w%xbu*q3)yo(1}3}o(y;uJZP^72OSnlE%1T#UVoY+Wh# z=PPO6^V>+{%HjB+ZT~dynFrpF;QJ%eyl2c6??>|e@oC<34h7zi;`^y--ZN%__oMm# zZ2caO#3y6kqt*K{eE&oJ-qg#?&oK3?*Y8ann02%3hg-Sdl^6IKyGj4S$MRF7HNzlL z31@$NML|}62+K3rGQEj2>U=_rJMa)e?Fpgf`@p%aI|vOl0SyG&MQ=}FBK&-I41x=O zG5yH-<>Z&%P92+8^QF|LJLt9WopSZS9GJ;QFCACCDjYwf_+yl$doATCht(?iCd9z( zr8DmsaZ3J!F%&Y5!H4q+_%nF;_YLBHL9G)DTuey4VA8fTu1s4ny@iMBXS4I+;ZggO zNXtj4t2?|@!TR)cgF;S2|0y5?kqYQmB!S5E?m{4 zHzPCvT0fse;_>sf3;kV0n4Bs8egZKYDqbUnht?s5!Yf<6M@ahHwmJQ9Nk40w(<>Pu zDno4VXHi41y+cdx#l64HLrd@Dv&PL=%~!48dDQl`K03_Y8({v~q2-msB3G|0r^~eB z?a`58FGH;~2!~Z~e;FULjEhjl@X&JVhSd#`75_#ducAoK21k)QMTUXNbde?7StLpt zfs)XIZb?$X#wStmdKC3B3J$A+ceCpn2m5c2GzBE(Ees`4RcNhZge<=-AY@9I(M7XZ<8JI%aPcTFVGNK*pblE z8;qPOi;_T#4PC+dEQ%4a?}nB~{37wIJn>4Fq1CWmxAFo z%gg&#Hs$TfvYZini@&i9gH^2jVD*x6sHl8ECN4W(;if`T3HJWe#epRqq6XFYT*6rF)aePy=KBf!2tTh~F}`-( z#4({8dqT^5A}jhwL|WSu7fy$LHNC-a8&b(vL!vjH9lZr7Yy-VFWu*7cUJWhj<$TQH zQe*X>k%P(OKVP^bgzB%T96jFgpV#qrjk?9vYIQY0eHovcHy)qPaSJTZOB0VN5PX}) zQ<-Ac(bU#DdWA)7*zk!d4ZDX(R~tT-pVv-xXiF1o3@y0_Zz)o9kOSI!G~{y^*~jt| z3Cp9^QHD&CR_h`S25x>=`> zq5|+~s0m{cSh&a;Pirdj^UA5KsBmOJ_3Jt}w3GRn{7gT(0N*Ay(1Pa!=`lbWmkfpC zZn(PRgu=A*)tM*yBcktQenkU|M@^g)NK~}&UJONu5bkS=cjdyA&wl*R7(WLAs?=+} zJK%7|2-RO!|9gEq)1O?d-y8f#>XOWRQ}FKQxsJmg7ioMie`?Ezk(PDidg9Ojdn71$ zDjyNh+P%p*oqyyY0%D!f!rjz(O2T<<4`?tVjVdMVd=nhE(DDC?zI-pY^5sB{m+zX2 zc-I7=6)oI69Ff;X1i}wKAWi;kuQtiQu!VmBlT!&o-bO0^OnnVMn|eF?z2T$a`w#T{ zOt^il-?I#+HTjtQ2eT7LQ+V1=8oE7l+y4eslT4%f^XH6I^ zsap@`0k25nDT~vjXE}H;@sg;1Z^~sk#2oJ>Uh=Cn>G3+x;M9?(eEWT8n*440x&}%A zXqxnP{;Sixx9j)9Ao;&K$oqe!d2iGIR+{%Veg7KdeSDDj8wPp*!65HH8sz<_gS_9E z=Dl72O=;efhrmA)ulq91dmEp;QHuX<{>`;^jKZ+Xg&?wqTX z*b$HS-hw?78N*_(yhz4>h;B&~uS`ToCb3XiQyJ=BXA!=pUZnjuwBl0YO_gdtN12as zQl#ng+HsM_EyL3uYbxTglTk$Lto+D|4I|J^AEAbt^Z?<0heIz$3wJ~=&h%a7 zdbAFyUeLCfh2UrGnv6R|r-aA76p7X#C{~U<e*xi+NXx5{mS-X@ zE1>+p-Sa7ix1s#8O?B(piiWMvj(cgt=*ZS*BU_(DnD9zi`zv1y=heO+X?m%4B1q1! zKLxt2^~d>>S9~yH^1-i8Uh(e{92ISmkW{|&Rp}^{yZXwbPmOKs5meNFfVkz~#IA^a zU4-^@X8~L=t?Bc+ay*Gs%O*hy@Oep1u@^VuYufOa3pRdyFdnCLt+cXf?j+fat&D+L z;MT%uv~F6Cl_LK;kiVywO~ygKTL7xufx7d2e0SlS9^Xw0@?F0nByI?SLsK3mt9wj{ zNmLxoNXLIA_>laU&L8bYC{g<HyHIu=c@vS#B z_4eA+ho>h#VU|Owi2zSv3XjdgviQ>&fBB_{6*gY=*K^rMfq8y1b4;d*h!I zbcIcQ;a#JDDs|=nAL=j{J0?4i?JRQnIPxHmAlv>Vv&GP>5@*!K8$EVTI|QGPPt=`A zxVu&P-(mS0?#%ql3aR47U4)o#{G64jpTgM5YHa<&E_A}-x)b)B8_7ZV8Tup9iQ#ci zM_Q*tqMw9*sDsCC>4r6t7DT0=SBjzRQLPvt?p2aM=J~)^Z<$H2Io}DNI6UtpmA#w4 z!iQ_X#fxrBi=XQH4H!p23#s;M>Z!|rgp~l=0s3b#^4l!Cz|rV?umq#YF}`Ay z{P0=e8&3 zWvSUzXi1#4GXB*?qIM$D1(>p$h(v#k277U8%afB^dLz+D7z#hpt=kpY9sp_zx~74e z)`tN3u$aCt+cE=d;F_$zYu~MwDM1)T`qlGw>Y&Q(iYyz ztT-uTM^TxPDL{F=9fx!3MB2u7|N7 zEmFeRWY0OEF+&wVzU>@9|K^hv)J=!boV&hG7}EJa3J2#Z2r+O6B^l z+#)SL)jab-zX*rxS$?Vrt2S9GJ!`)Rqr#EaDo8avPI!Bn8=ad0%71#Orowd>euI&BJOBroFHIAF@Qrci0Zt;R`PAG_6lD z7qW3xzw_1?TeliZ0ueY@M`FdOjC*6lU1E0(dU-s`(Zx(M0rjp$c2x z6thWT+jaPG$QJ!+!|G_~Oz{GXr|U)uDbNn|EHu9wJ7@Y70e>g7_&V?r;rX`Rr?7LS zkCQAogOXBskBVrCOQ+&?v?cs`de8Oen66T#yF9CO(ZXF2+@$uBCJQya2yLFG+0ZRR zEA9qj!;y{u#_Z3@Ew4Ife1^~&8gkB=q&S0Y@3Noaw@mW9UBVn=t&JqFN3oUF-byRFpUTLWIG2AQ z$|bM5ic$s#_u!QXRMG>d|KdEjH{=T?NBA21#;hDGP7+Ht<6ELE)9Xv&8@pcoHiG_^ zWzUP0JrDS5KGVM2mSNg_z(9N9n9K&6v4n#B?`II~B5-wq(^N=zWRe#@_Vm5@Be0Y- zR`henJ?#_@EY}^x#q6VW4=d^Ux}ha2@xYaK@L(BvupQ(9(ZkhL^dZ_G#dKdn1U#mz zHB5IgvrVXM|E^}ROSXD^i`et$)zh0qumXe?al~i3F%^ z-vp6*`%6S^&||Bbff{7y?0<4U1Q$ajz*Ipdh`G#l7Cb_50@?%RRpE=GuCoM`uPN$< z!Qtoj#@obD|+?RM!VhVxsKn$=Zv8h zm66zJ;dRWZag~rVsDF^oMaG5-krr^gVkN(ioY#l?IzJDQ6Z5uTPM+DkEpk$dW=z|A zQF1a<-1Z^KiSl>tdNk{H(7G(tcq`@;QJ;ktV}B@mHANldqG;iPPh^2J1acUXd;Lx} zJ?#SjF;>PO4bSB0X^i`}&KsqAg9~=Y=Hxq1ZtNjv7oHJm!BPMf{9Qe@1@jZJIF#|< zpWUSx0U%VEfFbtcYC<&r zqkIMmUA19;0MA6F!TPhx%u;yme}anIdO67C}-J`}<}v1c*Q?XSOG3-gqHvbKjxtrX<0fvIYeimowvNVGH74MhUpM+wIlK571uq{9d)!O?= zwToVJLe#L>jNh4lm&rHK@0xpz6_)@O{p~2rb!%Y<(nWo%zKRNBo)s!a1{FP?roTx& zj%fMojPx!HZz#Yn)rs)rgOlZ<8`hMEmg5AcNuPwVTqrXB`Gr%kh^TH| zq2p>ROWOYdy-zo)o0L+EwKkcj)U}(wi_(c2l9A?s=z&9x~I`Rk=&Q9@bt3ij7Kg6bF zHLrwz^NjX`?F$8I#`W<1X%8tTNL?pt=yq-NbBa2s!Dr=aRe>6og(~;}Zm@W3d&A&S z{mO7-`}rVAcK1p;r@ar|tDeV`B((*@hnOKX6a0;Fv_{NodG;fBJ&X(_!eEr+OW2!! zFXAr|s+e=)aCYCkqVlCE%X!%@Oi2`St9uFc` z{81h{mIGDvT2HbXZvFx3+&aWUBP~@B7IqTYN47jWXT>N89(cZ<)J6+WMXsLSmcn#- zytdj&_{x4C&J8`|G(Gtj2t5x!FhqLL;;#WE&(AWtgEU(DpZ)K71*mBf^opl}byDSW zE;RnSGHC{Z#;=^e&V2|$t+NER_EIgRM|ct_flbx3u034@wC*%dICs#(S$jAjkA;6o zp2O+VD{fAA^&6u7QkCA=rDr?T@g25r01wcHbRSD3X8%XAb!KsSp3o zSdJl18<2i#7bs3UZ2+Z!ao6sWv7ajQ2GCE%bZ65~eZlLeZdyNv)o|^NX*)9yDO3Cv z`c&p+lv+(B!I@=X8;aAKig`J~X#}WDqWU6oy6Dt|vnTuH(ZXGqnfTd0xME9WjMHK$ z6mAcPcw8(G17(Oi$Kc^yrAY8$N)j5Mf;vw)r=zK~!ZYN=fdZt?^ctMU5a1Vm2050W z&)=X=v?DTsUuk}Uc_X34jd+6sOU+u~iz#*P1kJ-9Lya5N1kI_$!%Wa5b}=(f)o&(U zpr26AYd}}dW6#talKzQ)o=K3utvO7k_z);!NpObv>iuH@yWXGXLu5-r>My2nz(x(; zf9kmp>CtcKLJ|pE%k*(tEa@1+%1Z2`0c5yysEA`T(@7`~I>6oE0gJD(20M?VGE@mN zXSd~<#`SOmHjM~1N?fXO6YP4WqBOtg5*CZ$;|Zg|N#gH$cFJzI(k>|vW$AsPklkTW zDCmj}pSv$>P;xo4YMp|7o)^Z#BxY2?dDDSjpd*5T(>?KBeqt_*)LpfF=ZR179*>(B z$m7UH_s!1KD0tKB(m2Yd(TjW9bT;3cO6LWvEa@y@cI8))&UvGi7m)9q{APf_BtP&7 zyk@;7koALG>=8JUq(=)25uO&4hs-) zmRyFGo+edTIVN)Gh)~ve7mB``&SgTnZ!g>md&DhTte+fD)=1en_-djT|Jg{_4>NKm@oCVE=|ja4QT{j&+-lU&(h_Vr0Rc27 zIlaJ(Ad+!WtutUz+aUMy3zoB?Qng3wdk>eJ=)CBkmtIYS5?sCmpK|+fiT&8ZWzMGq z<5I41Dfi(rokV1f%YgN|0y`G4+wd?D87T+wXZ61O4O8N#$q90>^Y1?-$ z7~sExLwx{;>puU#!lAv^k3%s^8We|%pdkJ$IP_C&pG{vBDx=sAhAtu!0hrLk} zaY*Gm#NDV%dEg5CbJK4mzm)u8EF_OZ$kX!8`1FAs&zZXel7yXaBC-bF3+IWD!xld; zkH7f4*y3IZ)Ef5l&U^?pu%^y7i~YeQ)U|G?M&V7l$IH`PLx zY5(^JZvQIX{#CyA{}qYIy8UgrN!*btHymakJ{J@9Fx4_z_`ToZ3rHQ^cL-3kQ0+=e z_urHN&6!V(UAg)V9{aoD$)qHd_?Iy;-~0%!rY{hZOo~wWzS=qUt7h@2eP6wkV52qw z5cg;7hy~ev+e=dCP;Azfvj}k(BePWbPt8X;fSJ#;I2QR>`O^5+2;2Ke|AvrWo&&m{ zffmUH-HUUS&#^Qyv&hxq8eETVm@Yml&`+b z7wp*~l*DA5)fywt81L!rAU!g+1hUQE+}K2p@t)9<|3Mj8M&Xhgf(NTY318ux)(GM+ zPluLp>nP$-ut?!xVPLHbKS={hJS$nQ8JEX!)tv}0Tk;uN`T({Bp)mthmw#&!GwIz*iqX@Zw5` z_lZW&Z)lXqR$S>WgeM3~-eSp7hf2cEErA@vT}@VwVW(E7D^~@%Ifk7lUqFuB13)$t zQ5CfGrL*Z>6}xG^h9#!NZuWW=$(!C-R4)y-k-?`>(^-m_!gCssCR+Hzo5#A1msPxC zke;+N3$#hOm^X%jxjAS<+zve^qily76$r%dImLoN_o|o-0@4bHaM{&Tr=S1YtCJ-k z!W8(==$rKX7%Vr?6?Cp~j2{-vkNPXCDh466hA2!Gn^_~smU9q_&6)jvGERG8%L(gZ z>-+QZGWEUcUkoK4G0iAt3vXZl;9cr@4xwyw|Dc*;X5ut`Zx8GrmTUjeACFig#wOc1 zO-j4le(!F~^1snPh)DIl{=w*X3}2?Un`@_SmLGCFqG$<$_DZ@1J7Emi|2zs5SmQ%R z-u&&4Z~iMdH3x87_pkpeoFbyuJ)CM$(xCB*^%T7Al7nVx9^Fss?H^bU(#I>ezn|25 z6I5;>zTodC9q~(i;q{X`g=)8-)V4<1&Q579x1aPAJhluTlzy^^woc6xF#V*l|4ivd z6o_^9btC=-6_GMegR-0|6iP8?_O}-!t6cOWj?Ga%AFn4p42>JvXT3Pjqx}HN4!+dKx-0iC+13oC8GM=egufM{g_D0_rVC(xvH2M}w~MirOy+*z zks0Yv-r&*CP2=4m?{7uAb-4|b$FH7WAmccZwHOuNxGr5~s#G~sf zaYO4DUxe*A($9Azt!M|%BM2@2f;Z@U#6eS_?_vATrY#Mwem{2JOx34(P-T`^_ES`l z!)iu020e$z?H>%UJBJ>y%qOF-@s(#q81tG{mgsY7LGqv1oI;=JZ;aq(;`2ti`K^3r z>(+5^(2Ze`BwBdrjqb>6UP6_DVOP5hUw>)>!NbqR!IU$s?oPqP?8z3>MQA@MU4NAM z=ys5mIf?4llr~7)|6@Azz}oS-xDwuWacTP>{srcI<^$RWjk0Lrzd2LD^v*)viH3A*TEJu8{*VBs65-Q8> z=Cfye^{QBp)%t$sv07DBC=aljH=aHuKI2|`+rnpkC_EtR1Mykjb=mV-nWPEw*{f}X z^4Y(BV)NPa-rW%SY!_$(>a%VT5U67oe1=&R!Ca@_1nQ`)IXL!qjM20+*egh zln@H2Rs{sO&gw4?tlzjhAy=nBU*5l3^1r)YVAM+Pn(IBz>r+JqIM1|yM!rMr3g^}! zAe0Z3Bs*!(Wwyp9XY8pq9v|jA|8FTVx z^jxw^se?Rues-W?JUJbpU5ZTJear*LSF0w%{w~ZLzKm^#-ivxIRHMoav{35&AJOZ^ z{*0J+zO>DsTq|^|r5)P%Eq}&tsd2YqwWCSMhC}$ja|zm4eU^=p8imc1UCZ989&xA?mGM&{)4^^H#|zK*F9wu`U3n775(Wz0LkB2abv zwR)^wDdb=#pU=ax^xOo^fQC<9ztHga9WH<0k}ZG#U?BdUsQKF!$|1GC;_srHQrdnX z{;tI5+46U@q;dIsq2ll7TL$Ito92$S_CQ77VoL~JO39cby+MpMe}zR zGTT=E#$HTXXSe^7xp=(Y{X|f&LX>(`Q2|EJ>?gbW6yp@6R+m-HvMgSo%Ce$`)0;is zE)jBqyshKdnfW@@I8|5=cJ(-yw{Np}J8hi6tg~4%R`YE@FKaOh==%{`-@hdK{%@S- zj}NWzsJ$LT=9zQHfJ9z_-=+9GTmG(=G(rB}a?POp{lH~oE&jgEyUUWl*_&fG!8vP0u?@*-$SX}uFkY4$v>Qg^|M_87{-Vv$2#c{m}S9_VpAyU z$3|5_-+7#DJBcfpN^hf=QX21aMs1h)S7o;m&a>6Uh1ts7;HTC=;vgd z*w7<014apYgQfh>vuL1b;b#qsFWd+)Rsz_|$z*1hZ2Pabh~uUu$62*Kt}0x2C^A}z zj35sDexUVF`F1_+xUd?lPBUK$5GJc{2ZUy{a{o1%;>2a7LCu$$w+Cpd)Rha&S}E#C zk;3%-s`55-p@fu}!N&4Je`bunG$c`G-;e{tun4C8c`dQN9q#K+*5ZYk{(@`}~Z zFg_3MV&wq&4+|~%SDO6sIHvP2_zi0_Q2vQUnd!$-rMKJpBg`W6aAXP3)08pJyJ`Fa z-!3$Q|b0ObX7sna&((pf+ASMo&}ExFkqTx_K#d?GKO$ zT!*CsSV#F%sOi@-$gI|%oWu#wYbwH}cK{RY3-%KbfS^>)<@CBZj zc4y1vJInY6r;%KNBE8u{mA~b8q}MlFC!|v->1dI^&gSOr}f8(23KRR8Fi^M8g)~C*aV%S>u2kF zAm386^t6n51{al1EyljN6T*>}@2g=$Ris*zLG^9T!{ItoBA)+y)JwCwbMq>WB<}=$~d*B4;c-@hse9jtT zK7-Y3w;|@!yq2q?GuP{xCx?d5VDv1`Q9j2GF`vQe_3;W*FQ}qCo;Tacpt3$6=xY#Q z_q+A=3HS zwxwIXjp-I`W4hbi`mt^X&*Z#8+i&f*)$dhASyJ1tdC>AM-^TJD-$q=n*~WCIZDYDU zwlUo`j~G1D#San+SDt4PTFey$l*RtLQhG0$;(lFBzXqE=-%Xog;s`V?1NUF*nJ#so zg#*M>;|5OGE+jEn$g^(c?bw9@1Jm;q_4yq_O3K~~UVnf*%pdJf zFN6O9|F?jSlk5K`?nBKi|92L>LffCLxgQ^R{_nb*l@FM=OdebQ?^F6s`8|9?0(~C3 z>xbF&<)xudHkt6~>+;k0IEJ2m^dQ+jpUuZ=!`eqexDCp;sA|DJqSd zw}!4=x<%?0?m~8E`Qh*nS=P6)2;!x>-O)@NE*(qn@}K-Ys~1`8!n`XHuv7u9ARS-u+a3$2e9a zGULzqHNsciw0+}i*5*6rm?UfQbFbQi2Wu!0`8XEI3Ve}6;#?-B_7H0&&;PE?^~Y}@A=IC0xDR|LyZ)#Ea>8j{CjA;)UTR3_0Q6L* zr6=aYD?CJc=0Ick=-GU~&?8K5@qKFjlXu$fQ#zFP`S3xv{eAVlc#!(yeQNp5zVdr; zHyD2q|4Jx!Uwy}_`r7pLUom^eSak{`?c|CoChu&S!t5 z!pg#H8^xm3qST^J^`ko}mX#HP7YKH7x*aMjDl;-ODm98SypxsD%|lv7mt(B7qMMAxYR%nTlKq6-JUnroR()spRm8}18v7f zifW+CuVsuj;uAb;JCEU$S|>+AE=lwG(s&^f;xFBcdLPNpMFVG7HGT1jb#Z4>a{aI)?0<*xFI|+{yt9f#dcnuV zxd%Za4zx)vN)lPy9>DdB>7JMZaPs|TnYbsIPj>4i5;f(BmR-)t34cCAe<_3m*`I%k zth|tFwr*rhv?#Xi7spr+nNz)9<{u6$}fZ7*mg%{otBUyE4_*);rz~g*KlpNq!n6~KS<@lm+ra0 zTM~3|QG8pSN|R%_{UZ{-1i1#$XVh`20y6YF6h!e_hJK?fUPpL;Tvy=;oCNHo=z{!g zztyeRfq6nR#uHH;t_X?e3#7{_j-oozu5)#hWfcEcjChzRY=mUmm$NnGCl&JO~P)xtQAl0%3 zyJR(hz5U9^UYU0}fP6f&`)}mK7m|_LAE z<2%!Y85!S+aH!@&NYc1n*BG{=r@tjUG;_Pcj+;cA^n?7ak2OVSUb6<&+!5n;t8TFXgu5q1Weu=HN`3rKQ!t$48+Jzwg4i4h4a(ys=H#`)=U*+3D z{Iw$&G3K?4zwNUT(;qhyNjl>?vN=!v-r@qO(|Vj#taak&l7_lS-dS5D2;8IwX3I5v zWBkHl2p~Vv_qt0vihh`TCNQtgV<`6FADPy~KEJ{}Lt6cuab^lus1zJ$ChI}X%hmTI zIhk>-c*ulHHqvs!r68O#NB-n*cYRC}`v;*6o@5BYWVf{6ep~y~i2dA@SL8Np7HNo$i_g??!-|!bRmCb;^`GS=D|f<{6TeF#?3bLo9iU%)<=^p(%R=&bxSh{^ zm&a6DL3{xI`vjEVUv6ZpL-@S@NtVaH`Fsbbs2RO|K{Y7okpKN2wW)XO?W^++KySx5 z>Hnq@`)lbZisx&0a8Esu^xwfLb0+_t{zm#fclxhB>f}G%`s&j09i{)$r1R4~VR@uc znf{LHzhFQ?MltMhS9kekN<7;i#hOObn~?R@|3NU9?s(_Eh8HmSn8d7}(Gg$l*)G=# zWLa;$#KhC})=gjl&g1TJ|AY0`YcVe7;_m>~TNfiHxVnA<{d^4az^!%WLBlM&j=WzY z14P(woO%g}W|3&cQ0R(%=3^Ultd_EQFv5Ddz_+5~H=&}8fEc?1kR$yq#w+J0!Aaj)kXhDh=g`DTKj zfNZ_9cHy0CZM$`@q=&&>&-}{pdox56nko)e4!wj0<;Lj;Xx1l%wLl#E$QwsxYja}<5?4DPQXs$~Ri%Qk*-!P`5R3C|8 z(zOL6=_aQI>S6IxvtA`!dn<9A_Eyh>MSI(T1aYNnW@safvqVbYQ} zp6J8{W+&#E3sCYyCL7OTm?(p^9;~Ttj+Q&j7dSej% zTZKeXiuhpOd3r|~{xDZVz|#I+XGJ6Xd72y6^HjDEP4~*bLO0z-H%0R9AM{WN-A?;UH=KSap?*WZ&G}`m z#P&nS%aKsXUQlv^?=4{CR(9;&ysk%T2GmXgOqdhqN4hLLp=5nB<_(C=b&&UHoxF@ViTe|I7EU8p>Z~< zx_0;$ar|+ogGn9nE?j9gz{&9#)xN0#X3iO%0cCq8yw;a6T($~ zk8IZRdmc5qh4QPm$(Zts1DUYpr%jih&}`;iL(A_#zhjQy83Pkq_I;h8BW-Wka~>re z+tn$DprD#kHbF}0z*;z)N_6#oSOdvxm~kCE)@R>fjO~*L=}86V3$Av> zN!JYLkNe_mC*S+zcP9CrzWG4;?WO#ltKEqJUpf82r0g~c!*fn&{pPS5$bmoZB=YRa zvG}3;;NO&c@@FjfKBnA%9OdL+bVPo(pV++IJtJE#_owdJuX4BLSPfndtla;*a@;+V z^*f+BBFC?;$7~RP(neu3t^Vx$Re#`jyZw^>wET^`$Xi4CN_K_$E@AM!jeL((PHuUd zlUJMmk%o2AC!2bPs4j;TRdxi~SLX1atiLS9JKFIn!-CddZcLTluDMpTH)@@;{u0ZL zPt#a&r%yv<%u8Ay%B7?BQp^%J{pyJHZ*GD9<%a&|9MYc>L|^(9B4d$}{2Y7cZ~Kx& zENn`{W$)4p7k|)->+)x?ot1niLXE@cdy6k}zF#(c4Y&E)^hcz8XGNrcXAAT{H1xlo z%6#7zL_d-q$o0zpL3f?p-eV0NkNHoLiRhQ?Ta%xi&p0W?>}S#;AzZ4BWnyXmYNX;wuJ#M}+UaVs0N7gEH1w_u zJ+kV{=`{Tu(9a}gGHxEINRtvNpGYj$PQQl`ZFH#5yz@dw@m+*t4dF2)%ylP`=o>kX z$bcMoo)0-j3fBT3M7eeU`~IckC|HX>JLvjJ*Xa@Gb*5u-9zeOYl$TVc-f+z zW>`&1kz}=gXGf&FV`OByhuU-xibOXzBHhPZpxeu)`_l6+e#7~fk_S{_Yx>Tpi0zaq zuP2V_=&?Q+yK}E|KFy&N0QBDM6Z=SrxpjZt$okl?$G~LasQ#jfu^6svfEep#WH7=$ ze&xsQf40hzD;gbrJPvf)1?%JoZ(RVVN0yA_B>Zf5OcTK<~U`(wp-kLKj{-$RGIWwf9roTk{as&9C_y zXt%(xoQLGidlIoByQcF0?4O^5p!EofqV?+dnweT|Hok4k$C0-^?uFIdhngfkv0Jsc z+DYVa<4VG_dz@Xn>{1_~_TFWkKEJX(7VzR`Azc#&zOscL&(jy0?tc6*3c%q<*WJMx zKYem^&M=?9)4ZcQqR~3M5JbJpPQ-|ech=96{@`D7di(aS-1c3haY{2^0KK>8a(Mq( z4Jx~>(qUF_LFUnw!Z18*YvWz8i^xGrgGdCG#xRp!TB7 zzc|zB_eAmwY(CBqKC-R-=EF(qB-6#3!K7?{#Xl%N3wp+VQo(-ufHMQ_c&MK~T4TlC zf3+%Uqty>LF^2ck8zR!*FeEblyAA!5Z2IeQbzpe zC~ux_Iq`fbX$@?E~dN6UY}$SSSQ>I)(8CcuqKMO z!dhi)2b2D|#i?d-LHK>^!lLA;R07NVbJ0Y!S=d%0>$8KWdSg|CFs|gzm&OlWpWVir zXU?J96(xL`JXvLuRM9xunjdG~FAp+aE8h*@?a6n{_saJU3}lH!1AIqJw`iOfMB7_y zWK!85w}?YvkcdevRVTNZa+y3x${p;Kw;hCSdT?f>Ybq-=9+wc2g|GcM$+y)1ilHcm zu=QuaX_4#aXTv2{+|ySAq?^zW_d15JpGnAzqt}nC(6&dX75<1pPD~W9AMB*zoh8#W zC`xBM0Dm`R{xC)o`tEE^Nau6{@7w2f#a?7_mH zz_x3!P+jH;GorM!N;OF#bt9*8V+Ztn$8Miob1LeYFmUK=YEJ6k~P;LMyziyjw5LD%sAKQ_u)$Rx9{kJ zC>1EhHKRJH)@wpgu^4^7Ze(rZ&nk=|@?DH8c27;fCaRJ3utd@ithE--mc_3l5-JlP zOV>ZDk+A+zqko{ZDt+tP6!2@U8Rr~F56Uph!j zmu_sKl~y!<7tU1J4ku}MTH*Vtg+HYgZcHs)Ij}kns*{xl)yYi5EEQI>kC&~GX$iiu zg&P}s|I!9IUX6<+MkHkVie}(@Q4YQrjZg6TiZH2_R@i9Cd7YwZIQ!3%?RHm{JX0*$}QX@f>W}?S91w4v@OiLt10wb&eNvy#x1d z>o5JKHCX&EKUX+}8Jmc32rqY_-XZNFgj6>a8#z+3kSXWdG(DMfVrO6ekgw}Ig7?{r zU}hmU2y|U*DbFVU{qd6y0WE)L+yJE}#&NkTWpY9}p7&Has4cDGK8>?1{fB z+&G7x^Bpq2Hx(1-Je%s!Gk2OZio88X1m=Ro)sE2?!i+nGKiBG^gE=yzp!TXY zj7bNn>5Z94*fdo+V$fv*G1mHgteA?~1<-PBub!Ev?Nt+6h&J%#%&FK>-r3dQ2i!-O z{RZxfGNQn+c6h`Y30j|K=U@1aAKcMn-}`||fDSJx)cz@KNb1qns}n%gANSJ$7O726Zi7&Do^z9$cG~Vk+s9W zJAST-Z~SP~d<;jNatNAytS>42XxoKakKEzYB|I!fmXfbi9dv94&v&rrg|r+EeWZ=^ zc8Vszh6!Pq66c(t6Gg)sDt?iorAH)Xo!*2O7*TA1EthR@_PK|@!&p-5;vs(tnz9F3 z6`dF-M`?h$7{m?Voe0vm;fOCk;d46rqTo^0ELro0y;d8Ps^9acF0IV`)7HKiYw$QM zadgWiS>r=Z?Mta!<%|_pYIlo5W@E9W^Z_7(l+MTsxYMO(O;#+{NVxT0_|fu|vVc5N zw2cYb2V*9iGpqeHyJ~+111RmH{gZU$2dxPi?+O)x%Y_!> zZ5@it2Jh3$J+Y(EneMn+yuwq*qDva7g=M0Xtl<6vJ5`XG*~p95N0Ej6Y`H*7>n-UZ(tmN6YqI#6@FWwVhqmi3y6BJVAzuo|Ld&%N>cF*G zm%Uo42k1jy&V1N(&1;>io*bK6G%{YQZ3F&*vw@}pf5d1-7HzV}zCPP`(Ip1l0Vz80 z9A5*`AaC*3m>V5YB;lKNI-X&N-FBw(G|i`{N%N^Ue#Kb#W4;>U@?H5Uk#N-WtUo~C zHj$2*KaXZU_}s7zSGtV{z{oUjGF5?&+(>zO5BN+xKt!N5t z2liGE3$`2e*m2^nPm)EoUuritMUuB!zZzj^xK{J^5tPE1ijS{1>v-LAPDi^8-aJVX z*4(TXV;u*Z?CL+MUP`_Yt^j$^aQ;E>A*$t}uPgl8`WuPa$m?iM182eKdzFx{ra*d= zB|RNXmBjG->*=k(&h3v19bYo?XOGiB=2lHw&}u}(r!DX_@c^|3yZr>458=1;RJD6f zJ;ueQ!_iL}gE5J5$D)8v(0ZMV?z8kZQVVCmaN*!Nb6Q`SxPP!wnA1L4j8;R*UeiKg zgCK0#PUD77uuVyWHS9NMM}bz@yRSvV?2kJPOvuz4?UdWj)bv;WeD*xv4PvZ>r|K+e z-HRr}%-EJzMo(Hyrs5wT-FDtrYf9Je*YYP{Gkyn8Gx%iDMzjH1U{SLp__sqy>zf z%I6v+8JKUBwB#q{o-#=FN5=iVc`NV&;%}-)R$OEMc7Idi$WO{UTH@LB6K$pp!O#K5 zMCD8)sj#JJ#Ci3{u=C+{jA2jK3%>l+KWreIgJXPYR-*8eS`h8lU zf4iZdb{OfehvyZbZ`%X0OCA^h;rpj^Fcl@kGy(rf;?=nL3LozrC!TG`?Dj6ij!lu# zvxdets5*r>@?p>mAnh!g&&S~146|BzDc+0tgZ%BxzQ`ilal66vp`0f4)NIQTzSdtm zU8xW0A>rkuJx{fy?H`mQ31gha>L>|HhayUNk^`G`D$=fBw)})%eWFPp{zLwkm_XZ! zF?zk9LHzu2P~@pHRDQUx@QeI!@p*4l&LI16)*)S_wS;|f+rRQ-m0r9U59ud4d%N;i zXF9&>Y$Ob-U8IVXCxdx0ES2(9ZM;vsmRB|Ms@C>Z>rA~K52w^QO4JSxJ1M5gKO$kJ z_-e>}V{SX!PGVbyKknRfz?cj%m`UzNYr{szTxJSC(j2I~CSWK64H36HSPxxk`>XDJ zR`&^?&uu-mhcpfbWvWbHbPY((J9{PSA#6niL3sX0f=Fr~B#2S6Q^PHYHJ>yS#PqhJ zI3a@YUlE}_f#{m5A#J-UQ3*_rRS6dAS+hC?=JeY~P@zTt>+vmGaQ2YEe0Fr66enyoK*iScopN#v2r9Y;@cThB4mP{IDT z$O8Izfc^2j%f!#wZ$4_=d|dKhyoWob>09?*y-br<*Tdo6}YsAh1*Oy32S$vrbsg!Q|*O#{ewmdJHmKQw2D0@L*5r< zAFeMim6te{Y|7yhrLnVq>Z+ec$R~f>0n)VKTYM)K^;t3(SClP_TVkw-H$sllF8=Ff zicWc#vf}yytP@)!H6AX2?_iabEY4FOz%7TlRA7-qsn98`v*gq?H~riQ^tl;6x_m$B zCzJl+A@t)T&~HorqeTe1)~99u>-rh~mm)82J*$@Yu=g2CN7gY+M(IH}@|&;AaLc2> z&@<?G$il)L{;)k2$gKT9HAG670KEo&A z=kw*WzwH?b$|QP9TH<5jR!fOn&wmWfmqqbX5qwrLte}i1y7{b!KM4C37zcb10+5DH z+R+jZ439LH?r}i8mRBL;fCXxzq(vPOG!6)tOkQCeaDosuq`ar0=PMVB8`qGZXcbC}`Kc2>f%$n0>|t6}+|M4{PKTUb^*lKa;cS`N{&~?IaH;G$ z*)~&FA+j!z@eTe+4PT;lJvd1n+{mX(bwk~5b1nhO`BAZ0Vlr1k`GVWUO!-9rB78q< zEADt`-akv+XS~H><24?$uk>zq;vE5QZQl@o>NrKiQ5xTjPu1dO>de(80H^OFV^*o_ zW+hBVQ&5I-ks+o6t!$<*V!lXCDV4WncJHOUP6OwJ@8_U)-502OF^9;uAp5!myN`oW ztB^iUz3))io5DtWIOtlLBrQY}tjC<7`IQ0nt#3Q-y<`L}>93HHw4`?4#s14rOjH3V z2K&WmR)UuWIDWjlKg9T+N{O%g*wM6)j18Kv3m3k@2_KK}@hygL-cOM6duTJP1xytF zfEtU1LWd#3_&p>N+D}+^q1{hVA>cn57pdv3dSKRh7ve?G+MR2<1bpwQ5L?jNs>;K_ zls|5cP=MnpSu*nxHho*(2kv)v0IyP4)E5rBzP8rruk53kGEEB9*F{tW2Lm^6@7(;9 zO1yww#de{9Pi)o!d%USo{HTOhCz_d`T_71cPj$@&Ixe;fSyxvrzo`x8%|&`e!?B=m zBF-%h3^RziwU^?7(+1DsqB@%(x@&t0Gt&KZrgc<|+>fw|jJxFM%)(v)Er7>1yocU% z5`(|`OiPlA*bwW|6*C;HIYP~|>~5rFNryD^SJ#7$2j}a8Bzc3Ux#r20<#_O6-7*1L zwwG8Af>8+cFGP=$O?l|Li{O1ieGU!ikT@2O4#A+lECPTvw+4zEWOuBXZPibYi*E4x z;thuc=!UNA+TKn3h2MBceu~W0+vLSM=uh}gJQ_jlb+gU&-<3vl{qL&!zcpSH`S0rg z_YNe>W9^T!Y0}Q`<_#Nj@T|;(Vxb zQeO^NXv^Yrv#Zx1_e>AXs2RsalAoB2n`d{rBG)AO7`DINH70VoJ%SNIsKq!lFo^ws zKfB9~&AZ+U7j4SToYQa@5>y)yD`ryr!8#JddZdMo|D+z(3SR+vV72j7xp1l1G`xl| zroVz+i10+DHABvutXyh8Kcz{Egyk6zZUf^FSj&Y}XWBy;r(y-C2m|wCwj5mh-kPrm zgBr%5%(Me*^;*fX3*|dho>(=fKZr5eo_88bU9E$po876#dlC79B!Bi^~ zOvaNaTxC_@Mn%qeB!jpJ))}`B<$IjF{7w%Rg4wXAWvYIRq-ZwU1rkH4G+Ji`5|jcJ zQQ7{9jBm)#mh*M)jE--f-WYf&6XP}G(~mM8AY>d9S;1_Wj6*tN{!PY(k!97PIY*i0 zO8PCxJteH%YZ{n*T_oY#8~AGMCdjpcF9k`e+}-uNK>YU>^zEmcRLdK!FQ66FH+OvB zKH`61$A2Oa|G@Qi%3FU=U$eU(sJ?oT;{Q{9y?42j;D1qH6XOn8U)u#3VNLz(`dZ55 z|9kpc=kim+*~jy4q`sbj#ZqDPRsGTy^u3iG|3?g-F@C7N+NRXn{D!W#3H@%@C$VFW zBN@?-HN^KcWz=M^ByE75|KgK&#$&s&i_0IAtnP! z7}L~X^#t!!aMEoG&4=3zV}JAhm|m-<${}m3af^1|VK}mUqT|EJ=dF(^pK}juCZ9-l zKHXg&$t~IWhRi^k2dgcYeF2Tuceq3_SZLDz9=IK^CHcQsFQ5)#*Hxd?ENfdVW4}f*&%@riKx2Ut_yAWW8!kG?S}&q8V=dJw zZ4K-kwC!C|3#{v~(?yNdpSzf_2FHv&HY6%dH23Cw1z7>>A9TF%mImH}O9k%vh~V`` zWnEit=XSQX+qpQW-rIb|kT1JlhqF6R_Ekr+(RwS!xOFY~Wmh4C&Vre9niUqDG^w<8 zvAsoz%~nd<{uPFALR_A-N=G}Bz_PJkkb|wCc79xP4)*WV#mUfQG5!%UVifT0=;GL; zvd<-=3~Ibi8L-u8(*B>M8F~)MzV-9ID%H=`U+<589ycB7`;h+r>t}gFh<^UF*+wZ#rW-Rp?>xRGZES~ zx4jRp&y~j*d5KqxQIu8ImrEU0v(5a0*5@Xr86vOx?;)=lo%SuSTIq*zo_0)76~f3* zLm#Jq>K^A28OcxjaU~L8)@k|&EiY9qi?(EofQTkkkL+?e(0<8zdFTm+R?=s2Cn}AV zExG-vpMmo`Vvd!v2wy)3N{W7`eojhox&L;x49xF}EaWHs=iEb7o)yx6&JuYhCCccT zoYv{Ap$xa)$0zaZem)KaLaTDs9+jt@YXCw`rAkP8%)fns5B5~mz1Z!Cz~wO<+LJRr zWgy^2Sd1|1wd)a1sMQKJIq$;k0nyI8jEK7DA?@~G%30_mUVVIDjfeTVF^D^^C*osn zcMCW;MM4x#!yxxa4iM`0XFUwYjI*9ig%Elf61r$)BIZcro%KjXw;OtccTT&)H+a*u zOGSXwB}ID`HD<2wP=8K%wdMFW4YAPmfG*c;d1pz@Mk1I%9*YTV-Ry?M?m+(?yQML0 z>qA1LC83c>D7sD)a#m#p_T9Fl!58{vGFsu3lXv#>c!zm0l{tvS#P<_!Wmq>xSPa?^ zGF$k=PxCKyFmRJD;REHMk?eelKFd$SCkCaPqsz-uPDNb*pzr_0q7R(&Vx8OuXS@i_ z({#48z4Z!g6iVjsKU9&@jUst!Op=(E$L>DP1qAWgPE$4MR&)-|?>uuOMxx!X)-l}r zay1lOp)ajpQ-Rbj)S!C111)R9lfeP&Y$DRIJ~~UrXwSo(Rw|Y%P}J4shy zLsLSEl>{Z+N03ekqJ9dRX#I)2nmXzHtIel(ZY5qq7clZXIeMDj&RkzdPsofqH%NOO z%CSyLkq1!SR)nxTVEimimtb!m=~}po>U2Zt9*- zZIWO{JgDwiEaIGbJS7ol9!KF&Mlk?IQ^D25?$+C)9p;73uv)4vI2+lU-%;~{u!Y#U zfHMbb)EKSw!K3uaJKYp)loz|mjM{FSfxKclK|mU99BB+d4T46uAdPKjnsTh+!Xd5y zCOdfcF&_`6Lz@H1&`*=xzUwZ%Q>7jaGpRSBdKnpV&EsV1i zwBEW_w#>Wh!eKCB<~&xZ3L?J-Xu7?YHx*%HaIPoxtyc8SZd{_pV!PHQxa&c=)D+ge zfjeXs#M)JVpd4j&54WP4RS!}+rb6BW`z=wDlSBX+u(!H5Pg4o9x9<9yBI)1=!#?SauH$(ryFk?tzVHM2sPCzXTx#gsq9A`DK)@7 z58>vkTsUaO@Mg1kH@?l)i4bqVI}?XL^r>sD>gOgZ|5+&;=NsU^PpldsbK=c~S*DaR{A z`1%sQnO%L}zF^}M(0hv6_ElXEMOmaQM2LE-h*&Chh9L%G@co;|}5 zfg!@K-)lE_@U=m{XRd0L7EuzpMo;qgxaFVZq9g6NL#r0Lziogs?k8#4+ zh(rtDG0#!n{C5!+1qtV+gVC+n24<^hDE97)>DBeJ@D|qSa+!dCgz);4^h(+U?JM)n z{XnR3tgX7Sn@HbmAgfK4!Kft6ph$6>0Vz!HRj2yX66!F2ebAleEY_qRXdN*t#$oJ9 z337Ii>^YJ6jg^Qmaq-pcwY0yYuw%Ur95GPuoN}C%EY74f#M1dG z{K(x8Y%7uR)B4{E@g4hQ`b!yu5yd~~^B>q>irUenq{{97QhqC?9orzZi!MUDI8@rj zcw2z4+aB|6;fNeV8A%wZ-U9u6ct! z7c!t3PJeQtbCKmAtuvot^oM;6ANaRUKQT((Z^^f{V39M5q#t|Wqw!DO^|V07)dJ;Z z*VAeJt+`lTX~Mh9Cqu)-FNZ6}I+`O>2{F@A7^&z6!Wp-&eNoR%a>t8r9&cKW2)slJ z*LbP6p1b*Lz|MtGeQ1<2@(&vO6ZPTOUyMG~+WIhc?;d+VT(jPLApA_zOVCA})_uQ< z<=TbKi{Ji&zlzSo>(m|*`Z!lQfnVQu;A8}L=Q~mOM>eO6k@64P`F#gSX^S-!ESJC% z>QC*T3D;Dh9lSwrZ_{wjXwe}O-c7ew2AM!N-qej1CcI_+jBsxGl{1{rq<>_iNq+^x zNfG+4t%fy+ThrDt<`4cP5)nI!El2sQ(6FII3q%IuF6LL)T2m1sbRACpui%H{x54YO z?%Cc3!Z+urhpx-ogdq^nZ?qoXEc8Rp5DfUQk^LR{Z{Z8NtdqbU#zULdy2hz0e?+)IeL+JDDakmJ3{Oe5 z+pKorPAJsPJ**9Q2&~_gaxOqRdY_GL<67t3ghm9*`WE1;s~6^-yIZ)xEqw6uJ4qW- zpMe#3Arm4nBwuQ?qKkV_Qe1Gd7P`@xd4^Q2pdrjzDr6+%tPhfbZgX&R?65H)?+i$r z2F!Ijs|?p#b;qMBLGRLs2yLG8q7F`=okgbgC;2Tk^0Mtp&S2ByjG7Vy0smrY`M{5o zGjIHHx4WNRgD2MIlB(Tb!^p%jB4p&SQMkbR#+_0qJ~W;fUnugS@x%(-q7*q%2pVfP zthoAz?t0gN3aJ%A`{uIEa3YEhHox$9vq2M%#_>81awi5DZjOWKvYa+|5i*GGxp($V z{bTpE8B$JVrkv8S=Mqm9X1VdCgeRq(%%)6x4RehNIU;0-z}q^!Ej{g*&H7t$AhdMw zM^l!2hk&#s;z@9oWhsQw&ImEy7V5LV7$FD7@UnzkOcTVbeoRB3Ty_>=3q|1s=>a!b zA04an`gS?W{9mT2hq^DU*?dFBStthX3zHTz%zC(ZiO=~4**Pk1V=-1shR!!MNm0^{ zL_W_;cGOBt(>~ela_Bm$p!oKp1$zkZNXhEd7e>V&ch-)B)H#q*c7NRT-;K>jo??=QiCAP} zA=nQ@Wc^7#dnaIERV zhM88#gqW<1KEZ5#t!!odkJ*YnJHXZj!q%4$Y28@}uTKn)vBU0iPJwd{@!9>;TlCx( zv=Lt6x4LZj7-)ex1*Jyb1Wt_ordMH2ecYynpHzmkEJ9j=a#G(E#<@2?O`K*O@ zBA-iExbxXIB%edToLAQU*uTG?&!2mT<}(|9++HBk?_5{A0E|!F(^<5|BqI z-yIF#X&;mCi^&D@x4f&jN8)?W=aKmyw_N4Dx|Zah zTH+!fB=2llI!L($%lmN`{ZPJF3RlASP#+}krH$?YfL@A}%&s2)W) z*VaEM`)7ocC8>qx>K^MYSOfZ(Zu?XsDWZQW=W9wwz7)ai@8XwaoAjFdB}hjWKQ`DJ za%pq=56_jnZx*Ax})22z6qVbX=P6E3B;VV2}UfhC!Sw zYnF_X>N~C{kg7gM7jU$-UWRCdcKo^eqMdaJ&i0X9m1ttkm+u74E84P={1tpDYcHmBC9Q4UbR57LY$s~VVto+@_{H^jo%KR<%-0E!pen9?ijlZckHhR-9GXJL=`o*u4|GOj7_eG>Xrv>_(m#KU{dyVw_MWo*#^&%|)eOjP@ zyP@CTroSF@BRW1NEoO;Ze+nYfU;9a9`E)b%XF!c$78ma?QDpv4H}q#X`X7QmI z{_Tc-cboqD=OW2R{f)5n*M1mTKHUuc>m2=$NIx+m|5vp@zv^X`&l|RWc8Ey7M*N1b z{I_d?{zOB6#%k*4!tzM+$%;sS!3UA$v->4ezN<)obVT~<_k`ttR15SUHT17T_eJa1 zch5%RzwXmW^4W@&8TLF~Xn$@PS|xM_o|epueLFv*{qey+2rvIREzsXwq4XX5*)Jmh z4O=47@6!VP+YSBCZ2ernAd-9vBGO;`eq{M{GxXoJ>0c9(equ!WSG7RD>P4gfHvJ9} z>DPQ7Nj~jbpg+;jUu4r?_)H}EWJRREU_)g2>|U(=&$H=|jz~W`BK=V<(0|m>FShA_ zH$M{p%`Ga_&i!OVm(vtNRm=48szI7q`<6*`N8Zcz%9xE7Z_j~Jd zAvB!8r zlQqnhMzeE*>MwzI_~RCsM!F&Vc$VY^ayr0ykFPqKNlEQ91<4~r$}_AzeF(>bM)D`N zm8(2HL$j&=#A#1Nl1KUnk?5b&0{wX(oBC$^yPF<&(|6amiVaFXe0@vFbn07-_%-hO zb}md%nEDnk@^IC+L)Z7ABGtFXOaFR(yX~OR`j#zIAKd2}e4phhYXkb# z>^{pT$p#KomfYk1PcsPJVD-BV15WlbGe?hQ+$`GU$Jq}a;Xcbx<@QR9Z`FU*&-~Fa zws*M6Nm+BCvyp*SH_1rFdN?}dKFdm@e_`y&1#1HN3-ZU2ucu7Dsv5O$;g8=ME?=T= z(<9Q~f!z^d>nG@sS1T8Htxf;u>5=FsN2LEy3-r4f`WA%G9 z@?LloKII=)W3~o^CF{d{mvH#rM!tU;=DX0s_bB;}EjCWx@uy>tQfKbjc~mRU9arIx zYFy&y^{>HKJa~G`!}Z_+4`tZ6?Ddx;K|GAb_6)BdM@`8?HWKmrZ^v>bJjh-WuRj^K z4iD$*!!7te)Vu8Q%&74m@PYRgn_3~zQj{N%AljF%WEGPk9)QQo}=a zH+k5DMNN3f)Q8!aIm1H-efU&3^UrDjpFMlM%SvOfAIG$ETT8rM%+XHa?s}7nGAzCH z`ad(7@XwbA*^~*2hnLC2c_v4mbL8P_#Ho^+Wpd!bx_d7!Ue(}h8sy<9!*t14@^FJ; zI;mbB-o!~YpnBXF8VplHc<{(Wae`smbF?!3X^zeG!+j;qTtoiVW8^_LH6dQV1bKJ| z^2fuB-tv%WgngVoWWY~?7(AcDU0POp@&udWD_Hd9^}k^#R<)N07)2p+MO%5;X)^nG zlstTdB|!L+t`D*^9Tao_R37WP+l9CUt6aT)WJ7{_D&!#=O&%ULVo|);-^~w2`CdcX{Y#V!>_JMg!>u;OTd{Z*1c954>~zkY#Dq~uSD_pBi@ z3Tu45{v=a~+0ad|f4d=a10L=;qzWZNMcX~Rm1o9}RXCl6F9vmy-0v`i+Qi6%+-n8~ ze$gUcXtbdk4>M}2AZf-Me2oMhV6@0HLLSoByFG)**wK2^79W8wAc`7^}Re$>u%aE z4~vYBWLomj!RYbnM<|iHV{ENUKdcSDzG{eE@`EVMji%C8Y-sJd<4|N{G5+xS--b$9 zuZUjE-1Fr&yeVE_9vbDr|FC?1#=J>|9r61AV`xT!8e$uo3&hS9UoXM@b1rVuGX3|t zc82<+RJ{H+rW)-~RU2ZIzCs@cnRs(?jSO_*_HlN+>^>3?`!b}|nzVM$H}O{L!vniD zz0^$_Z;w-lcPB}_bQ5o=K4ANl5ZNdyT0F_b>sPDsiZkr=s&VQ8s*;J9QZ5fTSytk0 zT_ExNm{UXkj=D(WH6CfpIv34_*N=lcBxns3SjBsvYVt*hV{Mb;tY_}Id5bEZgd($#jn8xthxRuj(?FAt?AUWK$Y#SfWy>Gc}# zK1cg+Llfxr#~V}hme!*eOuTG;7;ECKdr;$DmTjkZEzGUgf2N6-{gON!W2$*?c_=>I z#QXdljW^7xD7StjK_{7b)mrstns}r1;RjRB%dtQm`P(toPS3Md;@xKA)qW!nznOTR zujOHxiI*Lx@fJ?A<1PM4zLuJJNsaPwi?Jdec__Zq#Ph^xye+rb@pkW4swUq3`tS+k z>BGCIFwly@Z8hFSx7qPLtvVx#pG~}0@IzFuZaZ0O_Mu42`ori|ynGV9+Pn8B$>|dg zgp#r|-6l;)@njS9a7%-ZcN&UnwFgs7&};E9qX#HH_>~6RGTx@x zwM;0+3iDu+=6PO%yu97S&D4hidGOEKxLM<`bIgDzQG%A3pjpQXN0;OJM+7ac)1V!k zRwwIt3Hpi&nxqe9xR?+@Js)e(_*h#c_YRbxUznf+^=?cFxtzI{PiOJn&Ft5`TrJ5l_qu1B6;}TXiv&` z4f^zCo6twvcy2O5UzUerD%v?w8g#K^ep0ZG*z0G|-D1s(pEOk4VyhT5;=W65s=uli z)MThu>%+|^=)7GT)YsFNltW#2QzSSA*(xSa`_`K@6f-eDk4f<9w{zS>O4yluPLoek5j{_6q&|*` z^JGcbGzptw!g|!jTVqm8xdESx&y+9zIo1Ev$k9jJ`N;K4n6GxV0cr=T4-VI$C64u6tnSG`6ZA@XC?1Y&YzX@301dh*U@+^1>SPnt z^RWcI&rtRB*PyiyuO;;ol%1R#u$N(E_9E&L|aVIGu0(J#01@Ys0RJo33}DfLbZeOOSX!|F5ZfZOpvXkI&09v=?>MM z5|n)zpSaG&L$QSsK`Yy9(5oE>xqbniCh2l|{rRA1-792KmEo*&S? zW|tik2WWczsq$%p`6Smtc#D1JVT?L#r_1MK?9X0A*l04{sBJ-ae5r!rrZJT3B<}bT z{9XqS00L_~$IhBu1f!Z*i*^EEQrg?fgo81W=t@)4{b6SCb+Y5Cod&sii|5N%nKpalongksS)Xc9k~j=)-{DVV6;giB4lXUx|P&e!X;Z5V34-f!B5c&BYx zBF#u~Z^OU{bq~9mplR3+1qQxzg2tmsQwBO1$MF@%ah!lJ-r_B$ET5O{CUB28^#;5)DXb|~7h|pu2pTsV9u&;Vc?vt>Y6JKY2rbIHG#^pO{dWsK~uMpHR60|KI zFoNwAP9HREo$&QW{NXMB7I)HA$r4s}jQh&V59OkonS1i_FykvEbH_$a=4q#4@*IaR zH3)Ju{(##j;lb-C8th9a*rNj|iqa4DOU8w^BK(RkUjH{Zz}>piB=#?Hh>KU?4ah#J z-tiK7@Xxv0G+<2uhxkO2y$S1|A;Z(0rpCg|J72fy6$!7IgGFCJ%tdbAN7WrF&4DAlaX?V?JR_Odw91kKfl{&*O; z*=S5jCpIpfe$j~KPD7j7St5E2*|MMXYyT^3vboZ>7Jp?*$)k?{YNJNE-)qp#|7Qn1 z`v@kH`<;GieU1IaqYdq2CZ4B3zplU5{#qt&a`9azi3*I7p$}|=W^UD>?XRn&I!zVw(o^YmIl@4R*Zx9+E_N6EFTt{o2)OlOO3VU%&rRb=o7%ckxen zsDd?PeJeRZUVdgm{G<=d<-tG4TdTyP9VSYyB@;tUN9AFs6;HWdi2TdMtG-X;UF)>H zW28kd&N4}yhX>8cQZst9zyzy;^|dWPHiG*H8)ES$)LMtwFVf5xcQeEqUzCTQCTL8$ zraRDS$p3g*zBXb45o+zxHvelpSU;LKjp7m%XTc21=lAg7pC}LhIWZ?GrS%RaPpt%f z)x_JO4@o9yhZ8jDbjKywrVhiQr23&yZHou%HnM@PnPxx5biQ^w5igWZTk)scl!NDt z`*4Ocpy!bh&*CciI&;sd`f#vuh2K6#Ik+?sRGo_sk{&E#ynbyPa4x2x|P0i=3dl&;wLnle#I9ZjLWe`yV0ltcjO&lztuMe61J%rMS=};nA_pYfaGj zSPfd~1YNXUf_@=6nYm}FJowKuLB}7aK|ghZz5!RqQ~~4J9PM-?8`TM_1QDx?N%Vn6 zA?wFf7RYuIU&o&-4{!*)O4b|jb$*ecpPBO7tq&6rvmHefzipdtl)#eys-y80_O~kDAmZL3 zz1O@YCdmuIh&S(ElVqtrB!Lowy`&FY(Ujp~xjf_#H-jNB>zDKKV3>JDo@f68POIL) zpT^qX(q9NSm{f)?kcW#+UV3YmIofoaK8%5nD75^K&&iN!%}#@#w>Lsml_P{?V1Yp} zvj_}&^Nun+&jo|tJUQDPU-pROmKO^fg@+;(gg5UzI5dXMTP5GK(}c}C99l#7N}wD= zt1e0;S#I+GFD;BC+S{C6jqV{hJGI>5>_LPO&K@v`B!5xKR2gcu;$h|CC{1A|NyV|( zp;r5m=CjpOhuSoR5NcBlB2J=Gi+hTNp`ycmM=`Ag+;KV&ogU5Bx~_$-X=F$l)ype6U_ zrGTU%Rxgcf{?90D-;iqgJ8!G}-8KasT4-a!R-q*uOsd|(SE04sAZU#jPb)9Sp`~M( z`Op{8QZFp;5v5f!Ugx{(KX+*Th{6_HKNtk9A63YYIR(5QOSgzH2}T4`1oSJSdgP?SJq*ExKyE5i~ZC8*yiAu+1h;i9UQP zis+w{U9YTvve{w%2@|*Kaf3)CMkB;Q#CV9;hqIt8h+S`DKfB3^eF9?-aAFrhExdV| zCiZ1oBUYH$Phj*3Meu2z6Z-;u7O_n*h~!QN&)&R3#5NhcS)TKIV_@Dl14|p(TDF zgNXmxvy%GT|dC2eLB)MIlXFmgKRon2VNizFrN%9vb$=ULp zpKFpV*`i5)|FV;0K0Zs5HyT8eAE-(-Is`tH=lruIl}{ZtDh~-%q0h2Ir>fEkl&LRe zQp0FVmOSVGCT62;nbFnf1KM_@iC1-l6F*twpWwt#(dVTazuLqE16@6r*2pL?Qd9L=>GJ0y-*?cfCWPNgIumm4Rq9;82)N8y$uD zjaKGY$I9sNbKZka{5<^S&HokS6sRIHT!AXmYNf+KE3m?DXKMZCnIi6WDU-n_mVB?Y}Sh@xkp?!1hzlFCa4O_V>R`sMEsGt)NFRJV6O zb5i+;)$K!rCd$OUBCu5&lME3PnL-A=<-NoBA>6J;sH;>{~jV^%uG_z0gr>EwSC zrB`Rr#L1R8`IAhX&rO`m<~wn2V4UmRacUcubP_d2=MewzY=GcRzA?Jj(>FI@2Act3=5kr%@VBl)ix|ag5U4AXvFm z9ptB4*}}d@9mm6jm9=hV$yEn)H%79N_uQ`qIz{UiW!b@7Rfx}04x`=5QVSo$o43xy zNkWGhary`1yu~=n4KmBppy%Ij;!HCJW_qO~;{j~Y`x`WI{(z!j925>>5sRZ zIJ@v!c>CR;iE}@M@6A8X#L3sTrBg+~ki80lNSu)f29!AYdoIH%F&J3IR^lg6jh}ko zDT#|=v?TOJ27Nf8ue(e#E}SMB*6YXkseSN9;yCig+Y3 zmiP6?V&dJz z0^%IvEMgupmw3a`M!we*uOnVdyoPu+F^l+r#H)x`60acsgLpadGGZq2K6c*!Nh~4W zOT35ZCl(X$CKeJ4h;xZ^h_i{ai21}k;!I*L@h;+>#5;&Hh_?}MB~B;aLcEzcjhI86 zN}NKxiI`2?NPYd7_#v^DxPkaC@onNd;!0vQaXIk~;_Jjp;xghA;&`@RO)a zUO~K^m`S{ZIEi>MF@tykaXj&SVmk30Vj9s$97P;K97aqbChs-+bSm)_;vnM5#FL08 z5(g5Kh$j#S5RWJJCmu)aN9;>XBpyrbLp+9PhVioaq z;%mf8;;Y1E#HGX~#8-$f6JH`$5MLxNCcZ#iM0}pOkoX+2ocJtp0r45)eB#r@r-)Ay zWo4V>cQXCRNyLf7i-{KzGl&-wFCb1Jjwg;Io=-fFm`*&Gcn)zaF^xEeIGUJB^byY{ zjv|gEjvx*v4kHdF$_hBiZ%;GNR@H+TN9<1QMm&mmBr%qF1hFgeaAFtYVZ=j;hY(|k zUSelrC*r}xj>HbcgNV_@_QZC?w!|o68)9o>E24*Z1ND4fE2Hl((9gS^?-%p=A%6cC zQ6@q~etzOR#0U6&5ufkp^YeTz;j>I(O8mQtg~U0;nZ#`JaXs-y;yJXFGCwGEMiYI+ zQN*FdyBP0I;^}<<0Y^M*iSH9P5Z@!dOMHj8p7=JghPaNnmbiwvnz)L%lDL9cO?->E zocJd34Pq7Xb>eHpO5&@;WyGb#CB#>VFB4xPRuHdYIb{*AB3?nfoR~?xggA+KF)@R9 z0dYL>d}2EB9AX-AG|@*KMI1pKMob}|Nj!si8Znu83h`v(iNpcK{=|O7L}DLe0_$9_cqB2Fcm%O4@o-`n;$g%?iH8tlh+bl6VkhFk z#E!%c#Dj>@#P-B?#J0pJVjE&>Vk@GDxQ3IptBI?KD~T(J)x@`m%ZYCi-yl{IUnjms ztR%ilTt-|C`Uqy-FS&uL41+8nD_#55%GEALgI78a^kbZ1;l5F^NCLrpCUd< zEF-?j5#`s3uMsPWuM(FLmlBr{Um?Cse2G{=e37`A_yTbe@pzD%qjE+#G_E+m!{7ZB$Y zpCXnKA1BTuK0+)dK16(gcptHZcn`6dcsH?tIEOfkm`BVd-o^Qdox~rA+lk*18;Dzp z-w?kd))R3$w3h2<#7#t;@~Q7}+LhwH#CwRc?Ns#PdE!Fib3|F)CEuSVE+9TboKJk3 z_$0B6_yqBB;$y@|iH{IViT@%#M3jXllKun4`-%4v|4F=?D9dsrd;xI|aYmGRFPppN zJ5E4QyqTCooI=bd-ax#LcnvX&cop#qVkXf`>`d%L#0ff@ZbxDVB2N0y_tC`m#CF8C z#3-Wdu9bYWCblAah_YZrz7HVc#vpy}Pdtu@OF#5|A`w^J=yM+;E(_3S9Hy^`6XF%) zi9LxpMOfc=C*mkueLjkKBr%qF1hFgeaN=P^x%gE0k0E}~`MvGLZN%@07O{c&EpaRH zKg4f{UlYF~eo3q+enH$q{G9k1aWiof@l#?Q@!!Oa#7~GH6F(w;Nc@0UOMIWWf%qQr zUE({$^~AS{HNm*i3^C&5a$!0CO$=ck|@V{h~D+%d_p3z4>5t* zizvIFC43KJccLsmlJ~L1uEZ|HLy0lO&cuU>9f)#tgwSb6j3TxsdWd^iPyQh8A~q3s z5Pv29Ol&0nK-^CJj@UrlO8kcS6|tVUh4>k96S0oCk@zw3Lt-tln)n{^9pc->b;LEq zRm2s<<-|9LuM;bY%ZN*eFB2<>i;0Vf3yI~#1;qKpr-)_5$BFZZj}S|V4-p?A-bXAU z-a{-V-c9V()0F?g#E!%c#Dj>@#64KQq@dx5|;&;Rb;#T4} z#IK0;#4W_nh?|IY#Ery{i60Vci5rOT64w)Jh-- zh>MAfhzp73#0A9p#HWa5#0QA?5le{o5Q~X-6AOrQh_i@!#9ZQ?#2Lifh|`HT6LW}D zh}py&h}RLXA!ZS;B3?nfoR~?xggA+KF)@R90dYL>d}2EB9AX-AG|@*KMI1pKMob}| zNj!si8Znu83h`v(iNqx00Ahb)KVl-W4>5t*ix^MrLF`UEiWp1mO6)>Blo&(oOgxy_ zff!9}M~ou2CVGeiI9}SH*pHY<>_e23lcfIlBK9E4z6N=J6fu_AmDq)NC^3fEnRqZ! zZkZN3(ZqJdC}L}(oYW=Z_HZ2e4H8+)uS9HS()T|Qw-di3V!M@o-%9+3h*PEX zJvN6aZXw=7+)VtG_;2DT#E*y{5Z@=hM_f-_M_f(B<|$1N+wT-BiA#yE5MLxNB0fu; zPn2boBBwH9JmvNo$2*7cxs=~=tdoZSC$We)mpF@ zCSsaK-(N?(hKTbG^!-)DD~Oj9Gl`cFClN0uW)LqRjwhZ^Oeda0Oe2mao=qG{#Bor{ z&rqUl)sg%RA)ZbgOgx2nGVw&>0Ahb)KVl-W4>5t*ix^MDwpC5HJ5jb>2_Lb9f;AycEl)RYodoZow$Yb-JcUbBW@;cB7RE57H#EoBk>dB$Hb3_9}+(x z))L<*ZXmu#e3$qRaXs;EVhwQ}aV>ETaW!!jaV2pDvD%>AzYI@Uq~QGQ{ew6!u?hDW zPf3x(c$=2&*SVrXM9=?Rs%MF|w{BS{Ymeg^i_D3k?)#o$q4n4N9NGAha)oery>e6T z;Bj3jgW+b6_43j-IA0MbAb8;IIllnkqi_}QCDFbW+uHd2=i=`R@%MLaeEHj>Q~h`1 zuB)}a!dhP;E^VwHSluw;39yWdrEzL%YT??{6EGUhq9<%do=OmS5;SXZ>u_w~pTx zAdQhJ)mK|*W%GK)0-V%~dx5QECu5&T&s@CngbU|`9=hcx*H*XJn})JqmGfq!5|E?E z<{pGyWs?$iTCZVPk9RUsuz+rPW{jyZW_EiU6YTolJ5BfTXjv^{H*6=sYU0UHMHo0OOf*3PeYc4)9U3qw!#UxQ5hFe=dY==u6_$b z^2dD$DuHu%#gxfU^rA%QLw`z@>@RX?Gwu^dSzuq1J6smSRU@2SqbUK8(16%S?4p+< z;dozI{_fV^+1Rj#7n9?Q#>T!b;Y4SAh41?cH~I=!46IHq+|ZCV<`*o`#|`cOsP@gS z&iRJ~K?Rw;_jmKUXkxUmnEYCrr*LF^;9Th_DJc9TA2o&Ud(z~B*MCfo$K_fF~K?S%xlb#cefLVUfSY~9G{as)Q_?&`(jjy&>R`AkN5w?3Tc=tC*= z0U5?o-`x|CbWHT?=I+v+Lb7nA+;AOZ4O|tZA6BcE+IUKaYHmz^7}$cvh!&0ULf7^B>xQH%bF6gZ zP}~dKB!vr^FUmI+-m+>iPR|M-54NPTg{$vV(pcY9?*3yhPWjN^8fi%RYX_uSYyFqk zXg|tP|GjzQyQCG?purhCc!T%e-{jliM(@4b<&VM@zP_L08e?qp$I@4P*y;64%}f)u zTkl)(Rhv|QcC4?}Mqg1^lx%(38=~cq(?>8I4bV*6YSc>&bKiI9)_V`+6gdCeJ4@UP z(UUr%Ry47l+b+1{)yzRWxC1e7O1S115W3TI*UJ(U&y%h3CbqYJtcFDs_1S_(*LqHO z0ma>oP-%tJ>Wm4zqah8sNuv#vqVN^&fuXS;y`f3&t8>#&68ibOW2PMfO;a;dyBwGF z4ThVE*N1p#A1ksHdr~wx_BAOkqheq93O5)PTl|etG2||~UbqAuk;0KQqbVM@9I9ul zz8;IK)lc;mjXMk1T%KKY`-LNlhEE((H0Dx>uzgz5INZEG@z}JY3^0@uJ#FHJs2WMw z_%;3UbkDR*VIZ||k2(@L3F*cwNfWOG8lP4;K4E$qt|!d)K~J;N@Ly&c?k>(~xZpa| zUZxd|$H$_a1fLIoW%-IE1pdoND;klIE;V!A$ePA#wU@v6w6sxIM-+~%9Z@(I5*}Oc zE1UocODi+7sqhZTaE+C*R;aH@gbgTh=eJ@OC_q0NAyuh_8GTy?$)hnpxZa%!L5Qhq zn6C8=m#Gg0_qY&Ju3T56*Od8|F{qYv>7=CGWPSc-P!+UZz!aO-cXxS1UBlSbIwXc9 zVr{!xjU;Tly6FwItFhLVIl*>ytV5rM&TUugg#z+hSJ|{zy6WRHTM*QEt!j%K7MbCVxg&P}=NiYf~8kHgq?6Wk8$za{uiwR8nSLXwEps89!TWf?MQ9vR|B>SzasaI^ZrM0%H zwKlzI<2`^t(5fp|jhAY)t?nyY7qz-x^M9T*Gw;rBHe9s*zW@6Z_su)EGiT16Ip@ro zGn2GzB0a{e=c@7>^O19>`HkV=x&;lpv+!f&5Xe!6?OqXS@C{Q6Uly1$&1*^>2G*V3 zZm&b^C*@H-Cf>YAwV_o+%)H@X`rvSs>Qc@_j}MU*CeJ-2Ql9L}z^i4fW-(d9Ai zVV=3`{+XOn$pB^znZCNN1=Gg~x4ts}K&GWV7!b`TylK=b0zZZY@)7pdQCEumuJCbm zSOh+=vr|Uc3!q`=FzoH;)6e8qSgt}^{?3I{mZ6++?S5d(GZ1eHbbW!Yc!pDfu60Q(*z5| zi;n$hgvWUpLVUh)wflRp^vvkpq?F)V)-Zk-^r8x){HM;}ZcZEd-H+Zl|NI53h1_Z$ zgU8%)+A4n1j^=Xt$@d^rQB2wfe&WSx>n-t<(_hkg$WKP0jcwv5FVt;joT}I9ajK&@ zn6Vu+865G~#S`a03OIl4A`EU8D?Pme>EI{Zg|L_yesa%)YCH$bL)6#J`gX%X@o&se zsxcsjpM-mCeliq3IfkFiL5krg4};HHx`y-W&lQ}eV{X5A%k(z#lM>j|w=}McVAD7J zBtf{yPfir(+hkzi?_h9j6+bCi|DWI|<$qG3ZWTXS1Yau5<)^O9!%xzeV4;auh#e-I zpB!<{X6Q7HUI0BwrwdD&OQ+-3k9%d~XqR6RPs>q%Y}f|gtJB{TZccj^y$n&TfFf?| zD^Q2yMVAu-Gn!x=soE!mWFLEZY@lbICm<2k?tkdN9m5fR>Crx!_b{B;kR* zREgF`mTW()Ld4AE)p6V_6xTv!iWide3ZZx^h8svco(_6`l^qMuH|2>A#Ro!Km5{ z*9bs?2yQ$$J73`-`6|mk@U{LJfMRtBq8|Zh9(Nr}m}eG;$e5u#hcLlhgWZ0dV5x4| zkbu-^b|pUGd;taO*+K)Ifd4d>lP?exL@Z-s+IU)pdRn$%t4tf+vp|6BDgrA|QDyw3 zf=IMS3`9d)ZywexpHDT3*#XiU6&KL8G5)4-%v%mnpN;#N6>`k zcmw3krK|)G>#1iwGUl}9MWEMChuQkH;o-8COTH5>ODvg*nns1k^k4v2LkX_%tPmhq zTXbsI7hrwJl@d5$kNO>~tH9`OrTDIf7Jq#h9^nAqgqB7L}j*m@d2e@R$TBxsVj?|pnprUMM|4Y_4-%_zBuB%9P z2|ye#Oy9+nCFE8|WB1=quxzdK?szqv&av`7D`SOwIA`D<&X=ItqhD3%BBo&T8X2~I zWvXgAGc@GVp$yPw)H&3RxzvfPpfSx8KFPSEap0Ba$D`kCy@U=_H*DlWGYmICsYV$R_zT^*3ALfVud2}wU!SPsG zu!}}3g6u*TU$yDblT+VoL<~4-=Yaaq4dK-;5rQVvzOYR7Bt{0K$6D5lekMV+pvMxS$9-UN2dYY)RR|b2yPd;m)*zD14*1teI?(4jFxaqi>`grOuA*Azdc)BL0cduTB&ZBHmy zjgdIPq^0o?8nEnO`S4v$y8Pz&USB2n-hFWnzIXZde+1vFa5`yg@!jI$+w_-m0r5_D z-S$1{uiOuO7^Xt1?`2NNY5P^iCP9r`2+?ca_SozJc^|B0jFj_7grc0+Ne2}u4p+7JBi}|MP6u(CTh^J0Ze&4d2@j)>Fu0GW4=8XbTV(WYo zHWp?aL*nX4yrOtPX9PQyT@h@McSo=U^pLU=LVhbSCXwi(;$#(AhT;}Ue!^k^`a6!U zHi_il)UNa0*d|n4KG7N&I2QMT>XTS1p&`lcT*7$-GfFd*I>5()RCsK~Uwk+Z(ifs% zv5Eky4g_B#NmK>l`vQ4+9YklEC$N@l<^2L&N|jH)fZUYjcav}a_OP8eydkg;BJ+2J zG`9Kq`ynob8if9;QQtS4zfXsS{`P9jp}#$k$fm!imwkQuTlK|O)8FVN?))|MXYfe= z*E3u2w?g!S$3T^N$Zagh4Km}5(UIs&<=766U_02?LPutdZdag>#0BkF3>MuWlOB*u z0=BVUxT%1A=&n))C9T{jX@!|V&MhT8;y)9DEn^xeJ~EtaxgM>ciBXg> zm7c8(!qFP)+9}rP%5P6lbiqS9Onz7B5TZ#HT;`?^Z+>%>NNissEnN15@A{AU0-pgo z?2TCqE6FD6!rorChhA}u6HQQ_)iP|x?}=XV5~WO!R$yk)nXw9}pyZD<>5p3AO6QM>uhtV*b!Z4~kAWR_$L|Pu0$-iLS5Yc{71XoPj=^75DTgP6H@jR=l~dy*jzO?p zO{fXMYlH4?kPyQYW`!Z|qt1@MlaEwXLw_%Y*$E&8odiQTudDD^zeOs1nrLr^!TwpG zynUFq4->{p8ir(ta zlkxW?q~=+*&hW)9ABkNg*<{?q$d|Qbl?V?38i0;= z8NkieUMDMPR_z`9WY?a`uDuKB5ZL`#H}k`Ox)~|-qK|d`8i?w{aMd=VE;U@WPJg32 zTy?;T^L|DjQdm~w!FP<;vFBRjl_!1gEu?>Tj#WN(sj7kW5C$R0@Bq97z;oxB@>8W+ zSL-~a=6#-ae?C~fDFC#^de2w&u4l|fJcOromZHB#%xf_G5IKn1_gG&h*(9G|=UcAw zg_+OTH`ZU0$(Njo`pD)%hQ_|J{)$X`PbM9PhKzmV=e&x5dOGV@>w#LxLg83Bt&h^8 zvTLj_%GB3r>a%PcXXv_0-)5g|+eR2n8Z1p!hUud05bG`bOHk^ofqjO)rPkUAQ&=Sy zvL#bxbsVz_E7)^l=Wk;xS@s9JzTO!Mzd`g1j5JJ6>--qjb9-H=cE;d3g}io%AP4-L z>xn-*QG}&;e~_amI>lMSlE|1}!w&Hy+}MJ$TO+40nD6p8BOh@z$q{LH5qkXQ{r&w3 z(%&yG$?5N>2mVL;d-n%h-QS;P`fKDuqes#X5eB`1T@7M~=t_d=kuR4zfL*zUR60W$;Zq z1aVF|ycgGhxq9FY_@D$mSM3`OwT~(v)IT{bl4#n<=}m`a%GfnY2$2vZm5N3tXvx>M z99hqH zn@6q+zN1N}gD+U+Ex9ViPlj|T*LdC=AXlA;ix^0HJw4!WLW5xvV|GRD{A5=Y7+BHA z=$us4Av9cRR%;Y<<*L4Sg@=kjcLvUXS#~sM3gio=_hPidcETNZf(c4}@3qV)j3iJ}jbm&bOTZ|}lrFhX>XCNmu4G;+kM0UyK1Vlz2 zXZ?H#e{U`6gE|JC^CACBl@;ua?9|x$3F(&)%dK$B$=ZZ93ba+$bJbp`Bo+Rb&}tgZ zv!ayqAa2oMLJ|p)=t`V71bKtB=Y30Lc+1(R^fjZZhdgVgHPv1R5Cpn&{e3RuP$mjF zDPk2tk&y8c;7cD~N`y&~@cEL$iiBA&=1uibWwF^z1yMEvr_4T5&2Zglxr-t^I1NFTn1^taz}>(6&yuol#ead+KN_9ebjVNP#|+3ASvam*~< zpENejKwd|4+Dwbfp+e~)jNZ>ld2K;tBrksZVsPkn_}Jr4985y0h-CN8Ixi& zrm~w|%Q0dcr2b_Wo z6RSq=31-Gm-|!d9|Cx57xx0{%`!<1Enz2Q6)w!}^{ws7utq6t;gr4j18QDFa4+!dO zPJPHtmh=*x9z;5qDVv{|oTN7|^NFlW8_;wtfAhx176K!aCg2>=i9AD86+0XM=K88) zr;S#A{)>vkm9Q@Y5!E~?bW?E~YO0LhUfhJ=Ffi2^25RbgXlM=(4b|~%M{RQEEO4V{ zoX=cW(GmQRlcE>oG8;FS@~8)8^G?20fvu4&0YANBkM6<>haRY zFKCY@9=MmpuGK)eysd-X&)Ub_(Xv-0rwg5AOuSF1C*9X#~{t*DkJUcd%3Db9?< zY6{_$5L-+;YYB8NsM|H6%Gj(hoeD$YtpyVQjzfbj< zE8u0VIth-|pP0P8n9P6}ZIWN~jQB%8(d*=^M=ShQ#%@;_$GNLU9=WRLk*hi3*dkyW z2eN9hAPF6NKuc8^326Bn=d(=G&J7R}GUwDuPt~UhU8Xxw4t~(({L}bB@7}^=bD@ELVw8i}j+|riI!9qA zEpNUYJGEJ_(X2e2PmOF)%d;|{O8%|q(=Bp2SkVGx$TOc<0r*|O@QcHUz$DK|Wp@6| z87N0FemVPOhXx3s4rfV5-nZp#)=&7n3O=uD1L`5!-sfHaF)0_ zZo>~)%>S{PLpd&Ng+{N{%b%2QXL;Z`#4^-D--o#hvu`=RD|BR!OC9s`Jmbz7c3Gk?Ap8VN@q=faiBfZUti0W z^jDxRk0TzB;T^6aJZd!JESIHt{GTXRm$$wq))$)u)J_ABn?5!+@0i#^usEzXzy=lp zN^)2bssUZdJM)w?p{*B2^f|Dz*lHxob6}C^$L65qh6oRYX(o5NW^$aaIQ$4EkUad` zX1aoP@r-0GSrsh2n1P(Dp-R-XuA(;yxN%AhTR=D*3GtCzKsD*8oLTO5rv4MP*n}VQ ztkD7?>7wHloM)RKgy9cI+Wg9LEyvl$_|f5IS;yJLA33bMu}MzO>l1CY0ycn1HXf-F zngKQXIsuiVHIOVn5yT5a=LxvvPI=C?J!d|$lDy~IzH_E-2Gy!_Z9g?-=v{McmS0Am z^-|3r#_9nE(}kZ39bPaEU2YyIKihQGb+XU_MjPi6L5E=$Ro0ulbknBtD_c-A-04B! zvQk2TfXy8L#(nJk11+H8AYtiHu(VA@J4y^6AkUX;fH;19z;}#4yKfoev2dc0|D=^) zJ(ivR)e;5(%0eVwS&R?>VJt=NvI4824hVwfH%52=u|YX*beku!^iWCv&4V7kljPCcESbDB0sct z&))%++_97LB_suWE);NVL^>-N&*)vmF(2Z)l>NrIS4)BMPgc@wim)9kE`#55yr|rU zOA6_7eaOgiO{$?N4m1ytEA0I3%pV^=LDvslc%64IRO_F~$MXVpgh%hIW}g?>?=U@v zI0u<~USKFoQNb(kLu?DK7C>gouD9N*H~YN6+Cww-=AIYWRZ10YB=D?$)$7P>s;6io z58>{%>d%IIwpD*F+!q+QqpuGFcfzVS8}5--y}5ADRd7!;)$fo6H@7_vZLtGfheJ5+ zi#QUy@X&Ac6EL_6%;Sgt{W|fS=XM9d*$%>my^SaYM+AW)2vFVucIL#N1&O@GWhxOt8{oNU_0#q>k z$s>kfqSz4L1jy2*UkPND(n;{TD5iEE{y33H!Nd9CB?>LOL_Mn*gpV~#DJ`FnWQ3m> z?l=!T^K#*k(zp0k1!2UVxNZ_=yE&RPqB0&TsEV%KxLd`z?uv2ixt2EKZ!VFIRju7} zUTJM9Y>Le|C_y?zuX;MStD

dkD%_^koT4F+TyO(`&pa+^7xWcqkj!J~{Bv=94EM`E1)t87 zqm{tdx&of*uZ%|uBP)}TmQM9X5C^2HVAZ6xLwCWruJg6vjHVi}$CX-^s6o1*j_L+>c$Z4=YC2d}O>iOaSo%H0v)+KKs&n zC)LK<#N!}MOBQA&W|f}sne}FbHGWN8kpM?eKjxA6`@iNi+~401-g9#~K}PppR|h*v zoC%vgr^U$I&dl+mzfgwY!ZG0`u;J(nkhkz>iL>t^az-Z=z(k-9jo1%j6rsq-DITri z>MdL-OYdD{`8gyRk%N9ilw!(yuiBq;vTXGd^g?6+AQ}7h5G$Pt^z7yQix(X>OaP*h zT5Ex{%9-vtEpuG$P}cee{EbpyqA9NRx`-s5g{1Z;PT}aO@e3+=LTDCzj^`?>02}5@ z^H(5~KZ4=nFHN`={&D?I9P>c?cdp|`imr#hYF<%{0U~0vN&$V+S&Axj{_DO3&&5N2 z*9jbF&95pT35|yYh~|DYKAm66p7C9O5?(M(!j+)+coctpvw2ui2LR^)z*=Q%OjZpnXBaTk8W(QAu41u9TcFL^?Ug5@Gk7?jeHB92)j%!KS_O&` zUK_x08We|Muki!LTnnLUnSQ=r6@9KM`b4E}RZKUPw3+u(_Jv_bW3=oOU&}}?Vw@BG z>u|mU`_+}vSGc-ee=(>sj2zd0hcD5u=;|aC+$aez_~MuHMSDM`dWUfaEAJ=xCMho? znYgwdZTHW^{#ksE;axES(}C?ZFUUU5mNoz5S0S^;Q`cnFgL1VjC-%QtFslhS8=$X@ zwB}0_%4PA(UrT>5VJ9pc?u*}vk&xLVGiMah#F?`vUfh{;9KXgkPyONs)qK437ZQJM zKH~31M=av+!=L$xpWij{vxE>o;7>V6k*(=5t&BqLZYfSOZ)|e*1YklM37kGD{?hP? z3BbSQ`!-Vl)W3Zr>Swc@*bak!VG*gGfbo!Zp%&)?W%=-=hhj|QMR!fa;Y`nSTslDJ zFPL1f9mwO*la+F*y;423UXlTV&BfKK=BEg2>`+tr-X2zY+nmHnVE^iNF`WWA+v8^`nhvaYY5zYX@w+*kALt983Ke zJqY)AlLT-?t#m{cQ2!|z1XppMU4jyUNfd^~vl@8|o&WiRtNoUeb~NIgv(YwC(X(+V z{*S?7R5282bT0ZZw?JW9R(V}v0ZiyDQc11*D=9Ma0E{QeZ9T0IGKo zV)3xwS~oD`4v6I;U#+FE5+DC<{7_#;RPKnd8%6;qL&Z!TEOxg{%OiqKG()h z+c$`vHi$Z%7td8L1t5?$_X>f~IZx#FZR$t+j{mp)@MZe(G#;S`mAMs8Snec=fchx@MIL$XYl)7doPjfQ9PVgz2D0Yb-NZBkGwjA1n7k^uD$3GDOEItKh3anz5EyCb?scV{}@_lA1wP1&p-HnL^LzXpY3%o6IU4s0h!ivH z@#ECY8jxRfLvMJ5_-YGxYhryq{4+GnzjOLGSFCpRY$!Hmlx%n?hTwconJHd0a~s=Z z8+=FyCDwRhjnrmq#<4!)Tbc37jr)AyuR(S3UTMCaw5;V!x)F zXu4|`4&2A!I>S&&+PM{maAg5!5qaEkju)-^x3s1F#YvAGFa9G9dGXJG6d|nW6MDQA zAJ9f$$*w|7ILtc@XX+R%f$m5QVJiM=;*Mnbt4%^NK5Vy}Gfnt85C0m!+=c^Ct-lA= z(%v6i2uIwtFugr>kU-~mZdf7>`#ae%gE2GpI*N!q955OCo9v=Z_qDp6jYnkjm5}+q zXZH7?{tk|q=Ljy>{4JgH`{nL3h?^z>X7IXhbp+Sz{OePfA(j9ENb@X5H=LhLH*z7z zlsM=3@&OF){%{p0tsi)Xfnj<8P7^`kyQKN=vTc*(wvDxIjK7-S8cvs)syIRb@;DeQ zM-t8>`kZrl!nK+N&XaMqQ8Iraldz08TU`ibH@GSPX>&8JG$Zg@>F}= zNwe0toBg>3jOT2P`;4F-b1@aF;5=EQTmPgxx)h5!x~`u$=QS-+oX?>W8P`sk&%Cn% z9XHNPzGXBHgV->!r{kb356sTn57Y5rI8Pmcz3Zdlz;pr#a0*44t|s9$i{QP4zk0k! zo(u<$Ma2)%c_~4cCAcxoq|*moLMi%4Y$3RKtXCS=x}n9Vde7v1=x+QLEbY)5@0h>fol42{0!`d8-TOYU;y3DyoFToTH7#@s?h_* z?n0i(k@y1-`A&GO&>yA|A{dB$d_L?m^pjr<8;u-g3BX=MNz&^SVY zsfs>Z1?Q*c$7|iQy$521s>+^is3x&@_F;0+5vq&Rp_^WPJ^Y@i-i^GjvbZmE`iYKy z=_(i;*q73MP!1;9KhPN};p`s~>A3?lq5EH$3Gt#%{xq)%L(FQk=y1+q90$@MZS8VQ z3;tsBL!fUj=(+?(N7xW#4}eA*#2B_F{(@BXNP4#ngF*@A z=kq+!Z*t*ef9f#a+tQy0-FwitosU^bsg$^Sjjp2WW zZZXr09bthAvnLVIX=hY1T;SiVv7lEmQHr0c;w-T20K4jnU3vU^d|)3edskmKfKsvp zVzp2i2ARC__My!A~DrKLKI{H5ZBzz0RxHK4v>Mei~6f@Z;(P z6@*v9@)(pT;Uzi}`v|M@6wD0P7 z*gJJTsUtNsp~L{c5#o2w!5O*^5Dz`0$c0j%PZMp9olH5)&U5ua(+=r0i1Kznw>{3u zFNZ7r=V){nlcU?!f8NcKgPmVa$?dOACo2xphF_d_ai+sP&$2HYc(d?w{qdW{OEu~< z^Ih=L7s!v7OJOQkf}?AbAzu6_|IP4n-S&c)m&WJd<%Nyec)6}(b9iYhw(v3m;rO=! zFUDp-JoBA;fcH?ri?W-y;sfR*>_O9DAeuf}1yxvbKF^_^gO6kgzHsI&YASF5n2eZT zg{ZiIS#p~hC*m)0AliYrSH}`$Ei9#^J*SwFh()VI*aGLe) z^PUwLL^J;qoN;PLXU_g)BQuMWNW+eivD3HnbKKl1fkih3VB{ntR(4KW$VC-?=e`r& zi5UXqP7ydz7XLN;oGp{Yg9nn;zcItRg0F6C@Iph7?_d%@B+op449LqvuXQN@&FJ;DAwsWXzMVs_2RqsH`r5?J(QEJi7QM!>Fm8!nPdV0| z$2PqZZ{%;ChX`JlLvNkCKaij7C^iHo$8~TxPPll|xe9TLiI{9Us%Lr7VS>fXL4g@> zyKu1`;e#rlCyji$av9;`BXq!g8M%-*6nUBsB1lSA`krwk^Mv>{UUcDT?2^8GA8^)g z*R!1R1j^1quFbVqujG!xjj&(X03G7k9HHDgNYB!$;HrY7{Y`nPphC>*Q6nii&ze#P7pNc7SR4Mj_bMjYCQA? z6<$M9PcOZEFdJ~dUv_5T@}<=}Tb_DCGjQT@xhkKkXL;cd7)CWdDd&8l2~Xu{X-@Dy z2l*pcKTg@x)x3_uM2oCzDQ<+Vx)Ztz=4UBqe-mD6`O=1$I=-~yMNXwG$4fQ8te6bv zoyhsC_};+{S*kakG+%V#uMq!I_Ki-+iIMoV#XKOuuL)>b0Xoz`!z!V(^bv;*5+A>LzPZ>V?YAqSpdicW4K@+QV8AqCfNflt-on2#3U zh)$;hE|UuAB?|!XlDWCS76u0Zo3(Fe!@Gj=2;i+fY#_Xc5ndvIPX2n^YmRf>4M6OG zuZ{R>*GoAC^@46#@2qNK%M4k1C{Ty-zu+{xneT8_z)``UmgKrgB& z&}rnpYKVhI?h}Tu{4*N)*_Qi~05(_dt92e3@1i#ZsGWmO(DIuNPbWdua-Rot1M{fX zmHUKuJBQcgDYqQuKp{E(sD@CNryqq7I`Z@*#Lsp=I4%I?Q3(Trd}u=|k= zWcpDL-k7H!-#uOT!|XSj@#Ow(ka*C39gGE#EIERd$bjpz_m_0;<;kvi(I{lp@~M$; zNjGdC_;BqZ$8iFr=1?lrC2|Pj|m;U#PFbO9StRJ>}q~O0QF_M$-w~ zb*4h51kSPdx%KdP$9)}mMr{>5e=c+3p+3mR><5CLdSsuDcd_T-sHaE~K}xA7P@`t^Atgo9WSoisLYAMRXXesuRvCk7S=xSP?#Jq6k2 z!wY8WqGE_kiwpVEM==_LC)_CQBi_nnxDvw|%*?GYI^{f2YI+YoW%OaaFS6oDKoT$d4b~OyZjf?5oGdKoup%{0Z8}V9`$Gc7FdY{@53)Dv-{e-cAD25% zfa2Df-!;gK-ev2=f24q5|N@X%aNfMV>s1zTs9NsVueg)y?x4^59j$QR`xVeAW{8Ccr zild0;VGAXi&G8rD2WL37kS_;qK$=0prn>DmRo?%GRc?|hcNl+^W}pgzpNc)vTpPto zz#E*O|IWpPn9MJRN;A7%A3wF}JJY|I9+6a!^oucBAb81%GAMs>j0gKy$}5PQ-$eg* zjm<^>z8W_FAi(Lb8!!F)F{9(ek8k0RTZ<(CV;V=6E)7UXmNHs zD=6n_xI9-`F9)q~KJlLx=Q$shKak$b&G2seEJRnT4cZ~|=75J6;;zx{e9gCzsvxh0 zxWL4e)a>%^02h()nAPlBy8c?qK#F5f{7q#z2KhJe+ZQ;7b5m_?I13>4V3wY@ABIBZ zR@@!@q#XJAxbuMv9Zyq;{zIh-0NINO0153G9wWv?4M=7o$pc8o(FEir_K7YD*lBT+ zIE+77yUuWtrDdKHpM3a>vj_4R`C+jQ6TCC^A?-PZCjm2}B_un50*D3rkTy^9E0KcJ zywK=VOLe_j{RaUi1%JG>2_So&r{ z+a9`MTuT<5!NKiHVfs+O#S)?nv}%Ky+hK-g`^fLQ6n8|Cl)F{N?=Kl*=6;#D&Stzm zoJ$~hivDNhR^pcb=r$4f7H6#ZiO=QzD9IE%5}PzEHe+WDq3TacF(r{Xto73FSMQ#v zhk8$0l?MY8U5k#C<6`fgwv6A2oqtY&m{DN?8mK4P`9jQR?1@9>&H(OQ|8uz9Od19O za_88LJ&49WCF8)(&A(D5!>0hLm^zW@PO|It2GQ#L0LRO zIk0Xg8sMj@0?sB(+cz_RaoQ@n3uAkOk6EVx_<;Lws`rrbRPs>^GT3wG`|N-UnNced zC&G|T!nnyR`TH+aPl&j581q0+sNT>7PNZ@Y02l>ncSH=O_+niGj6bvNB9HFX+{^kbIW!=jG^sx>4E$OUAh}b^VhIvdhnGc&k}2@YbX7G2B`56VCo7 zLTI-i%-jAf@5Uimvh7JG3u|8oxPk=Us-O%jR3fK5l)H<+1gzXCKb>U6Y$f*3VsmHyyXAmWWRh0Htf?`d_KmRr`LF)B59F-tO7H z3+h3GLL2zI*8W@TSCmKDwk8|f|6BZ(C)yo4L^{+7XsCx1vgIcb+3+}m+}?b`_CgO% zJMQSQWG1wH3tE;ntKEjTbSO{lD+jNJQ&c<*1CPmP>;eWKLWpU!%GE%xY_|Q=lr!Vu z^6P?zDRx&Z+XB`)uw^C9RGN@ceD(g~ga@{R}q(?9QbpT#7?xRU_QN%OdAr=AI|g8)={Ig;jfMz3Sly@qd{H=ZxvDn=Qgb9f4?gN5*CxT^TzQOY>A6 zA!?L~5H*V{n~D&{)1hGrD)AgnL+Th&5)BWbC3vd1j!PfbKP+0w5soS?X~wroQVQRHrJE`guS6I9&mmTi(mOXu>9wP{v1f zW6;chcxkKn)o$qgx{4C5FP1pJSnmpRC8QweqlFkPpx5tIA2`INbB*52`4IXKUAT8< zeMDi>rA?n5JIQ?bzoO5J-m*q*v-H_FdF$zO-ts}|vunq#qtABa8=O85TfNQnx#XW# zPq#>)n;zRNeQwandFk`JJ8YRgf2b?iCi;B%4WZBByX4U4&~*dovkRjo^w}BM0)4(- z=+dX**NA-K@=xy$LZ7q)`j$R~1k5_4T>6&%6d&OE0BbbPV!Dn@D)1^8Dg&=hh|M^W zz3l3lM41U*&fJdcq2h#{B%TSU{gPr|lDl*7mSa{b0WdU$GKuKjUE!%}=jA~Lmw~Ye zD_9j+(BdBONASrS@JX&?bfTz$njl*uUCxYsT!XY_z78O}vvuQnXJ z4E(=b_M@Gf>{BzZ?2Goss`i-F;C|EK)$tTzmAHMNmh92^)*Q<1LUVd0JY|H%c zYF)uL@xyyw6@K{1jye4Bqm={rVGl-2Cf^FM1jFa@uGc5-=JLZnTyMr_hf>Z?^%$RO z{zW~eWEki*R)K%;F(eO(*CZ;-KASrg^FI-+B#qD+`R<{#$Rn89lZbr{e$^);9RkTy z_JR!&$1so+Y$%GDXi=CFDTn`+N(zKQTrY&;c{K;_kMJBmuXJr*)2sBcCoDOy9VG#Z zr&>VCwsY9|=IDHl$d_y9u=9nO&)CZf8oq-*hrl<%swi)!hs>WDj!gsyov1nJ-eDbM zwODgdh_+x?I0rKh3&GRLqzRW2eN6?m^CV9u)BG4_0_RX{`4ITJDyZ~NV_>rDKGtyO zLv`K4omJhGHN$LRnQ4H6wr(PEif*D;oJ=ah&dTc(k#tw5iYsV0xp~=O|@lwi{6~qS@xel=Ma&X~Jq=a+?SLjj@{A+?$Sj3`ouR|xA zkO1>FvP|}dx#~$w=SnVTy{UALtj~i$%81lSf{Q5XlZ!thxDrzB0mu(&Wq7G| zrup3UnTU2K?8~|5c>>1@`4~OVUKgu@_aL@_4tana?@FwR+eNNU%Ni|V2O?3-B}DP% z=9j%DW|qUtUonhtz)C2~pk4vrzc0h_+!gR;^Ko-4;CI1bT-_$h74S||EMBz!&wv}w zMOXvdpO}#8XBfK?1N#|U9OnAp_087*mraMaVg3J8p5DJ|K5nk}7xwGcsM$&H?{bS_ z{a3c3TBjaYRXuTPrvH4);w4#JWUFTS9WR-FW@dWzskt-##hA-kMgxVSJ(0iu!}u@i z9fteONcx&;0!hPF@|2f(CZ++3grQ_#=hvb)k=eYRa^!q&cf7N{4 z9R4rVI~|t%>lT{{^N)r9iZRr*)E*1%0!AJ|SZ1+jovYKChiS&|$)q>rNoT%r^Xl!$ zU!r-^SqIXGG94fmihm_^nnlGtcH00ysdTvY;|AZOQV~q<-sG^~2`&n;F@gN8A7Axd z?8_H4>=ka^&`>U~Bf;(poxk1t0X!D5{~M0MC3P|@>~7eHx$N5hj9kpV8vEbT#Kw;v zNL+Nf=fS@LtVcWlINkHuSBs~6k{i&ZN_f>x_=E`$AOV{w+<1aMS5tm^4S*`CgunN- z`vPLbl=WTr8ImH=FT&C18Tq$tRl_leMOv_ATsXE1fbq4QiHzaszsetB7n7qQ;K^oG z^W!Cm6E~}TX8EkuYM+M1<{znw&3`J~{3SfhpFtV)PZb`doWdq>7nlq*>`q0j5U1`@ z(i8oD@lY(te!eGnB4do7UJQxvtuV7Ee*{vgJpcQ}#Z|5E`L4SenJUZPTeN^oBY0AL z_xD(=GWvG%&EK*lO9T~j&4B(uC-M0%GAexTbrsOI6i8PI8{Gsy6E1QS{_Q3Nm{9E| z>b;RZo+6L?B^yBOjV)}BbpqB1fh$XaP*($XO^GAahpzJVr1Cse}&wU z=$GIUk?3C|(Pv!eUh?-(9DCvu3sfJ&(dR11 zbfcS91W471LQm|Hk!#_e0VD=F*`J zZ^;f3x!erlCnP}7-=m*`m>={02}DyqzkvMr@xm^k*<Z5h;iNc`SJ+-@2ewFt#=0L-Nbu~g}~k{U}^NL<@YBi;d#j$N*6n!P1d_3U;?8J&qVS=TG;B5fD0D@C1zX;gxR;;f)at zLtF4P{3HC~f=%JFXXlMXAWrEIT0os_&#kV`REOC9BgVY~dKlNe@kRVRLCa&0PtRBW{UNHqgO}I1Q_Xeft7BRg z4DC7XXO-{FSANFUm#@xO{*|mgKr@}>KPk2^T|Q)dbKnuPU-B4JQHBok<}>)U=*7-Q zw}ro_D-prIxi1}#VUMrYZI>z7uhySHm!zDmaRt4-u3@+8k4^F_pg(5%oTc@4r{? z`|$lPyhq?;8HsHl3w;r8?*0r-blFYpas;wnrHcIZaJF&%wt7E}?`Ny`{=@Ko zvU07T;e`@B8!p3H9zkFmxVO@4x5!AJlt2-+!sz$MXG0>ix|i-mg>dH}id|dOwBl zm#g;?e7{(||7A4Z&r$C;@%=RQeg@yCsP{s?AFJM9IT-IpsQ26Wet>$P!S_9Ne!lOZ z-d{Qh?_d2@`hFYVKTz-I@ck|IejwjpR_|{Witf>AFSRl=KJ32{V=|dRPUPtc;8OF-_Q4tpA$SRK}2%`G%j)eI5#t)#I#m9ee(Fl*z zAOSQ(o*xw{y@qp@+&x!s>CBTZtAN&99?g?ZSfIBI0WWJ$Q|q;Jpk?e`l9KffS-IMWOBq;pHjq#u?iU3?LA`D5~=^JuOqKP68(eN|0*O`dex zrA_(;dD7{NY0~HAN#EH@Uz#VKG+@f#lqa3OpCEE)_56zP0ap5kJn08o=}w+>YTpLF&-0`oWTo!{mT4Y?--E661M;Mgw$hKvlOD9vr{qZ= zW2K*#C;bpB{ro)Xhg#{2^Q0eUrQez-{ctP2D^L0nR{BeM(#Klq|H_kIVxeq zBn2?dq6xfkHPN=R{C*y(oeL~Ps@`Y zveIYgNiVn37vxEwXr*(lCtT(q*ET-zD-=I?_(9^}XLC2~YAd;ysgy_fm#Mq7l0!ct zt{(UL?jM5P#Z==(*v*Tsdz4FfWqe)%+#%C2)25us-JkSxN0qSgG5b-lyufj-8|AUl zS>frF^3Uk<^(^moyezAVx#h6+<@ymHzPxCGTX3Vuh=jaT;0aWH(j*TuQFPn2OY=e&luR5>w5ncI-c8p&Kz4l22NmJhagAHO(ddMx;!L6ZU% zFOT27AC;)OY6{!--Hw%cFJWa*%6%KS*;Lnw_`3*pqwtzbUt(L@xL14bcyiEK9{4aW zNrw~N9Re<*;_z%kWF+vEMwc=5jki_sV=Aqx0!K-PY3+pFmq%aI|THvHIDb` zaZIs_*d!ApjzGyV0Gl52j93EAWR^O{>(7qn3KdTY9dK} z{c-fQv}%+G1=7LBGW-0-K>Cx=ieQcKl3Dr2Q21vQDpO|LNkl^`A(g+FjRrWwn|Me= z9t1ixjljO12e0t`!6j|YtARd^TW?|gK-_{zo%Yy9iEq$g_XF?Aw&QG%NMVpYp8S!VW>pVy0TdMC#Pj>+F(=i^Vd0-1%*-=f|O9_?JP}%J`SMWQXmLA>)@34Z(J+wH|6 z{Vj~&LXc7i89dg>3p4vC?O&vGx)mhc?S(Q~h+rTAw$`~Hi zYJPoy32x0VBFP#4F}yh9MRQ(LOA=mBzENDMWTP>Go6*{LNPL7s`^3hS( zV_sKo-vzuNon`|N0-T?G2`(KkTJ|@y_Ucv?JWVWz?7_>cJmauq4wXg)p?7Xs{JCCN z*mpjJzZ&^%z2hhjQz|IEvGfj9>1{`qau0xPfto{n7vB4ceeln@^`q^KoGy*%cK9y) zJQz8>#<=HPHai|^w3>H3uG#E(1QxK^md69TltU$64n_EfaQhngbH4EiKAIVia$qCX zh6XUFZCTySYa73*M`S!aUC1uu;f!2_Tl(TfFCyX=wIpjj;COT+zdatMG9F!mgq-mR zHk$FEqKEOozS&UD4ClFfvc?49O8d^|A8>3q6!N(A%l$WNTu$Ci2_Bp)d}tfzWBiKF z%ahJNLoN}&qWL=A=x9u1T}T)Ee9THWW6!)u7r&!Bt#o{rxoX?zAIj4{#|-7gKEFYy zn{i;<>=Dw%KL3wA3cHpX59ydU8*Zl3cFO( zS(vip+#gssO10-b-`b3GtWSb!tochhkB@0TKtAEh$&gFYMBl<;s)=*EzNGPp@vaOV za1WydAlUQ21nUrl{uv^mq#74;G2K`05rU7?I)J_$N0d=-8gav%A#Z$c^I}zfD69Si z>m6M0DiV<=#lzzoobKk zt8eKw_<&}TiA7}2Yy!R`u^9obv!Z=BXT=pWcp;xEL_IdRM`*b_Stxbk=2D0eX>xoQ zN`(KwU=}(>>s_n_P?Phw_mmXp#)~4HT`x%eZfp-Is2TXkgZtXh5CxeOPo=rI=mRdk zw+psMufN~L18w=lgW;R3zZUgty!)13g%9YA+t}<(W4ugiMo=0oS)ARVTtt%cTt%)A zcz`r9L()Q{;=Gvo?(%iW8)}*MJE_+w!$~k1175ogUl#*#X}b6>U~^B-Rt=;J4q67z z-gXUVQsRs89D<9TUSQ`ezowK+?sG9zqA{fGION@Yh^G<-N3YOJ2R@+rUjGuCUf8sW zsm54p=1?E3H_dB$i4Gl?&h(G?=>4mVuiLGVrk~yt;FHQZ=_iSo0AEsykQ7A$hl=id z6-8m*uXQPkJ#k_i2j~U(Ed8lNy9Td60AAgIQD+Q}SJgSvK%$GI4WjEKZh_!T52Hk!Wnnhu?+ZJu^zPBT&2ZG-2V{ zj34n_kNWLyMl_xiZ8C-my?sD$&>&nepC91~h42#R>@_aJ*)wPFcND@E{ixMg;XAb< zgYN|ZBxDS^=WZU~sTbVUp(erWh&GF# zZh&*uPT-3Re(&NYjP?Kylza7Xy{kj}W`0Zug4_*|LDwU7Um2iDKl|7j7$~lWxY0w| zom0+OQC5Y~ao>R5FHGYb9=2~D_T4m$NcFf+-sKwV-$Z{S8`m(3pi9(`5j1&U6&@2n#7l-Iz zxko5bo@wM{gRs^M77ie*us&3kU>r-a_LlU27xq1O>NySnpt>27y*kpH`A54;Hv^2R z_@Ta~*l*=Jlsb=tNO_b6$G7=RT@J`&n14gj(k-(wZcECDs zc$$nWAj1%a5U>Rk26v%g_%Mu!(^CbSWIP@W9foY<-UIIoLpsVL>Sl8$g8C_>i_SJ| zC6SwT$#rx*dk$z^^Q)(ZDUNH#f%MMD=DYkmSFb)wQ!5-0K#&Lj zB%`P9!5($+#wNol6R#rGDAc-L*2!n{^*(*a=IX7>Q!m+BF230g7&vaahQ~jGwe>$a zZvDpX@e}S}i4zlxK(C8>{ho&R!maD))7n!RtM_8xa7bj#)8f}1UG2OIahZI9>kp=d z`&jmKvB#3(COt7_J74*CM22HH^TibNlg|5$oD?rguQy9Z$TLybFVRo#cN_rj0N;KZ^LBa>QP5ACRBZll$aclvX-G#`Z2&{#EF| zAfrbiV?#q3dgJM4Z(NMLU@-Co1z-XSi(B{4qdh-|{$#0~gb-73ZDjuoxvVUZ4_*@Y3fLoC1Fj zXpkYvNNsUGGGrn}Qi}m!m%V6Di|(jP4_x-vA-M2$q#?wpS}SA$j_aICaWXzWwodFu zEr*c_75($w>|l7Z}>;9^a%A2 zv<7Bm!r!R)hujcpD1Mo%GLIn~0uV5e0f3>Ilqjh0V0NPgzfpz`WbJ8F10vR#@*iH2 zTiy@Aox4$fc6;vpLXEEZ=up;}B)p(n*kB;%a(QqWD4~2ulbD7qfSNfch+d})Es!p> zXo9yax={M+Z}2f3pNdJxf=U1N9GBH#^k%>%LaaNUOQjYY?`EGL^A(dchATGqe*#WU z35tZtIZ_=qOrBJXh8z49#Aa^X*;ZSAB1q^&QVPG$=mQ{2=uwGxd-f>I<8s?m%Zr#fpHbE{g;BTIPZjpH#tTeV5{U2L1OLD?F&q3 zmXYE9h+l11LY~9yV#r0lfx2!VBhKfgh^1Le2gZC%5e{V_-FS6aJd< z3Az;Y?3xRvLI(!F;dR?H_9SihEN|yrl$&B`k1^z~j9zhMAkl04z)YcaKQN$aJp>4y z3wY2!UNj%U$w(8TvC7U1RuFI?*qJ$Y2=F5Ng!5%0J7ZB&uk&4^#rF5N;FEa_kLKSN zUOH$$YrXv4Cpb3gN2D#3RU1EAf@%@RDOJ(MqzvEbg-eSo<# z`p!wQMcsO~AePsQa?SJ85eoC1Bz2iNQw7=n!&B9aVVEM!7%PH;GZTaUKL_Qu$Ge!T z{LWkW4nzbZSgy%OdejX1hrYHO$!-vP5&Qv;hS3@zk{)BC z7x!8Au-x{5qf+!S1RRBdqiVE`{vuSqlEH8TXrqG9h(mFmODscEo}rpgqG49**`6ax2Rhzj;`TL2>bZcP6Su+wbsBi zaZ+?9#>sG&+QP`nq{~?<3%b`19a2E{*dw_6FdQ$3`>S{r`dSa-8cM>?Sq};&FNWu+ z7nGc~EQjBc!2+MapSsUoc%950xyKPYp-@OKy5+;O<1Dw%Ka7hWaA7t`L;wRA`Lc5gv;dAn=`amPbmS!GY3Rf${Nx2 z-tL>tDwR6{#a3;_GdJ@(GcVwUCoa2ZVSJvHZtnjwdiAWVSN>aAF@+tjRCw1b73QOo zXL9joa0dEA9>}ioJ)S^du#ICif5|^D7lU>s_@~TkG=c@J*CnxEgO(&_Y{DY31()00 zlP9NJdXdkfD(Z)ZT>?qzko4s_vKAc9u3%s2tLST`XNgTDwCS-x?@iKqAV3tvwDa~e zu3i?7yg}iT5^yFRiY96uZUt(Jkf>jNSyg{0pU{!G7J;V&G$Njg>; zZ7FVJ2X*JUqU}G;bp9rl1|&2wk3z!7&ZQY71n}MQKD(V~zmJtPU}PoDHeLI}AvzuT z^XhG7R(Z-w=AY5qc!o}s7OSx34JDtyfRABy=o+Eke9hhb8@C$xmabDNm^q4bAn_FP z;@HVph0cJGb@`r%afXa1%GYzZuZ&F{SqW9Ivg~PJ>n!w$Fnak76%-j6bGxQ5qa2EjA>rKkBt{|nIZ9zb zUqD1LCANX%X1XCG7dsh~;0#}7Y|6JPV<+Qc*E2?=OJh}+o@Y}rb_v=mm|h5~?4A*H zr?nB?sVaMEk)NL0U>p!%Le2twBxJRK3`#JrHdG<;M9+nGQqv2uqYvVTt;i;v1$5q( z8lvZN_67DhHYW|83qNz!sc%u8frN9)CL;0gBShOKwTjb`t*Tc-VoUd_76}e8A!?BX z$V8}3I6r{qrR1oJ96ktMNtWiPoK2q&u(%*tQ_02=gyNbzQE)Kgl5o&Q>?eiM;+dkw zQ%8uNS)7Ns{C61QA_gfl5>Ac5qt_#d2S#Jr5*fMlU`=P!H8+ufT%}xZhOSF~W}3F? zTBGQp9xPfQz-w-zmYSix&4GaaLQq5Vs`s=)&_KEw5Iimj?ENf|E9pme=@U*VKp-Vt zGlIRxu+IVc!J`F%(`jC04BZNw{HjFYc9Dlk+26hfWW&ee_bz9c;&KMFs$shl+i;54 z(^O&16nH5#%K$_h$sQPXbj1$Plc?-f)?zm*;JI-Ffvjgk9%y(yZkUi`u zx&0cfe&;*bZ$W zX5_Kx*44Lj?x--+i)a2Uk7r83P6Zf<(Boimodv>lD;B5Kj58W`ceV2sCrYaKXSf(I zx)bmBNY?*cW+J5@OhjJQk#wS%YL*`VAMM9tu!6z*q3pr$qq{jc?k&8NIF@c;U~!+B z1o)QA$8zP&8}oNCe`W)Lx&X*Q>16}zr`E_T zd$2sg2=CmZJeyOSk+(>9zNLq7-86P`h*WYwfbv%J6iI=a0%_DM=Q60UtAq=!k69;S@~ZsGgUB8Lg;K-UpSsnt^8VReWg+EUCz z1kA&O18L-`!Z#{zyq8@LAz+Xi92Fl#tosh$$A1WD+e^7=~^1*;{ko_Eq zlnio$y&ndrwH9;tEo&knLVBw#OI^M*QhFlMuXN=Q@F3@mv_KY_!QB$g19J4JVgPu> z@2~@@;nh=&qs5u%|0RjY^|?wq2dr_GTrI#ROYUMG*e5bZaOd;KIim*dhgtn|-WDFn z4sAVOYa%@Vb-s3qKo7llJHQ4~weMXOe)~1~TKHGQ)VlvQzINB@ufx|;g!1e2wLpgy z-)g>Ay^Z;snEz|?wZCps{zCuX@wHOW^_KWr0(rK;*Op`G{@3{0#NSwa?Iis1{~KTX z+1-QkwdCC-B8#t`L@S!wCNO->D|xc{+JVTn4SbEfga1fxe2l!td%&~gwYuMM(kz78 zX8c~WuvZeB2OAZno*UDOU~~K|zM!{;Qbg} zZc7l#ug~8+zm?)!&EHD4F@GKNe@*`O(Yu;lKxTcSJ$-IWI_2D-08+R}0t0vDg^J(H4F=P&hy2V|@b zpYFgXn9d$Q%Q!~-8Xw50(8uny+s7XCZ4~;Hz%NWjRQ#t5$1nR1%aQaQRwghE7})U3 zzIRikR_7j;DYK_5-$SJB1|D5`x1UIr{UO9QDC@m^FJz!tsu6H7phJbU)KZA$DOkTS zgsKuQ3bhnuaSGNJaywOeDbtOht4_~~pgU6wx{aXqNL(MN1s0W{OEr`duPyA(w1nMl zK>k3X*X@Y7VUn3T?>*=;SE9xF8~zr3>xw>wIGV}$kGztP@#DE#r}G=rn1^%?d$642 zi|TZy8CealZh6)|$UI2PJn)hxv6+*Ah_4(Cxas5SVXTXf;kRHLFtbkc!81KJZ=cwV zQMl(};+Yt{WmjMiwE)qe<(`KV^!@_2?Bt#Yn3A5&T=l?<^?>{^eL`bb7%Mw21ED!G z1S6~3@WYO?zQnE?k*AXdrz4;;LIN?7fenpUsWV-FkD*EvTqNr@x&_9aPx+U^!S6m( z27yUyg!HJ{W19TsPBl4Hua!SvVN>SZY4&-xujXsuasDp%JlpiE<>s54@B@NKIeS;y z=h@6yoAK7$@m%+YJL_)w0=AAO!eH|8oq4efA`h5{>q&H`xa%^IFP&*m@-h&HLX(T5 zimZ>0>~CA@sWK@H{v?4?Oo}eaygf$1nfu z@EnrWwDwFsDC=Veo}IT99y8zUajpG1IdBEnW4XNA9k@xDP2yyhF8Ko`Te;gc+4LuJ ztcGG-9QGmj_r*U$Y1oJ3MQ!qCiELwW`H+?@%pjS$&iUHK{IIihph7Mp_Pk!I$VldO zJM)2tVui8LQ1XH#3!vrcmh#UJ74v<>a-|25m$h3%MmZ|0woH|=qgcyehk zCYLfPFDm}*QSJ|yBd!79{n_{3hyk3njZ7#;&ZF8ru=WLAAX);=S`1uarwFCZ`p z^5b7iOepyO>gf>S1X%o122W-l*yAeqji){Dhe4+5I_pn?2MQGS#M=&xEpyI;I^g^1#e&uJ5_=_BXYxz?M1Ry-S?hw&|qbC59;OCRPP+R&M23|GpN zxW>Bs5#=NXJo)JBc(EDJ82$ho(M(r-?HLO4$vZ5GNztH|-~g@V{YsYN%)VF7?Be{5 zk>kj(_>UZ@5NnxMg1_0EAAVRa4c2^_ zhX(s}w*N8>Qr2yM9Np)`@hJQe@Iu|Sxf?gXf{CqCgYb-8k_cy1GNehjt8oC%Ji$jX zGeu_v0K(JgmQGxvcNTPijFG8uQXd(6Bq$Odl44Um^#FGw3{m zg;o|t|7tXm@fFK#pJQoMuW*f<;oAg7*#mfd~J zDOyZTrNMG|>@2ONu4Kt$O6tHC7iHCR2&Z)X7kIO+i!A|H4B^J9t4~ZM0Cbu_)KK?5tG+Y%vo(6{bBY~^uZWdhe91Sb$WM%Q9U))N_R4h%~ zAKk9En(b3SYwd;uc)Y0lCQ;oAovF)3j7fXDrLHS(#CPo=>D>5dq{WM7XId3KX|*-J zy=)txl(4wiwLlLz0~LfQ+HB?PL_VNBWKM`wbEJFfhffjl2ZkAS09v_Nb%LL8!|h3K zy(L9HqU^?(G-Um9eJ1-2P$vi>;Os+x6J_2F0aeb7yG0H(e1Kr^pW$Ej`gXkLTd+C! zA0VU133Qydqqg8pi3`a52<6P!Wi23{AiDBF$fBG8)d zSZQc5K7N=~QFJhWC{gdc-vF{x^p9T1L%QRGA^edQtE`=PAa1nyYx~*BIY%BAa`m{A zBImCSpZ{98Z1wyie1~IxMXDC!>qA7AJ_z9)3o(%$NOyueltb5J9IwwLj#s(--&t{9 zt^mk>aH?dVmz?wenEMv^sH$u48AxD2bVfyp*2thygU?I@8bs<0OyGt)PJz}ncqF1iK!hk>9q~2C_!vaV@Q{4}|K4Yx zIWq}}?bq-3o!<{~=IqznYp=ET+H0@9HfYU`9&wT=Swu95(U*$?9w!oEiVg1uYv{>) zMrCt9NBbs904e(^|4lNq>_%J7bmn22!h^C)z28SV^C>^YFU@p*Q}y$&vRg40KXqUA zD1F(KKklXHq9pK`sD_}ER#-SL$#aMH^$F|bV~r#DY^9Kmv{S)-7K~=kKS5^C$lsC9 z-^&l7wRirMYaQj2oXeFQU>kP1V&`jCAw)WTTW@`Fh;SlzZlor_?Eq>21@!NsMzaf4d>qY;M8ox#9 z{6~e~c{0DymA)ZK=O~k7Ba7V;zd%%v@EkCy5m3~Kx7dSLF zx|RA~Cq9z@3pXgdrqK4+pMwJ3&O#9}|MWq(+36vjyd7dt6Q+?^wPY*iDeCLsoQiVZlE4F)`1*{IH3PufxMO6Awjg z-xv>-DDuzXVY(JEnZAGCzXb+(&sT*5%Y=oFZgTCdk^ymsm$&h}4_1=|IeD&@a0lkm-HRJ8_^9{geBySb>UpU3*FK z!`II1D_NdHjd1Eb<`3*FM``OEU`ihU6EarG_XePZ59y|o<)KP+vJhPAxCZAch2g-% zS7I$Y1Dl#x;*)uXOXpHgo;bGV;mM|A%=$d6&lV?GTviMD?RlB?&mLf>UwgS#5!ioA z3&CqePywKtyjA}J?tnPtbT@=?oLFnyfNjnmULMKw2Gk;56%<=HF09`co z&81)iKpfI>G!-_gSIhK`;_BI$*;(ubmg^f5W#g2Q9@$epwc}X`@PF}X+q zTHuqICUwEXI z1>ga4Wx`c66*{{(N`PgXaQ+2>^SGCRBa$vH?9rC&7aOW0^{+_g$Dr^G;|!Fm_23*R9cQ86Ey58JI@4ZTP|@|BrZyYjq_`^M z={n&D&a=1l$7P#XZr8UBL3vO&E}-Y}UZ8&#kft^T+{--d+Ss=j&&F1==G+$yJHsKN z<-`jiwMwxHP6|mUbsp(P?b%Ee?B>2moa>=|I5vr~#W@fuba-M@=OKMK8trmpsaU_R zQws+uVjOW%7NU1xt^ItcIoVSV6w3af53`43?dNWI3LjAy>R#J*+Tr9SRJ8i_opuRr z+K;pBnLMp$vmXPbLQe$aWzWJH?2jhddjZg5!$nUD9ayrIp(& zb30P6Am+nu_%7Eb;-oBMu-S;l%g#&xjs{!5i)iZrhT69vZ+Nj++wvh~8O%TNWgK8( zCG;Atza=Shbgu-@;3Q}GWb;5TjvPrO8GGfy6IV5ALix{F9xP^T7)6u62poI%2YUUHZD2&4-`BR%ad!R8>oH3{aejN7x z^0&;7YkS6(d)J?hLlc~&zH?CDsYUv_n>HY7b-QusiRkoM_*6bGtHz! z1$b5Z|MwbS;H48)iDf<3*V1Z`_Up>tN5r_n7VPCTUVqO(N9_$lQ?hflh$tn(CSXF9 z5u3KUQo0_p?5Kx_ z4_c1FTXdv6Qu?^Ey%4WWji5t?*EuF$U9SneLZz63qoLCVT-@*LAFQkVT%?{kV*6D6E@ZGm{ z@7jLu##MaXtMApfYJ)!48JXYF#H!U?mod-T>TPZicC#X7U&TH@?CiEl3~lMxh&iRR z0<=H}vAAho#W|b+jcXxYgaGyyZkI;K*CDo+*AsvFqfkBQ%xkO|WEmZc0IHFEq@P1< z^cwU}llDA(7mw&K-cbI4Pn73cWHkoCVYrc-20JxoETGmMwyE)MAIT}+3|bLqZfT%T zioidNP)aM~E_0iibFp#BRLjaJ=8Z`HD!?xZNyd{Q%J`2!*!Yh70`8?}N&1NA?MTxH z!m~gt5~P8(0}fb9j*FAyOnsw2E5l>;SB&rMfxy0g3`cMl>r*2r_DVA7sV{pP z<0~*MQEKh8vHQfS4WH6J@LPNY_=(C+Q}~!y!x4+Z$x=i;E)exL98{T~xEaqoa%Vy3BpFkm7Ih^>+ndC-Q)1 zvb5r6p(o}g(Fm191Khm&KK3eqHYx)*=NTJwEpGM#x5nuYn|r82|G*dVSaco9FTOyO zBp+8b^|c|5MDl+MqzZnRh>v{Oj}l^9%K1D@q{bic ztyelk!#u!}tw-7Od05X}r~r*ou><(zdH4-Mi~+D!pP?KH*VE*icIBvF4ethcZ?P|6YL?@H`a^ta-)C$~YH_rkogt3GKIz`4wOCosXIyKwn}X?JA5;Y86I@(z(9( z{dKZbS}s%nkzxaj!M)+v=XG5>$BFbgn$9`d6*R^0JQb|>0o?l;SmpGEu?2^OrQ;ONvM6Fq#13wa`}7f2JQ5ai;U zwTEyV!H>TH#ZmM&@o{Z|Vcd#6bhFzU5{;b@5%6oX!?XOJOn7Dqc$&FS0S0V`#G~6^ z2fub!Jiv;B1u*w0aE4q1KS87==a?_4$HYrc!IS(8C|(Eg*<4}-9MdEmijEI6?(U_+ zP7PvQLsAECJbJb=EOiR+&oRV&9bm<pXK3kmvN~$YU+1v{VOF# znrG!N3|7xtF<-r9rmOiz>G3L^P!LBdUGYa*Bv(gsB3KGs^RY-^EG6TU)=<{5w&vmR+)lK;Lh-3eeF^{7=#=@(< z>R~$n+0LO^{A>YGf`z2Vy65E`(w%T#PP%qMctyt4odt%RyN7g#m5LFZ3Xiw3{ZGU87a;g6-*qQez#;Nv* z<8)x5YQ2v2k)E>q&F|>9)Q6X$b({@q!Z+*i&^&&loxJhS_^htMWB4nwOdWMF$hQ33;w)N9D5%xU-40l>f32xIu>W<`gjtwFqH{s$516B4pbH zp7C^}oVWU@SDA+I9?N>;Ubm`O?QpB;1m+I6c}kAs!^;b86G0)mW}LHx{-S|C`kAoz za~uq&;P0hb`M$oN{txW^JoVR^{d~DW_A|R)VrU*pQjsl-RQDLK$~Y+5`OvCsNaPb{LBke`xSK?mrtda+ihWlz@KP(fbO23#Bm`}~0WEegsU(e@x-$ccS zVtO=C&@|a`j{#1lR_LgNQI8PcaxSZ5dDX6>C*orvtI_vl*z@|zw-WhKzx#0ODAq5} zGvtbO!>vyBtK?2{kN03#mb zo^}z>hV!C=o$wI9dBjhow26LjyhlA*$BOl2-~}&It%>JF7;3?ygOOY4;%?5fcDOng zpdRq)Di)87`7yhv*!8B(Y~F9RP5joG`Qyk>KSe06^I4=+a`@w1r>OB|{tDy=-C6qM zEu_1sl9}y7X5veyLyUuTUW@~?dDPjY%c3O_ObMD?XvjJ3b-7&=L4~5j67HmN6Uf7^ zMm_?rRr3}=5_)h8p~iTuKwU;yD854fQ0XgVda51iz{?x?HoP=IO=W%Nc9*Dco>^bX zM%0>HVL#5t@Ysc2qY2Ms0*{AyZ;|QPyD&GBL7i;H&z&)BUc!uz*X`!! za?S17&x0BFs^btr@>BzJq`Pr4CrG^pP`CA$Q6zENUf-<6K10;HiHKYu?;moeCNL(o zR=;mV&AB9_S?E5=0viFiXFzP7VKckl3=(=PtE6!qRW4_UYYaeP7fYxe$P9iRU=lt1 zlc*Nsl~~B^(v)vIU&_5iY@U`=t^Qo;%5cwv&m!kvOgg~ z?GXry_}t#s=0*;Z9Ti2PrLlQTX1Ewfdf1L=1+|n)NY9J$D@rx#6tq zpYcbWXx%Qt^T|lWh(2udbq@5rV=MQ7ELY1vx~))KX*?<~m4GUl4q#q624@;s-dDqxH?5Am?-c8Q1OfFv6a_I%5ckK5Z; zm~nT*V<-+(%(GO?dVT;ZR?hQH1+B;+|IPfeYDq+DgDrPH1a&ez2ezYYA(g^&O2o31 z)XA3)ykK!G59~w4i9mPe6>F>~=|vOaITd0X0k^{N??L6P|9hZpR(g#y4_S?87hxs@ zK9OQXQs#c=;nq=@FQotBaukI~G4E}txf`R9Z21&IHGJKGkPKrWlszKMwy$lUH&BCM z-vo+*ZLp^X3sjaLZGf5Za2)uc8Ask{Xa|sKOGD!mM)y{ld0>Orom_zvta1@r(LgD@1*k zvXZfXLLBn3#*0Vy!FdAn&>N0`2VqB?h6Yk8G;ox5MAA*OOQ=<+3n zR&#wpeDR-ceJ;+STti$dUpTzS>vjvG%!6X*!QdxQvwfeb7oC}k+$t86qKERP7EN)b z-fLY0p8g8h#^6w2!6G@DLTtW1zL*~s0 z7e`dG#!ebnsO3fNs}Sg8r<}wYCI3YHkuqfE_au>+GlCF~zeb2&>P3Ct3rr_F1mcDc zMZH0~%e;#bG3_!(MQ4dU{}i3&eUU+D$AVS=FVh)YFkZRKq%$QeZTEUe{|IqkPZsY) z37m-g!&r@J-m%dYal=Q^Ra$?jrAf--jk8EF$-D_TgNc_E!_Uy}EB=BcvOLIX7&DAo zv9hCIW2)jy0SVO7*$AvdS4>DpVh&PLYLuqmk?NlX4>+w(7N#EoMS$4uSNmj31@vk7 zVM?mQCu^Sn5I+=aEMFGGUkekUG(kh)v z?gBf=07?gnn6*{;-x5EHWwPp4b;uf3OW91Q>VCtj8(^fp_hsGUEIhk!{Gi697d5`Z zh$V0#uEf5m3Tye6ulD0&HTl@+N$&gK&&*l$6M5Rk!shgx8 z3BAB59c%5G2^#uOxK0XwQhI{wkG1av|68pdH@cX9K5Bif<~J@%`9NQyKk|IeYf)E< z^ICU!$_3h72J3_nDxU)(6rOe#99`P+7gPKUD0tK00yCpixWh13xgg#-iM075YHa(N z^zayHHe}H)<{`OUgFdZp2dTXfa_(G@m>wDW2=eL3ftgb_NKzt5_P)6^kaZbomUbryg z7nXWXVa!5)pb%z%BWJ#p%L4_L(|o85DkZ4gW>CR2F8#6W>t8WGsB@M81o|XmvG$d| zT-1f(fKxEUedhX-hATW4{!w4ves=6F!;AXv&rTP@|K1sxtLaMPF7u)F)L@mc1S2LxOq`2-zyh(dXVK+qJb)kr@MvlWMp=O|<0 zz=7PZ%3dd{@`}Et{nGR}*Z~V8O^c9Asy#J790SN&uBW0V)}8acY|r}@dq40~*=^m%KZI|EWzSalvG5BQ2IJyN zjzS&F^@W#}*Ja_QB z;K#50IIkn!w5LFPif%fD9fqIdQQ)4x5=g@uNX>c)evSkSus0;OcpVAA!kG@9x}8E! zf_gp1^EX<&=*P$yXWnY^pX!(58@5am^g5=3mT(?InLXi6i1p_AOU-f$Z|QQ9*X-+X z)~)I%pH*C&MNiAwNFRLGW+5zt&pasquhG*7X9;@pU7bZw7Yxayrw?vEYI>R`Hja)= zPcw1XjLBz7#4YBdpA3YU4`bmeJX!lv;@)K7G*aGCHg=yGe+BkT9`KqQEt|U)mu|rD z)mG}M%bDuXw+HCcEYAlUBciY&&0TBHWdRRk^(p|?Xn0?O+d#W z?f0S=%myX>r_$c(ZrlL`2nFge_tt_QoBP3>ncl#%^sVfAjYm-z_*>yKO`npklSf%k z*L8B=@No510CpQZ(1E1>mkm$XFj-Ib_w;(y-Oz|cj6`aMs1tf1rkt=J>q(%nUb?zj z{mq64{9vtRFTxx-5HT%Lf$+ge7JhpwEU)n8GpBQhi!FewDInktxYqdFPD?I`b;+@} z9FD&+UWK5cubX$}KBVc~E`&*V76gjlMehnN?9!I(<2f*QBP~|kYZ8~?ZNPR9e32%f z1+uDN=jytvsTaPe;T(PYwWAN;Hk8z?b~m3X+Xc3z3D@r!G#c>XA^k*WLT-gi{m^qu zw7D}1>vxUN#&)a2VKhAW&I_n zALCeQE$$5@a4aeKn^%a%sWjxn?j?iiw%{d?(?Jw3m=54ph8K-59au)tCf_NhjcTY) zoCf|!%pH8&1xWp{mDOB_Eiq^98E82H>MN=nkOmlM+jL~AUteU*{Shd{%%TnKGm9Tt zxa&q&DX8P?D~xB};KB-Xln1jBCo4sP{tECPp`hWwZ#*;8BEL%X*?90KyWGVWf&aX# z`;OdcF$R&SdpJx(4)>@`o8@UwlM^q?=j=gFVWwgB=Ips(hd{6IZ`PqsXXqCb7i zlezcwQLbV}U;T&+<+fKpnxO{t(T@&(w)dm6&wjjeO=dsFd|f{l_T7*17+N>?^A>TQVi%ADGD^&HaZZPxp1xn5#INjHcKNk}<;6iIKU6247YH$^WJf!yfNcWb z7GTfjp0k7Di8I5qug4k^G>%DVac2;7RM5Jgo3o8LBFNdMgRQ0aAC{X7c#d14Xb*hc zR_ZSt#BnP}tY5BQ7h`=}>%};h@W_D-z6hrKJzc>PcdXEZ6- zNfUf5x`^aobqLx8lqIM_RZT~2*EQ!Y6_-QFKkB7T(|{*laJUyMl3YWFX5Z9TzImDX zZa7>%e`db1%vU6|lAfMrHoZjInAkt+B`%gr>m~4WgI@9#5@4L<_L3#P-r_ghV;90b zc61!$Mj99KA^kZS;u@l%PJXB{!&`H^k_UcP(6qCJrk$0c$kPRPq9lJb^NzGtytPHz zg_aDIdztO(r9-`Rs+Tx`!0d;`R{+g@EPq{V8jI>M{A8ntO|?0ZJcb_@6&%27%=rZU z356*@n8c_6aTzQuCJEzvJ1pK}ucaO|^s1xNgG}>@pqG{_flth9b!a<#UbW|ILOzIK zWhihj+s|fsT<<>NGM4HK3*4Yk-a^0=^$_6a` z-}Ikd1gxf-kCigjR0i$mfmw!+g(u5TqNa=i0cxfL6PAXUwG$}K)N(Sm9VQT(V1KMx zAnm@m!rYgQS@KMQ_3 z7X-soE((UHT@s%CopPv)AyZu}!!+(M59fuJ91yVsZj-)A^8RGF9f=#1;e*7hy5W9= zO$iYm;@1UrYzwktA@5eMruWi3-Xd9<_~2XS_~1ZHg}5^km&oGwW%w^u^H9t@UJ6-R zhSXWWdyD3#P@)8AtK+lgr+j_C(WCEnpJj8iSfTXKsC z@y^=K!R7c=lmj22ycMXHa}B7i$av}%Qm|u#eV#(TpqQI*mpLeg9jG)IhzRwW@>z^G z@?k;@;%p7FV~HR_9~7c$Kdxi00m#}ioLLY1v?YfG0xz-@UkEpxJRy$k=xI~rn}rIf z%PL@o4Vh!V+>Mjk>%i8~;(@ZtGTyB&s(qkfIiO7pH*?5EffJ{;krm5MZ2LzO|8tof z3(%)!IjfX)iSgQuJlnsJO;DE<1~pC*eHqhKAYvNRoWsQ;zig6N%0&JxDHC*D$9)z*^>WZK7FpAvut)_3G<+fMH@mnj zJngbzc=qIAc)=7BoF7De1!+)2j+t1NUEg(wX(v0j4He_zICf4!{j|G4`d~2gg3v{R zB0`Apivyi3_Crt6prcekj?OagNG+|D=efdj=AjSO!avXSoD;TU5;XlYnwn0a_#j~e zCUDDih7`dy27=xJWjQxV7J&m8fTRXogB)NOT$uWFK^@=|gIkW@*pDzu%ly0JP7XG$Lh6KL^08HoQ{%#Ot5%`yI5k`a8tYh zk)*DnqTUHsy&hvdrbaPe0j=V(t4p76vwLwD^OO`0Vfy%#uqKal_Q+Nq!4^(n1ZsiEc|Q1sbbt@Ik2#;L}L1G8@n&)B{6S)>5@sZJsvd|=L*YW<%IP1vHT>l{=nLUF&ORv zTTi?U>GeVFh5}%3*vtzi5`RwVy^|UF9ym>+o3grvCJs~l6y~ATn1%On9r2L^56l_&~4M@F(QIkq6_h zJ)dUg>twzx|8jdiubIy=jQ!2@FSqAQO=d%-^SIB)bDXt#=B6NoQBhfVMoAgm05MP+ z1(SxH6;c)nQN^h=JOkWaLl!q9Mdi4cigdjRh3H?p!DM_2qria-#BKn!_v?UYv&s%?tV|)FQ`jL<^y1Ap{4rgqTpPHJxF< z%6N4q{J~}D5zbmr>!7zVEX*(yVrqcZROK*jC5b)AX6*Y@@*z8OKJal`jwxLxaku$V z6fe_beO|iL?_!A+IVjx_Vt!Q@!XFNV7*P9=Yh?kGXWaFh!)fLH~BO|)bGq#N<8KlqE2%^D% z>2*&2>7Ur*395a_-ucA-?1HO7;?1aB?Wf6E(ng2Wqrf1Yr^xjs>@ZXjFlS2pysB5x zBUl9%MBWolPpSG8JQ)8Ac~C{N@LO0x_u*}vVaLsGAKI*SehK_-+T*Dz&K@D=%9lj^ zhPbqTsIZPUL%j&g;%El=w1m84S?Z4gKbb4vLI7yYy`mr83Y8s5^(&26fv@>@+X1?s z`#gd0b#54EhQl~BqJ9_pywMJka&eRpi9j(Tv_!JvR3a2-M$A_*EaYt zOoJwnaWAEi!@>PUK5AXgcmc@-D;E)j}P5Q~pXLot_m!KJchK-CQM=eS`RzD*7H-02!fVB7ZWhZ3;z=eIh)chjA zl~^GvPib?n2Uy*h6){U=LjV26kQd@&djV>~xB})cAhO-B5b3x2Yqf8!_uUP`T^4e< zgVkrnZ&Y~ds~pc$5MAEW1iCC|MzxKH;pNz5(7oMWB>G2XIqetzUDTJVWPNJ?n3Ix- zh$`c-k0&Wh}hE(jhSL#AU#Yd7_O9kjNxL+9|!R4|u@yFy=C{6?m`fbSa;Y zm=BQ$8#(|KfOmLD*nsbCpUN>AU%?MHOWWs8K%!hH&ca&JFAv0%;{j0~CK(wZvD`}! z&3(-SYl;~SG4sfdmoTIN1CH!Cc|L?|>(9kC(un4>R-8&v>F?mIfJnzg$wcBlDp$QJ zV=m+dotpIau5r+xbL4bv$2)K|$EEz34wsJpWm%D$!CcnXj@r^Ggh(=_0If*uL?=37 z{B)8f9X$AM{O9H7I*8+8=i{{e8uR*i_;NlSGuMB}r)U_jw)sQO3s-_qk|?0&g#a_* zQR9=|Z>^bV8>_p6n3!E<;}#67xf~;Q9Fm|vtOqG?0PM-Amqf5f9V{jnJR@cjw6=4F zV0+u~ThX(ZLcq7W4$a{X0Y}oEbwBI1^aQ9rP=6Q$4>2PNLKr(3c0cc81i3QTJ0__K zJgIy0l$@JMFgr#H#vLg3UD9ICZYS)84~91!SL$;AH0pjPs^OrV7G9D39!`KsC>0)+ zeNw?-`N^2}Nu0bxgQtT|#qNX%i(*{7b-(hrlB3Y)I9y~O2Qzl0z?VGFOMKakk^;H6 zYd~%!zw+mn#8vtN$(sLYuW26#eu!ZG#r5C=_<)AI%E_h%h8sw@iSX>2GAt}@kPr|T zaAlBa0wTG9kRGKTbc=*-nA_*=MFk`W*dMz?P&4(n%5~vX3RM#Z4ZU1!OJO|+Ti_fR z?S%JFyYU}5QE0M+7qCdgI_~Ge3OuCGJio`M-tMDwitCbh^lGg)l?KQI=lu4otB!C0t1kehHfnE{w; zB}~w|{ldTmIrNq|ooQ?U_(Jcs!>O^nZC-j1naC25Gw9fC&ijsq0+po#P&=L4>v2dp z3Q-1Pbc##sd69S4jNFK}UnSu=Dhkse298K&y;qZC^KRm zA~B8&yLz;--R_1pfD}WkTs0eZ;WykFK|jhw>0UMjVo2B{DbR5?mD^KsK|SKbhxo9_ zBp?;Sl|=M9?+b(HDuTB{;*X|Ra{Y%XEewORJCwee+v#%tBvbM< zW;$IaQr4$WAKv|fV2?X@3HG4VX_KAKR+aRoGyScuAv|E)xYynI3VUB~v5I?H0L1n6 zJwvC;M5o}5n>~%uJUmp`9@T&Vk0HZV`P}>^Z9P3o?%U_34(7A_4JX*Z(fbWIp?rql@ZWKK*Ob?)J*9(iy-`=3 zZja2HoHdH`AhuPr{D!+{DF;w7hoh*VTR+O%M9baZ+;4c;p@Fmn-f%v!ZWjdCy_>Ps zVGP46T8tAf6piS!l9Y%33UhS{h$61#9dcWbkqAYrfvXMUc>>;$$ z2R(IO_^;B_U-k=n+6Q;^3_jcYb|yXjW$cmYsmN!er=#&39^te2ta%TN#&}#85o_{M zx;TGv-IRy=g=Q0(16#v^`GtVBBkuyvH;X&5ArXg8nh^fEh?Atl{sM0)B7o<`X`=wBs#5L$*yiZ05L#O){uabD_90RtH=olkSIdG0xi9P40&dA|F&TxJGV( zIeNFy+7=3sBz<7IHq}*W7g&C7y8c4c4>?e2?FzgnDl`2eS3x_+)KN&{UWJzuzO>*4 z9B^$x6poU#)3@V89zS&8#m^V%7uk%dfofT%Ut|&eB5%m_i)^}(2$ay;{354Z3C=M6 zA{Q3*nWYd}gkL0FZN=H5`t_RetG{wN5G+V)~zD9pQd ze)C9r&f@<%Fhw8yubtl~|5x*K#CC4Li$3(h|DXFqnbYY zdF;{lbMTE)!66T;xdN|N{K64tI=>NT%)>{;FTAjibmmj{)?L;|I_p4s4%Y=&_K{9o z4AOI%exsSL+E(MH+P~9Qo?~XJ;}(2Ju!G9@c9?Mr0y=y-JG}T+dxt+j6kSfVRhA#BiAFIGnf*-)`-|D%Wc6s( zU$I}1yYoN^v(&jrIf;KsJ z_;q8UIaUIGwLUS)#ZI3h9?X3Z5GmKi5_T94vguNl>x<5?Ugo`RRbfC9_S=c;)HHDg z)5Mi+&0L9P6aaqqY$ZK{M~YvQ|D&sq?tZq@dj@i6P_AoeHl7qLz(j(%xlo?X}6BFAZHy|#;Yx%VtSwZ!7tGW&>2q&bkZf# zlIb{6)+jIjngxaLR$Tn`8(#cH%MnEQ6kHX>mvfJSN5n#H6g+D1N4YU2eTa_4ySkcJ zp?>9XDE7@(vtgNd&ntawWZ(5yS>oS((>7_S=n@b!29%_3!RB1|Nhb_)O84MK@UWA+1S$KM5}@&rGl5 zGX19S{lp9@*oWWr1eU7D4)ep)Y<|=BdRHB`-m{KS?^UYav4^X779@$XCuPFB>Epx0 z+rPkscPy4N!kmSfGHHjm5E8cUdha?yy?;Eztas3bhpBhvVe38Z2=z`=^`2a8t5?m( z9usiDE9@3`g4XSEtP=i9DZ~-Osy-u*q3W-q2mAb-54kDgrHB~1YJZH=Z?=TI7mFcc zud2`cM`jVzO0OCWhyhz7F5uy%#_0=4p!8Ac5V5DsxMp^}&%=7G{fe4-sK${uUUW;` zfoQj@+RJqkbLN%<4loL5iv4gP`ELPAE2SbW;_$A8eYx;Es8Da?xe}-u#v+6y;7Wx$ zEaGDdm!&qz*x>5Fw3}Q#w^IaVuV4mzA8?QTriUDN!_&Ys>w^*S^O1r+T*j5p?=`KK zm`?)cK&WvbxRg>hbxCf$Nn3dOasgZ99nt{0;A#g>pgyC#%Q$!*7j%BJcByZ-pAHBx zU+{jy*(Su(f0PMv<5j>)R}Nvu%yXd$vydWntgLT%F-HjZN!W_9e{(qC<-TDbbOhj2 z3kCkUjOSS%puiZ5F04*p5Vk?fydZ3kQ3|II!i3@MeZT2Sd_=uzUSK>beQo`_Cu{CC zI}zNY_D8;*_3=~jE6NK!{+-vIc3eiO-@Z$V0VLDMj1yo0bzB2#%EO_GW z0-lN3I5@gEdc0qS``(WncHbK)^ILvZgn|FC8!sNfA>)!w#80W~-Kv-2^0LvNU zbmCP8FvD^t#o%SgNcW0Hxu26UwoXk6XD(^9C+wSLEhtbU{M z3T59GxBj#wN#v$&r=6YdsKe0Hw$nm$Pn?oe7=UaDp>+)z;L6))NU;huYMcTns+zb? zP-DZt*?tznpR8!&R9;8|bA`>BOxi62S@3IfF>bhvk@smHp48I!YC*jgkIj!w%(sl| zm0X2(xz>>T1ZfA4Bl)ob*Kt)$oU@Zc?~zL-&Q*JA-0d<|#9deM?O{vHDG<`44Lu4< z@SC>pXF$Q#@B56*$yMOoqp~wQ1oMmv-uR@ zj|vR>8z-z%%uv4im3+11dm-~lp$y0Y-sOSzDKbu=Lnx^nLNiVv9kAeo0?!0LRmL#1 z9ph&3Xw&61z~CXCn@^VgSp_%r>=L5J^aHN4Wgbu&b&x zT#-}mUgICYh;QYwYXzf{Vh_T_>{paX3Xe9q%4IHg8x zh{I4bun&oVlL!=q5Dv*I9HPZeq#&MlW7JPGga9a@y+Y6)Pf;OSr7j~3^)6WL73A2S zxSVvAox7aP;54Dx45`jGZ`#L21DN*SO(4QcS!m7Zq2PZaRGbRPVxQF2ele7R( zGf3VBti^gx1eX|RaUKz|OU0!4*AW6tSM?Nt2`QaH|MvNKLuiVYq<#PM$yu(6n( z@9pwu9?AiJuhN@9Bue&75xRqz)m8}E19HY`rz9srHHSC~%cOM1o$W6fPeD;Iq4#3= zjXkFUdgTybZ9E5q4)x@Er12r2&l?K3fs6{&lP#a@`TWc$d|yHT)R7=+&IXyB9Kd&} zvNqZCdu;j9KT9bU)E9R_qvYhBNNc9Nnn(Cpx0QN4<#J@+#mV6434_%1!&^aGFiOB{ z9@_L6KS@)csjE8b&=2E8^c(xH+4`NGPVxnfNdIp7U!)h&+1m+!$+wUy4%z<}zonj} z#?ch_)PES))xGpiDZJC`%(l|bcJv8j3&AmkLd}a##6kF6|8-{3x1FvyP8^>UiVJOW zj>p^$OUFxD%1n4n@y&69j56=$^Z}MC-;3h%;tpi0^6eyjR!k**@~CMQRQoC!^-EaN z)AeTCl`;HP@YJl5?)ma+^=`b2$D*4^{+_>! zZ5b}{tC~pe?7Mon4^eo$t=~=fz<#ep!*V|u9bJq?v{>$ljvh|##XXsF4->2GXQEOd z@o@d*g7qUAq1kJ6eamv?@d6a1KRN~(@fhl6|J1l4Nj&L&l>8f?v7KKd{=p^I!+Z-- z2gaBCq4R~meBG58+erRCr$A837|yt7k$mQ3TiJHC64}3h=Q_r76^EPam@pK4Q|@bk z-8g`y1mvH3IKIs!2Jn3e3R&xzuJc7c)pzErLq0nb_kC|#6KXNn1USq5@`YCOV$xhB zn)h2cWxa*6eMbx1kK{iIr+;G`Rt&_Oy?uvl|KEu>4T^!e{sRDZysd>)0p9HJR39hs zVZrlV3bkk_s-TqR9M(=g?BM6VE(Wc+K?Xfa{-^nps;-pb>YwBX4BzXV%F-4eF@Tp) zyfuvrNbXbffm&B7e~wZ!o#RZHl^jv&T8s0H(p&UDzVeyYHkl)XksqkF9C~y0io2$N z8}e_mYi-p9?hy@4LVJOkAw3niIxr(Jea5sPt|A&34BwX%zAh(x#gIVckpT-I`~Hsb zWLNRzA;FO;{2zJXn5+NZmI&WI)Y%c9iBJdEyMT%}W6^=(>k5L-RM5A7WNYzES3qyY z_b;3q!&6}v};H6{JAChHpkj&Hv+HL^9Juk&pT_|^xV8-wAgd4R;(8btdaqnbe{PAWny z00XUuZ$CBQ+veLBbiRm$@y?%4`YNb@7z|f=&Gv69NCMEpGz>YNE9$;ygFyjs;uGD$ zu)Z;TT~Q_s001=~^Viu3DY_3}_+rl1ky}KI0PH+80|3}l*anet>bfA zbR50wfBNxFxAtl@JashMDvdmH{7>#&@s+;Onc^7uHU^zr@o~t56My($SxutDS6`}c zK%>6x&Mkq+bC-;CJsldk$+y9I2wRwM#x@OhZi+lN@WwMw+pD+xk|R5S=oC^ujzx2w z$;flV{ZIL$`scpZksE!VJNF|c6>A;jY>hnUzVe#u&ce>mqV_)xg$1Nbr&w+QM%C~(a&@k>l%Fc=SHsB=6LFXoYOKih&&h5V4I@*Xd z_27?3O$%!<0mh8QAnf|$RpKrf!qq7y?F#^X#8j4Q8;Wt0f z4>>pbHleeZ4k>y6D?FTUL|6=C{pumkJ@Eqso=*Jdk z3{YH>TJ(nzdUq^#4902;fNuka;;i`TqMNV&(>lEa(6{?i&LlcGEO`2;FLVfq8jwNz zpzf{C)Sy=O4Qa>zyyu*WtbIT?yL0J(pYg~aovnkmfVg*KBx8fS!9jyInM6HyrFHzICaaMhDJRxD9N@^=EN)RZN4L*zl4?o z-LE>6LH!M@y}|Jh&O5~RAXBaO0{W}I7_$nF9XiqZC|ktczoJDT)cO14T~lRGF)f_1 z^xkRR0f?GILH+GO_f`SMpl;u05c+XrKELF7XIqeR>KJGDpcIC@L;pPTbn!p7?l=d% z_#ze^VBr`e2QGN{)%&|<$65z>Zk=qLLaQj({AJd|ye-s>*4CrlTqxNf&ANd1g*SnXVg6XzC<#I2LGe`JD zEpj(>0qpzY3O{}L<>Be$QkUz~FH32ox}B-es8oGCh3xZ(;jeG2zNNkuaWgK(2I-~8 zjcuI|7m`oQ^bgCN2NFNRxtocR-~~~%UZ1+m{a`5?3P!4_wh5lc$uAaA3vukaT@9_8{1X;Vj%Y6 zfYMQiLUVEOE9F}7{pK8ZSC)24YA*tv(9NS7QFBSs(`7&&+TH zmZN6Ebtwu4+<%{*d#DOc95T+s?~wk##$bL22myi+00;+>e9$-+pTqt2ffK^PaR=Fv zgU0u<^n*S$eTJrgwdP{oX$geRr+R*;G2OxEwZYy%vsBARpT4)^k3BV)^D z_-|B)Hn&5I{Ln==0-;To`rgx^v4|xX&k&aBac$H-=N70ZANAL_?9u*+Q+DBLo=DDX zDDQ}Ul&?>$2u~ae6Z4=Bed6>)CGHIo;~lxj#lonA1C9$XnIAVpSBSr(4n(HRiW&V` zA#8rc|5_L;q=vVKu$B6vqjuEyxE74{?`_Mey`!ET3tw% z_|d|!xcS)%J_XTh<_F7aVNZBM0&Y&j5No6c_K}?Ru1BWhz7s3oggAcyo;cx2wm+?=J{R1JGX);@EoE3 zZvyXRfxk5T14R9ipod5T{F6+4z-6Q&u8HsI1q8-#5_maUlrEpKz(Bgfr=xyh!YTJy zZ4w&&5&a-xkid@T3m#Yjm;N_{eJ=1A74Prw;Wv9a)~nXO+v&8iaWR%`uf#G>*!6I9 zl)g5jb79}zdQctgrgcNujA+FWXElcM1&>xq*AvNtk;e#9*iT{d@a+wx&^h>)}1qwZ-ba7xiKt{$h{I zG+%(;)kCjbGyZT%_^OKfvX&8`$(prUDf)-``JxrDdOei^K5>B3Ljje zE|m51-mm$iX!=w4FLLy0Yg+geLPNH}r)BO;Ruwm zme9nj&N~dW?GLgY^DwTv;bHucn?$7`HEvjn$O45h@*!SZX;H}8fiC;)_L)0EV^fQ# zlLk`rhSP$+yWANo*G2rF=*pYO0-J!YRULn;fW-!9zHy$c1$O6l0M&u*nNDoe#JRTv zqaDb04#{?vv2oqr9<-9gk0_{Q^rOP)-M+Kv{!rnab2)=%1bvipq+92LY9 zg6YW6sve{BNBtbV@`-)3Oq38EL<{j@bO}qXb&f;vj?FKl9pmp_S^`Q#qn(vEi@|~P zpFIR#5i$e^umEd(+WlEr@lr@bRe~m~By3mMO9IW{ z#Y-VcW8N0zf&9ic=B=k&cCixl*Z5sdPtk*re)U$!g}cuuES)Wo zLh10YF7#arsR+{4p34_$swzT7Ah$t9nmJ7Ww^LzN0l6-c%b}J_3^yf za#^3;Us@*VIFUC`&~dILV6ZRFh}KJ&S-ag`@dN3`&w2#i%6-ZTR&f;jlrENo_-&R= z+FW(tAdQI#D&hGMbvQl{z6v3-xO*%1`ttyi*b0C+ll~XW%nKd~&#D6^JXl>k@H>1! zZ6zA6po@r0L>X*Q?(rj%$V+qtc<4c9f(GwTUpEh7wj0E!=0x|hOMxH~pmYa<9SxhN z(>Xa}#%8c;2tsU_YS4Dng+ULYBadPyPI@;xG%%w7bf;9ur^u|_6YTHC6{PVs~_;LB-(t}ReiI;t=FL>twUf~;2VpL0c ztmK5EKcUBV%wFa>il!xsy4LhMx;>HuaKco>Tm+c$s+ULoabJoly#2lP!(MvIoIM`ExAhC;-l~cs(p-C zknt&gk%N%z)A_N0lz)JG0}*;^l(hx+@LGgUZbCr-TeaV}~IOHm&=d4x^Q3 z6%{=wIf?o?-_M_ph4pZ4Y}>u15XK!P)xaNAZ*w8ko}j=%un1hqi|H4E*+oqDNm%I2 z;%`jHeicYFYK&~b(GHzm1f#!a_G`UK2pqS0?_!-P^aCIrGcIPWE&H@V;w84PpY@hw zy}7J6kM-u|TMupuc^x9G9RV5;FfWongmrTu7kmg5wUwqEcakVEJE3|+vBR-&B&UoA zpl;G$vcU!yKm%L|(IkA3$dZ7MbEGJ4(Dc@1zmI|WZBo;{Y!^Rpc4-p6#8d>xD>}kntq00Ly!|#-4j8(X8u!0`NmU2r+s*jsro{!etDI#=kM74*peeVnvAl z4T-8BrzciTc!eU&o?UbaznBi;#Eca?^k80d56Dd4`(HR!I)%3JB`)w2cC5bqwOtHCZ?22Kuc1eg>wr%>kH+WC zr#A;(wz(n{^FyZoW|tdLMudmlScO8M8#isCB7O#!bS_L7PyF&zNEb(4+~$ z3oIE!01NrWbvh-XTsKgbsP%*84-h`~y9m>?y6yo;jJ9YJ+No*h{A(Q9HGKk@AnMfW zTY--GNo_o9sC{R3-J+Qem}#4|@LxNRkZ*0>_}v#_tuoEscq5vx8(&|9U)WnfEp55y z;-Dh|s&ao8b&tx8?Z_8nZ3;7_&@b{#+P89ls^mxm(ZU zdWiJz5MT7%H&JXu?koJ>mfL0~Z^&K8Hx!8BZ}mb^_675`E%!My8`77YFDp!3dLDem z#{cL-0C5X|K+-d)x$b8)IORTt*Tg*Wx(ct3+wdCuuzzC5jVx4Z71DDTqiT`#9FkDd zP)+H%-^Xh>HxHTd{RZt`io_taSUYx;Fw`t^K7$uKKB$9#1+ zuEUpb?tGj;pRMQKft09K563G|%Ar<9WZ>zIrh`y;l=G1fkR`;8k4)%Y`M<`tTo__4!vj#bE1$pDU5Fcyi!4!@&l}l&R zU&Xg~HOYJpuh&WZE=mBZ5f;tiZm2`v)f7{3=u;W)MF!&*Bv|_)FPzUr5>dj3#Jcg{ zmZiO54BuAY-Zfn3BqoWZ;W8;#B*|JuY9UgM&(Pl&D0A101>FF?T~`ynaPCyX9<3?n z@cJRnPV(V{9N+NJjau8%YEzcBEp3J{A+Y0ePez{kudZeJo4W+ikB>4)8>4c>MDylZaM=g2LmU<@?j}{Y(T9!IW5&n|Kr- z>c;0Fq?x03Fm)Z6?J@r0lP*Da;O$fg@OIo9W_lX}2MHsQQ1hC^n@CN*z|hvgkpJEWq9xQZdW;>EQgS#;XiID$_qmtir;R zZQ*hQxv6P9ScNgRyr($6;oR$RDjDNFi5tvcu=Q!ao#{MUIM;^^xHk1gREfIl*E+TE z(2m4JP}R8nkw}}rQ*GG+pV{LRn5ji3docD`kX2ya4$;(pG{tsqKsyMEphf(7 zXkkMD4e8&7$#JSHd?kvqK{m!VL}Rkm*r1Kt_{5$37IST^U8aq%T!0@9_W(Z<`HA$7 z@>JjY z)$41+eh*A$%a`+4c>M9AAZ~cto2Y_yt$w1%3Dm&OV#n7DcX4VZeI!O+i=B@8ubj`a z0hE6of+hqX2i>db^IRuK%Xp2)q562g`h+u}Pxd4#uxLfT$B|E@?M)oQ_M9);^~*F; zS};sKU3$8|)3JXk2vrJ}+fX>sjZ>QJ%#Gm+Xc_Axmpda9dK$O7wHW-`@f{m@<0pz% zKJaZ#=%*n!5b29@CtID1ZXxmn=)SEaxbS$&%tTo}GV7lua?rW17U(M|$cQHnS=O=I z`{+!^v)owQtYPED!#E zoB=A(iyXiTSjPW?zx9-&&#z5?IIH}Utnxq1O8;I~`VCp>S7xLy`M3$4FN;jV9C%0W z`Jd*3Ht#s|B>cr*E*)7h=xz9v|M@4m(9W2eJDjPp&jw>>2|rJ2M+*KPyGrD^sbIN# zl;6XAJ>mnd>%j*vKO7PtrWZ8hLlHlGB|iB5e0QQ&e6Qepu6(cL`ylyV&G%!)dtDts z=Fj8gPxgR6-SX#3^QTAtT!o+RQMhr`-EaUSUlnxUfn^#0!1f8AjD0v5g>mN${>QCp z<&j_3A)5w!u!b+^zX1@_;~$C)Ef$C|>243I`DGpEdN^W$Dx)rU-e7+F1HVCQ_VdU8 zR4@Zxp5#ka!2Q`;{#spWe*Pt208n*@4~bv2R+YM|w@nq*&}@ot+ghvK+u~@$?_%-w zqE?ZXS!(-KmAR9d^O(6UtL9g&JRQta$UN(^^1No{X~!DN-FOnX7|2-1yzgjBHaK#K z@dX_hLUoT$X#VoZ5a?#$Z#=-zli9%)hbnX6vRj87nj%@@wSa1X0rWdSWN%skRSSqO%2Mcy0bGuLL-i3l3>b9xw6QD?J z(N-_p*wy&gA71=hY-nuJd@+_tu|yXtY8O@BiMO(XW-T)McvQR2eFEZkwlZG_^Sz7O z5@yXDs`sX9z7Dt;6 zCF>}RP=@M+6G3=8pj4d67FO>A&=22o^)Q%@S{eU7_7N0~j*RKT@6euA{hOwRM`)|p z99lH?jK`+DfI^!B`fjbI)_Lc7-6Q{es#Xlg9N(*fn2{4&{rhMPnJb>` zE%R*w;NXFN+Uk3*i7tM*XZ}d7cxEBSLUiNxF?Am-x#X-ed@BJWw3aolt82O^7CeZ; zMJm&hjv3)^O}pSxWYWqaLtR?S#KIf@@$g#5OUUKdp8fpIKen|Ub45P$7hf?i1T?Mo zo&5Hs$KU!>C(6tUVK#1Ac+;$(|KZquQ&FS>8O!16;OhuEk@Cd;`!9R<*P|~(N+r4( z(zk|y?v{tIOip>_>F@gRxw_oh8fuCC?)Dd7U%23=vf{}LL)~%GPh|SVN$rI>AN}o5 z^`l?y0s(2o^8sE-`xEyvt5)1k>;7PBB7A48!P%w7C*NlfWNgWV0?Oli66< zKXo?mzY7IAWP#4C0`A&#wU$Zm{%Q1O``-MAwmRB&U~2wC~^QrwDyFq5z7A& zYXB;nZf#sq?dKXI9!NdY(v#`tjLWK&qjTa{_i|N6w_liL-XgZ?#C(4ftSA_du~&U` z&w{15XvHUL&lX>G|DbWtUHybsT-G1<(GFf!1QFxjOi>rfIZku(&m~f{9aiM|S_5#k zca7`_jLRulj9bit1w%%DZI9s`yiN4DEL_l9-uPba@m&Q1@8#i}3Ox8wa}vC#u||3; zF?i|j9-!m{roeW|<#~Lzba@S;Pvh&*$Gg0AY8{`%tNZ>z=xXANFL3at)u`kgDb|fG zN)Cg#u=^jwm5*Nc{X@vH^@sfK`~N6Vb*S>LsdjNRu}F(7DvoNaEdf_Nt;A%j)k+#c zz#*I|BxhP)4OFZb3t5t~tazfAwRLDMX>mHS5ONF`WOEPSCLpo@zqZ`huC=6v=ww%@ z`&}t8%bciINqSU^CHtb{xYm*u?-MaCSkapj=x0`Io1j4Vw#jKCHbx*daoJTW zL;+2~TMUarRC_^9R`zM>+gdRU&D~hxqQnMlqA-vm$jX=0AoZQ?#(#06pgz_AuJ4CW z3t#nqFK` z9^t%Q4^0A_M^4>Wdb>1EdKa}UCPrj64 zlwkV@2lUr|5&LMEvqQ+QQ5`t(hRrN@!&{`}Z~*GUG8W>dlt(z|pNv&YKTQwdI6}=1 zS7`1!Ej$_wa3@Sb(|15v4QT~aX*L^z;Fs{g@ZCAVNI_9x3A*HVxF5P1tOQV&Q*7d- znmg1U+c#K$1*f!xSPe$ba|M>X&(y%ES4tb-!_kle@yi{0Io2~G_Svw~$k0nsCa`3e z%(Y*ei(`M&3(n&$*WN()I(~LHbO8rI3c}Slz~%=}{(iZnqUco_tak z{(%QOk1%@>?}4%FYIhKU*e${-5i>VGAvbR`En%W+8=z}?p*A;Ia2_y9Xcn=|rL9IW zmMsCyQO>=AHgQ}%px=#CE0bN3po12dA;uZN=?nLX%@8ky)*Y8~;7}p<1$%IM0n!u& zKqJP-sOp6Wtc;VG5kfwqVN{oSQ8uLioqx2*&l2!x)pW$)orG!xEeN}GeH1|XQ`*?p z+C5s^{VCJ$)p(VRsL*7b4}h}hm$pb{bLDxO1F&P|!OPoDy5Y-6yi{&5L6+&eTfpyBIC!#$CQNND;YcW86$(1>8h4}IsrGqvzP`;lw$0t}6TIr< zK(1wTUoW2<)u#=;JRIDaH#IVJJyINH5OZO~@!9Kc_!c?~*Pl|~i(SK^LSQ~C)8T)Q z&FRtDfu`oM3C7IuG<0|>!k#Dkk8B;gA4r`x1TU}EZY|TNg5h_g0N*!=W>~#mgx5WJ z<#T(c>O)fDamLM{A7@mWw|qVN#2k!^K2Z>&K5>Xq0lchnc(Ip4Vhn<_hG47Pm3V71 zc%3ske8*gu>!>n34j2tj8)|q+x@n4h8aYjh)WY?G6!oXXpA3pLM>Rb@FtM0)*^xn<@0y;8pM6OXh=(DDn%n{=oxE ziiVK~5p1zE48X10l^kg3AwS_+J!Ud0(g`+4GSv1 zw#K%8f;(vnizm)zc=O*?h5swv%dSSL5ag8?hfqKe&sruTXztIdB@ZMkcsOm!QbwUr zFOr$#*o z5>8Fa1rujqCA?*IrhhII_AB%5f6DZ?iBJl#Q@1_>>WgXu*w;uuR0#s0U0H}f@oY3m_dv{SJtRs}(=x}A$x zCEgY1+ah+U3}c!nE)Z>)o*`5UOcZfVYD6v&rM`5_r75=lB>O2}X^Gc@c=!8vN2CFG{!^7`)tFBh&EmECSVjTTzjUJiO z^5)Cch9u(Sr{c`!Mc*(uWj<;3Hb$y#SN-pjXXq+Zo5|5>YHk|-UJda~SE%GBIX+FA z_?HFkWyzVOg67rLbrsRqrF+H(Zq&BAn7_$^r!``^951I!W(-mhFTf1<1)VdOqd-EZ za~7HbR%QE!imaG=`@MWpnaRY@3o5$RSx*F`?H30euT0#H zW%(NOyj{bYDqWVWWG3$*tGAUKIx#4-do~kb%x@9GexM8_gu?)ZyVY_m#sq6PA8lXA zF!gaYzPDv*T@_i1Ni@b?bxWoP?6wVGGNfpDU5_WUy&SNA7k@vp`N3(^`T_>_HT$Sn z7XGQ)rt(G2?fhQ)oV$->y9t8^#wL|P9seTd?%xaC$NHezBip@W+0yZ}vg(-{?WFnz zxx4phw-N-IKIJrF*8UlBEs(g1pqT@r<6C9VS_DVnpj+Zgz(r2QFS$uMxzOpnN#B!z7XI}q9G9s4nv`vrH{+r8!QikQ0FdrLN(n=4;R3>NDZ`l;~( zQ^INoM#2A3{=kTjZYo$^1J;wuk}x4n|JJj?5e62QBzg*w}ub!A5r@^ znU*O+;kd8$k}Yn$DHAVXFLj>=!b-PM`2jmDq7yJRWmXBN39_@5KPw(i&BR#UnxfMr za&et@?oe)a#KvL52h}$5%`BMSW3})s+4;EJOO!R7{f;L$A(!Rq&B$eW>S;%6;OJ1v zuVcI?$aH~v9Y^*PkwMF;d4h~37GAqwezGc4$>aXtj&Y}=S9w8}8oIbA>L9YV**?F>a$b|HT9fZl^%KG!hn!nj=YBPf z4fnPjJrZv?Qa_xs$cDsRow;95mJ*O2r%;`eHj>ybIkY)X(T!f7o9H*yLs^R6R$^5T zy6!(&40K99#{+}LpQ`ak=Oz9@QyLf>qVXR~eI7=2p?| z544;^ozb~g?=g91MCNI&$ep?D;(l6QoeNo)>N5^MDXez2|J8EtEU0igRybGYuqwLS zxwEXo3E=s!ynO)2V`D0uOYt)FhFGtMjvmmxyJo}-o zg1&+vYOheds8c60*}!L+`)@pH!}x)!UDVz{PGWhF;{~OgW=0hNl+BH4ct_y>QC^c~ z4(07~(>{)^aGJR4OGwDdElQhPfMmVB_(!?h=dL_B@Hn4|SNTcSmoo@voEZSWr*l`C z745{L>sa`4XoYiC4&`RS^1}+}Lio|Qy>lVX$MG*nF`Ykka>iDqxWNce7$U4-qD%O) zN_sEGU~uLDjtDbmGie+h;I-@ztlk&pjV)C9m8Gh`V#s7Mp?x+L;ZsO4S@uWbLP#x(#HMSpJGSV6_JnuH1xHZ}EGeT| zF+6Jz76#pT-44ttJMAhE znV1Xn&j%E6Cg#<4Aq}SM*sPc1PAH~E)_{>mvP(i|NcphavCRFisH5ymCM@~}=C7-; z{{s6?cSmk!loY*;8G}y)y)VxjvwDDY7AaNEB+8vck=@*5Hc@inpiBUYd!IiL|2Zn? ze-Qrwv+kYo?pWTQCV<>i)zmN2FD--WMf#;3P`h$xgm>{!T&QcYSBGB9lxD;g2hz_m zA^V;pbPMu-Sud(W+-@z=dk55OmiV815|+gC3>4X+{HmOs$9w%;#)w%$&<2!1{QMSm zIp{>yKd~EEto+y+@R$DWcc3xp9o>l1!8o~c{JC6`>W;mJ8Aqq2bFB!@uF$dXTsx9| zvD0IVRYVTT<+^o5wwyC$G~j9?=kBL~v9B+)cX4*v{y?PRlj1c9!taBuXy>zKl_=cX zQ+Z6Fbg4PDHF?0qsNO3KPY=iFuPxm6|11DS6R z--){*9P2q(TF^Es;O?%e3TTD;ij5*5XeVTeOa%{12Y*Y$jy2IPbwEWr;5`B|U4UwI zy0t~N7PZ$oG8G&^DvyM3->vKE->e!BkR1oDlYaGR{mJEB9v3#-@{q4rG=tP=pM^(3T3>+G5Oxc zBmAn>K*v9w*U;h7fnGa5Do5z;&T-M{VablSZo&CTlx>WVkS9>B%LME$#qdJFFH`t& zs1D*yk+?96gvgin(5AY1cjA>IBv{c)&AI)x9yDuL?W(wx{En-ltxFACc0)t^lsq6o zd6ro_h*B(}U?7IJTBRF8EX!}G9Zt^hNEe9S<8{Tp;~WUwr@^@;B-FP)rwC$kH&H;L1~L) z`ekg~lNN3NRC~`af1>Sje4Jqg^>erBFi0hWDIQ z`E~6rrP;whpwBdguaPb>PHXQ_dS~dc#CwEg$@}FC?j}U$r+z_I(E;JGZ^ZUNRGBrR z*=noLE}CUgUFt6WTyM?sgxc25YAhm0_3H%?D2o%ut*65rBh$FD0KyLgfcT zxtnV%ltI{(Qq439tzV?THLGZ~wR5CRNBn&`-tDo>ipH2{o>H-YJ1*723(=S9`34c# zqEi3epx0OUj`o-jyf3-8f0p@m>kyW>evj;HZC1q@l2{`)lrJPSELWN|^j7W6@n82L zYWjU8@kS5G#Fj~EoHLmwbGwqLko6*YqN_`L90tb3>o|VaiWj=dpmTb8_}m_qbD1+d z-y3mz^ts5KDt3-mqML3VtlCd`wkf=qL(N` zNF+^52V9yCI7y^O>kkQkXr_u-oDOf32`>*%Y;{}ZEFP^rX4PpV9f;Jo4%#InU_;_7 zWJ#BB@4=*M%%Ch@HA2K54s(-+S@n(*#WCJk(|nc6N;XF5?ERgPxY5iZYC12E9#<}p z8`}Wn0I-}^;R%WYBTk*jV#wo;5L-0U!VyoIYFi1uG>4hYjB&hniDk(ALep?DoMN8$JVMH8@U+ZgqcnSiC0j7ar2k zigXiLPKk9Bcm~38+c`6QD#g-CGATl*R^t>&RJe6OlV^ZgVkCfT}WXo{_;E)upr44FHR zsO0)TV|SxwYIstso-_rdLfe7&>o;TSA`HhV^I3ID+yO}RZrpePCJD=F-wR}7X{4QB z1*qN#OMo=*dSimTnsW!Xl4-L$h+nSkW9lv1_v1d+_>P+EYvFoQkD0YQW0z6Tc(wij1y0^0H z6=u?G2UGOKMp;Z!y#m4~E3N!I&x?exP-7)|h%QpTBZeloUH0A-z4S}Pp;&#{^HM zY3NR5r{4Gt@}5KtXlykNjduHSL8{Te1hju~bK*Kt4x+kRyHkdw+SqB!rH!3PbaP4= z#6%el7P+q#y&`=~!;VxDzW-g>W2$cQElUR;n43W!Hh6(gndb2E=b0BDl3LZVyq;F=sGcU+^>#E75c3t zA@Vu%3dv_j<2uRzQ@~SAtwq<|I$h4Tf)@hM{pjKy%?!VacyNnd^(OM*uDo2q-Wsf7 z?*l9CF>)*Xd(a?G;$?nn-=YqLdHe2>`A9heU{*_&Nk-@C`Z*(=)waaYb$KGh;>JCs zk1qBklt1UB86mQju9GVoQ);0<2`83|%Kam})6#hPf;a1b!fTVp+tC2t1n}yOONqk# zm2r+ly%A7tu}COl)lx#ME~Lh50}>{O`&;&`($DC!iH@i@t`MS$BcP_uQ?Vi4qQjH5 zre}Jce3M*Y@+MA7bEdt}Q8r=qc#=ce904WyOT34UtT)CI#ha+*T_?9*iQ!fSos)** z=2jb4DOP6nzpb`wL8r*K2^YqsV?C%+Oqz2DO)9ec5e{ZRzgE!ufgW3qYM||1fmb`- z;r2)q5iTWds%OczG(&Nf;I15~)XUFXpwUbV(b?~;vVRhU@qY|7woOS5V$AT+-Hq2{ zJ?KvyjXsX$sg5WaxGod85_=)moE>vvCh%?oMIJ}#UhE%)=se#c>D{ZL(KK`fP|5TH z>{+^M_f4JeN6EKL!A$8Vv1aO6SEOV009rdjWMhBLR(YtDG;~(I(GL>b10|Su3nt8K zAw`u(D9rZtMgf@K#207<_e_3j9}@J#_D9!*H`E*36N3Iv!JPevg!?JNZ!(Thgu`HF z#)h#X#)AwHk8{bM3=pZgWjVI9Z9EH+#D&QO*8ZF5JyZf_)edMb(5hlztWgL*q6nK+FC|lJ zh8gZY`c}yGt~cJ4GA8z+h}gtX`yd6cd6FM-gkkn?j7_7E^Ihmr3BPtsv0xI4L&~;I zXuY9mnN^K+U<(S9sWb|63X(}LNdnu_BHV~ZudV{93pb7+Oeh=LKY2mmkJ6pj zV5(YmMU{P|A1>;3l*Y5BU?w;&iV)b3S@}EYQay>yI*Q&2&0Re-PH(oY&jV! zu1hx6({GzI>KS@?(aaa<%RB&HEU*-HXJp!yM27zqmkK5N0FM879sG`b*(IOI13yC|Qeq2q5cqrv@7% zDWCuNx+AY+(x_t#u-If9_`@oeVxspMJrEtQX|<>tBqKc88aFtv3_^qPm=d{cQ%jG4uLq^0nUhLEebb@GZ|C z#W>zF8hH&r_Jlxxc>y2#^p2Cyt+QwEuaYaB1R&T6_6f z7Hv5wv4s|xnZK0z*IdVV`kP!2_p-6j(vETIRK7T(BkRp-J#9SSYKF6XaJgJsBa3FI zImRf!)pZlQpy6=Z%Z)Ylxzpu1D${aq4%*z}rWbq{?RIx7y|zuRFtfX!PAqpBTg1uz zF_MtOB=GvsscdtpJ&iKBi2xP^Q|(xp=t?{@cG>uKt|v8SOzqwa!@8j#>c7s zWWVTz2$|(9P>1vf^2;1HzfbwXB*P1{+5D!av5g&@as{fVvw2C)XLoQ3FuUbTxY@1C z9`)$jn$*p1J=&{BNj?wDIYuq#+6*Mqh3R}iVGaegKihiB+4M0nw>+NXlbS1+IfaGj zedLA&r>7KB70GJH!h7B{DCLn{qUk_=$G8|{BmFf zXAdHab8)Fy&IU@>;_(L=Tt?k~R{5<2k_v7Qm#G{(C9iCxa-T?G4mZ2E|3Do(`6pA} zNRPuvn;KnXPFqKD&Fb&?MUsC7EPuQ{lX)FP6#0uAU#EbM@lSwpqbwPOa7;W5<@G)Y zaxSa-EHo1GT3lxv)4*|zU1VjoTWaj&X-*x?VAILp!aI4W8VPdm{6-16_hjB3;}hOX zSD914gmZq*m3YRriyKP-icX67Ly&B)JRE)79+!l;Ni`p?V-CeOt|lPtzeKVbYEy6Y z=fxZLzbz5XDihKX|G)TPY57?QIVB+wXgwXm{+AR^^+Di-{Zaif6`ZhtzM=-oXYyiJ z-w(9h>EjF9+uWP!u`H*D0lqq0;-em&4qtth>nUDey<+0AwB8kb$R--+%(XN{uloh{ zP}=1kpp(9?-GGRxWsu_au7?08|4ss`*G%l1)EAC%-G1?Bs`!Icd^8JtpSITy3rQ!N zYLo1ueCvBXKSf2BkT+3X3zYtHj3XtlPRU{+>vXtF<-BgL#9#@-nMl5ww}s?tQlL zPZhqLB|tb|Luks( ze;kTRFE~bf!02n)X);A5U$l@pyss&n&()DFGR*g$J5ii^Tu zc&a#ISt<%*?f}%&N0lu34)Ds08NNp*2Loz02R_!W{lolJ561W@=jLQ`e!uhwa&$35 zy^7#w#5Lm|fwYCY?SnYEmCG)3-97&7g}J*?1<5tn9R$b%-OR5=r-B-EI{6f<)DgtQ zkt97`rbZs9AeYEpPk1fDTXm**xc>NYC$-a-Yv<;&=o|%FFV2!p9goy*?N>o+e!S$;1?uZ`Wv`l8%Oc33=|!%?T-$Uk+l7>`wLK#_6NHLyKd%Ntd8$O z#g6d}A1ME0mDTYrR>xBIW}{iO-EluFmr1*0vpb0oqSp{3ZoI&+{Gp*9NxlljvmIlW zrr0%$V!HjM=$@(QZV-EBvwM=J+e^_Mo}qhD7G3P4LQPlOM>?lz`{+Aapk#Gd(fgba z?7X!)gG0&T7s>Zwaic!@sx~;tMkcjSyogP0+#7SIulX(C97^?He8_-tG#(s$cf0#g zB-Gt#*Ep>e=QH1KB?Ad|BoIiqzzz-fW?<^XnEPDnjTy%i=eF`h_O=dPH2$>6UT>%@ zvbR;`X|cvnMRXSKA^Yyn=pvC{_nlKAx(g3_-!P6JIepU3d;U zn*GliKY=as6Y+N^Khh0W5Fyls47N^Yuw!jIa)#S#8dLo29nB4$)XbFjGI|I>?r}P) zcEr^CbKH&RsVq0W%Hq3Z*Zojbl;htFVE(bHpbO6AQQKSM-wxFU13*(W$wQsQv*4;* zuL${H1K{o{-O)@wkvgwg?WfOi=hV^g&)|)AmK+AiHY#@$oN;=&Gy9Ne#DD2$l#IO& z;*uu62OlZ6UkTL|+kZSuW$=7JdNYfAG)YT4JcfLq26z}{tG(eh`k$-W;5RJs4lz{w zF6k(ts+_VvE%6P>G9K3ZS7h%d``7+!J6NP;N;_aH$RBQFY0iK0Ntn4$DnV8S)A|Ep z5kXXU=sh8zxE-Dm?MdNTegJ zPNpZEmfx3gN@ViZLi$=O`mS%9$kUZHNYrffEnk>Vdwaafmn(fSe-`gydEw732aicQ zw;NB{CAQhU4Q(U}`UgG3T1G&$|F%d|&bUL|u{0lh8&=_o^kJVU7F1v7FbJ3x!h&7VV$wp7}Z*#Kw=< z0{4rmmN&0gLz}*Ba?Eg0~22uYYf;;iL z)Ku$i-rVLYF9_2$!oz|PE#W7(D|tU`xR?3maeU4s`|b_@WRm{0C;|7);Vu7kV0qW` z^UkUKj60d1OP?h4smJ-5I)cyV_@VF(AA-K?BK7|4CD1&Xbu+g*q&(?kk|x%z&Q=KS zU+?yM5`#oZDEr90D8ly*>2LVf@naZ{t%5Ceki1scP3l;A1eMmDI2S8W$D=O{Qy@=l zi0TFsk1CV0%tQS${A@$U9%e|wDE(zfH#Da874-iOKST^+e5>YFU|J=jf;ImMe~579 zqu(~Bs8_}kQ@>*zs?ItTh5dil4E0c-bQ5gND{ih81Ju0+UGDDr;g@FD(ENiPcbx&R zPUIkOGt)6vDSey%9rxuoZ;N#abIG!Eotsxz5h22ALk7BUq52B zip4YNeX8x50&2JIb!0mS*FWy|Vt!7(mY=tW^HX;`{4QLLx8z-8c*~Qwt-QJOMA%wA z3xTIuHggNu%ITg^Bn2{ptEKf!$aP0B+Ty#9{?2m;>F-n2cg=FD(k;`VBQ;7dx2OJY ztG~gDn-(A^YnK@fA@4f`uhw0J;ZG!A0)X#eXFTqcY_Aa)hO4xAL#EF^!Gq_ zq5ghMe~)rs(ce?__h|QN{XI^9PjI99d!+iVnI@&UQ-cO+&;&G@`)3U*)1a_`25V3c z4H_+=at%64gJub>Q#GiK2F(%B(HivgN5X`f*9DZTL0@Z7jevgXu8RJl2Gt4Z8x49# zgJhoA{YZo6Xpksf_gz5l=SLt0t)$9(yg;Q|v-xRFJCEf(PnG{Vnt-K`fU@ywQ9wOE z%oPRnjU@8)d!Vj81}&*JCnlmj#q6yhGZ+_nN=?i5SW-f_V`)^C71Qx5) zMteR=Pj^C3qKLBkzl=V*mjLw9(LA#Bkxb*J?Rj_N8FX>zC3PT5wtSO=&`)Rq4pcPf zhv_x633iqwqVl7*{mXuIF~i&ky6+!98MS{p>RtxVS@}!Hm%Zff#M5ffIIX@>&U_lE4i3XC)qUXfIQn%dN(cHD}J?1G(E+=L&bG$#aZ|*u5NCsKPLn_;! z3nyhDg$}9-zrf83f*+g3oBME2<}n1OKhHQ7>!0D9r}hznO&65r zlXu9v>ifi3v1Q!T;(%6}@(;Hs?b1l7S7A`>!HED@?chM^Vspxus&=*< zlFUtpg0WtG)2z0|?Af@|e08&-cJgI*6#As`Xd>&Y|y{jUk@)=vQ<;$Nc z%V_G0wlFjib{vo)GoUhryN3Y`DQlXWN4)sv+)W)ctxiH~>UuI%&dpAH2H0N=u-!{* z^FEhldIFj9P_ct`V)s~QT@{detWPfM_bJw%w)sGP@D2YSk{Su&l=8CiqIXK(FH zQ7!hbvTtRxdn33FYmg^Ca72qk#M(*9aBwgB11jLL%-dn@6LOAadmT&KC&zc1!;NMI z;9$#UvMf@8oMqW_Uc;BL;u)5Qp901f>v!7r4(N@|3tRA=~?P`xm+adqwSQ zDl0n_ClNqh>f6A-a(Lo%HFu`%oASZ2m4b>#l0x@1!u0@plVV0}D-SnuBGBJ>t8E3Z znNU;Ej|JKeK<%+v(1il+A<#3kpf3vaNP(W81${`M7Yp?AEa+VVEf(nYSDT?wck1)5mUC+!7f$6x_L!5pMEkNJx!B9$8oA>Nfy8TT*-(yx zEb|OoVmVWnD?9NgF4~YIy60NXK*ko2D`>ndSKlpE#+o&i&Akv-yetnjz&mb5g&2-y z)X`X7f3=vC%vV};PH|7+%z->w(r8$atzcW8hhRo`T%I*~pQLG4Jpm;S?Fa1LvfepP z%TpkFTLI2P8ct63gIrjJYme$W$`FVwrJ&202R?4SHCdB; z4TN2lr&`>BM12)lr5}#x-or_`D)l6t%7tngI5U5~fBjqWsZwx#Ih3keU4c_q0hP<4 z_U~T?%h?@TX+h9=QE&p2e-kuuzEUBBOchby;i=5OQ2o>kUC%y+Hp=N&P%bl%aD+o< z%JZ(2PpyE;$=_V}N)C0ZL8+1r#6rr+M3rR^;k=my{;{Mew=LYWA?Z{;QJ%8GS|p_U z$Ht_~3w5Lh5y}nd%xV9LL0lsaaPG(pO#W5N)qP}Nyl>n(AbK6L^kcy3>|;g5hyL4% zKaMff8_pC{QuvS*7Ke-Dtmx&OtZ6tbrPu0`wX}TfP^VCpMU3dyusfU{tVFlQdy_RG#vDjHtFYtM3$frr`;J zT=%b-lY*I>xE}a)?#qE6ctq0L;dIM+P&7kByL9_or4@z+S&n*ZZ8CX}u)6Xa6+7Nn zD-lPD5)BQ^c_L~uUpz?ifCPpPiT6`HlaqlJ6qgLS8!18>oaB3|Y8S(kL1ISOKb7MS z-fm2;IvuC+@OBxrH@de_n)2fo4WOw7CO0XGy`n$f1vZsOCeTcK2b>8MFVjpvlV-~K z)C&rV*EHlQ`wq=1zOza{8`oQ|il!E=Qhf8^Z@Mg()vYAi%9r}%#iv8$u7cK~Hpx6! z*vr%B91m#7PbU5he|4roOxgA2SM+Dv6_={&pgP5)Wr{qCR*^|oc-P(+x-jV6j)*1& zda{^hYJGYan$oOd27~d8Dndu4`E~xyDG!PqWtHI@(qi(5T?J?&UBTzzgH=^<+a$j+ zoK%O9tlx<07c%uLIzl-q5-Re~x?Ec2I}xd7@hyz=4a;`a7wsWSbMDUNDqdd1DVFX#6tS zANIH7_PVO|mB%v6|4xj-g1xiyFem>dUaQxr<3DD_XXcD0%mvoUe4SY>D-7n`J?xb0 zGr-IKgnt6JsjBFu&DgY$R`?ESxGh<~%qP`J!ro9GsaJMlQzD~+>hEAa!ZFntOK8=4 z*;`Rah8RxY1c2W8O(jc4kS|GbHlOaX7o*(7-!y<5$b#ytpm7pNl(3Ko2~{3U8i$a^ zEaK?35PIF#7}}zCrg0#-ctr(_Im)uPuo6|_>x8Q_Ux$im94(wy;X6{4S|@sg&P4aP zd+SA}jioR{xL4hsib)fFbsZ}wvMx+vs|0<2H9K8z5ua+@PkeV{5Of(fXG|2wxOE}> zg^Isp)O!W`fW@WE?B_M?tPeV)Mgb2@{#|)EIgw2w1Mn8@oL>|jxC?J122KE zAiHLc11)hRKlR31Dwp}JvxN`&pYS1yxZ7%WYc#(L`L?p_r#eUE)i&NHSo?i}X9ES- z8ECcadJ?6NwaToY$k1Je-eSk2lY6QbGkKqs)vS74DqulB>E7{|;#}5~PD+PFh1E2> zVHMK7_wOlC-O%{b&TpJYxP6%3ekB}f|A5S2O|eUtE14eU)DkItOY}H zyd)A)Bq)XU(Gn(Y5FZyr)rl#4%YH;+s47N)-$VTlB||^SPRR z{%KmOSfw}7^huXYTau@Vn%z1P_X}Hy`}7tak2~@B9T)?DWyGKs9KNb>3N3qCK(6Gq z>9xte`(#uU9?nx_*#T+7%Q_pp-d0(*%J4{62Cz)lA_=v~_l3REWr~-Tf#-?5)+i+i zaGi75UnA-zfRIQCPi<|+`zfKR93AghBmukn`Eu~5H2JPkN(MT}MGy}?m|Xm@>}SIe z1Xe$_PAFH{H!>g7SLAdoy{QIK<#pD2@*mHg>8;GSQuMEO7ooNn1#_T%TP zHq-D$Mir@gBt7;Y==K=7(AUb!O0!=wP4}b&68uykcDBgJBXj7RQPLtV(r{A!eNq(r z>h#~+Fa50kOJ$wI(l2amuWE zo~B_r>RwJ}wwO$G|9qY>Y=-9FR|3f={}FXy3M=So2}t();e}GebS4igD#p9>RUczk zMGiu+q(j(3F;x~Ky--;X01o@R)F57=d~32l&&l;{`jqhwcEEP`)se!c?e1A`H#g&Z z;c(~aO{xyJiz}USX7Aj)38~QF{^C36X6OZ-SEMvF3y4(9D_3Zu@SqtlQ*0D@7D$V7 zza%+)MG{~I&S*`>>0=HpH|O;)jJT~w$`-My8^Eb>It-sjAB25*RE49M(4QW*DnVGh zI#rAAnqziwEblw~dj#!Q!ccWLRkvc_;$>xYNfb&EwhxO}%Pq0;S8m7atA%^sc=b{q z@<)?y?~a1~0l76BPIOkHlz$5hi|lC?>Kxg_h~Ysf$QFpH`Ijj;9s)YUoUnf{9S(Id zh47K(k!FmU*}R%l4}!b^*wL^K3@ch$5NmvPpvV2ar{@oIU< zpVPYB?#~g1<{Y#7CPe3j6Psgrn9$X7yJLrrghPi%kiJ(1j?QzkRuL zPm#DB8US`6a?b>hIc+D15H!rGy@*?3H{m*_pi;SxsgU9c&)ip}?{#KKohBhG`^XLJ z$sWylTh+Gi^+E@$Efw3{QGU5`RmlVuF2X8xZ&q!gwIzi(>|fI;tg7lGtAK0JFvTml znvfLNv$~cLH_*C0s#+_hR?Ojx}C?{R}!k=uxsvb@{$@Eh>P237h&pT9) z7S={*h~UUv{vjEflSHCmOG|oHO@gT#XtIR$z0(ae$(9goAx+g}owsL^M5?(?-X{kh z%qhy9esqfL?L|hdMGfraZT<*bbLx*IYdO_Q2qF{2>DE^&#p-F2)5rvI4E4T1V9%GQ zbM!*AmiQM~rfj9K$}sC_Y{h3+%{m?mgJD`PGa{$D!~Pq#D{gs)yTi(-*2%Tvx1pJ zW)Uy@G8s<8@$Fg)L%qZZ`){5gl&epL(c$m*(Z+n-pG`bc+r-crz0{pAUF&QzP)l%M zunO;#9QKA7nz#yF>^1>d;4)3DzLm@0JohlxW@Uhcaif}#4s-8kcc}&^RU@p-ZbKLr zxQN^C`V>zkdQziiH>5u!3`y}yl#)&CZww(U==wKvQ3jPLB?@pSY@qoJkp5d3CQ>7$ zSM*D1r|RoLN%ec%-BoQ`i82y93M(gZ8-df67OR#c;K^RYtP-aO^QDz!)k1%#It;|U z1=@*wKuC=@bj#M4RZHT(ak?$t8&!{CH)nG_uJ z?h~&{?_^e2fen4N+ctS0wj?o=Br2R4nkc6KFwnyOlmD%lGLR4V?5n-1{q&QMbNHYm zY*VE>LbIv|P@(hpYgj}q|7bAQ^fjeS!D~4%xqS10HoU&eF|E+UXiMN9&-9=Vy(NVZd%BiW32}{<03;pvd zHJFG>{qL_w3sl{fA;U&TII4??(Kyg;WsCV~L|&s^Fn9~t{U;<|LpU{kchI?{w=P|7 zXW?5)%)WBp`YHBtp28ev1Pi%}hi~C`8zyk&kJ9^J zSJMH?{udP*_MZbpyWEt~Pu~K1BukK0Bhc}b-;k7ix9Dt#m;A@hb}uN&O3LnRtH+V& z#9uP?OFj?BsSlGxi~yJ@Vg}W+Svt5pH#u3W=R1=|sxZMw*>H(c+aZs*v5SZNxijykePXjGW);bvA3aCtM!Ja@ap{XOA4J;IxX$L> zpQPCw8CLkR*Xi7osX>)aYHH?wA@1}is@g?N$}*^{pCo#SQ4UtgnsSA!hd+L{<21aO z$+JEWc?B7PzXwaMQsW58;A@b{;I>G&6X_<7Juv)#GoG@}kUk`PJhe+8ErvJAK@IKU zKaQue<~P)wf$L&p{D--SYMr3&xiWJR9S@jK_`_Ufc%tqr>R-I8{IX#5HaE4|f)SpY z_7xYGLlD)&oW4zwrei~=%e5L+HbM|->JkcZ7_2ek9vAugykPY1mAR3og7JkIv6ePs zwSKln^lfB5vXx981*3iNzq@C`)dOkRBT(FY)C`jkhCMW*y?ncTS4QQQMqgypZf1LB zamSaKKvPilr-%Aw^iFlH@O?O4eMjnAH$121N+vGQSmc^Xh?-Kenl;%g^JF+29KtG_ zif1#n6LCA66He+@JNA+6b!|@3si{?202-3`y@mbMl0I`@2hh(>-}lGi%z#N2$fetv zy_K3KoK8F>X{mCyOy~Fm=*W^J?-x$Vt|RWAr3~nuz9qdE^G4?Rr-%ie^T^CPDxeLrk>&*&~f=W(x>wJ~g{QF#rs;1|=!dhqZDS&)H$N>9Q&@q5oY zJzJc)*V>x=jmOi-rWP5ov|YutbRnI_D9dL3#vVPYf(c2Ph%ApZ9WwqeOvfWAdE*9) z&JO%jRKWBw3Ai8JOD8sYuOwOd6j$3*zeYC|K5&TpdM40RYgY{$B)qK-zt)|e9X=F^ zX;`?V!mf{nwYFQ$MoXnHYS&?u#ym3EFnSWXOj3Siy~u!ZrVwNPGCI1zGF-8}OY6sX zD`sm%Ql4#!!;OR-!jG2~5)r1Ap?(B$QRUa1Qr_|sGr85zDQX|`o>EFWzGEx~hO$cf z*G~MEd}g)B7R#d*3_Oj8TjKX_iLd8H{WnTNtSREP+I{I6kzfB`1Qa(e;GwcdsNvos zrHmUFCV`Yc6)dWg`c`v0tXaqbalc8Rd*9PS&Nz&Bj^eggkJjmRCCAt~hXAK!uRLT4 zGTNStVbC0FUwCAxlQ^?|<2#vMOd49uX1be6ZlC)E=It4dQm_Rwq9waL2ez9t&Uo zr~box^q;Kgkb+>;w<=Kj<@kxV~&-zNft%ck<2eIK&Kn` z;_PY7F1SzK$_L0OMG`7YlT^YYc8;+|P@VksJOb}#QWi-`*Y9|>8M8z%x%+kmD!#)V1}QteZuqjsCp7p+8J6cJiRx!e(0RI;}o zRcV~0#3bA#U0U?wCOyBO)Dz@>QeC?|NG!&^uzw?&mmN$ z|1Gv#D*YFQbo4)@f9D^j4?k`qV35d+;a*Ik;zk7k`E!g@pNDYV=$8bLtwPy~k6vQE zcZ26eW)$Uw@exET?cxP_{N}jv%WNH8bObc^z+2HOL_S##`g7>X*d?{(){Jt+x+FWF?Lkrbydas+B^2sliI=LI zi*!k){~&+MMJ~F0BRuBfm}wPG*AIEG^*%Gm(=VFi3oQDsHGc1xNmba!n*_PrK9S84 zJ?8PQj)28wpn8XgU2pax#|ZxeN_K~tgyKFSXrHo7YRJwX1^mKjr{gY+Rvh2NvFq_i zW;z`9Wyoxp%Fp6)xplB?l(uF75K`b0Ps#FULvxG$;HfpgUIOT;g#Le;n+%(V7rdXr%^}oVTDZ z?drdOo-ODY_0Lcz6~0`_j+nrI;Fy^^pF+ng$IKjF3)*paOdG`PfCFOcP@H@CO3HUY zn9_srz@1u*ZQ0%MAP@U#!0EBFm+&ui8u?)4iNA*=hkmkN=4)k&UvZ-*^ZI<|_4>@~ zC7IVgnOCV}#qqc?JoDNw^IDd9?V5Q#H1m2}QgGAb%B{H(fAnb_m6}tZg|y@UfREZE zXtc^t$3<9~j(>g{W*gn0pn`g;pl7mz4oU^(6NIwZ_IFUFDc=DS6>t{fv_)V}$$B2e zb<^#|vI-y1`COMO=QDZsHUi)ST`gZ@)@vp!`HIzO<99al8q57cO$k39m*<;VT~G-}Q<&K1ql-MBz07-PB0k#U>`o~(iI2vEs&i}tD7 zK;u85*Tj$eil+CfAlpVOrz+*X3v-RLfe-MgG353gaUN0(iagHoeeXXJHxm;;PP_1R@6kD(;- zHBU69zmSuj(xd$pI@BGeh)2S(UAnt6)Xx}#4>s<9D%VrFY3LHs7lJE%2>a(s)JnP! z|9XxydP1dcXGNgj1b4)#au%(W{7@Wq1xn=z$LLA~%+gZf3-c$3oa9Z;pEyQ4m5xu+ zncq;C($}%$5JV<_zN=^W^Z3Z=oKF+}L}ro0B#{*-Dk91Lvb%8;KG`)Z8vuJ*&b!JXyz{7U zIxumr&{=d%pLB3|mms-$$%U8#{5bGJ>z=Tp%?pRha%RIGH_2`Rh1`NjrLHxghqqIUT>t?YvfSvje#^ z1_+oj?V?Scg0}z9>dUa?p_URf(IIK1gRE|X+lmZ42^V>7U%duW^r^=2U{xMMRX09C zotjnOU>zz48=^8T+0jrY#gq%?^V}JykY$o6Q<1wH8;C4<60^vbq7i1vxU_qR1uFFp zcL5DJ>Q3`O_vkdms1Bmn1Kq2I-__WrO3$N5-vlgwW)&+X&YU=!H*t_80YiL zI=OLyXeIXf#1(6}9@!WMq=GGd!brJ=w3s+vg;jEtkO9`(aFJ;pbdbPGbMK*=p>D(l z(`yv*key9~c=xHu#zGx(jQ*OZzY5e>1qZ{u#&^m0p1g0;SYPu9l-38$zKsDdyERKz zX}B#9uhEK!V>CW4A02)tOB}hZC|wmAAZzjSgb$IWL$W59wB5>ho$5w)A5y$NaVS$P zX*;K+7=i#-%e+fkM@Eb;kd_7b#Zv0t#?d^+aTvxpRKA@KZz^zy_DOJu)*3upgMUW} z2zG~`c>#Nd25(D&zZbCAkZ;*7AX|0A{!hpVi*B+^8}ToG4DTRjm1qMp(Vs6hr5@Wv zzudek?0-=qSIMq4=-;zUlDXQ~i}fCka3b+vQ>`1_5}EyVIy@%zwdm{iEaK^CYbmVo z2^?Y!B}Rs02@jFDWvh_bI5fMqQye)HL@K$L3&mvf2EYfDS1>L_7XJQnq3lY z`*-}W$6n;IhW`~DOffDPY0x&RXOWzoP3bz1NYa{eV-`K2fV%WibQW9P>KQveh%y#v z{xO1Rua--&6re*j08X}S;(smwT*WecIajhQbqA9=o%202Bs*O$h5#lX*P~Kix2CDF zIU&BD6{l*M;e#ltOG_7KxhKg2$Hi2Ylt}bAWo-}=j`1^(pwr=d^)TvrFf4dnJ)nSF zc*tHZ+}w5PKuT2frwUGRd=5dlT&T(z_KPeC(EQZ`x=vB|$ zW4!(-#o~I8f!t@yG($LOyV!QphhX5l$1G<+$IfwXo8e$qmFfvtL~sw<)!6Km6cHCE zOn1v7!dqa%?+r9AIrJ`FhWv@0o##F-fpOzqQM3Z&UM9g)VRz}UCo*AnI_w%97D|Op zUMiW+NT|C1C)o?3uPt{QU8h_EWFa)?z$LZNDE(QTB-`CM1{lj^xTji8E20WE(COfT z=0oXw%!?N>MtMhdLmmDlnXvO!J~=C$A(i*rlH#v=}*bJ99tDp{|Bjqkwaj_-M zXp^i6in}A4?chbyfI8mb%j0*pFASfAN)k;v0{T#SNFREMu#Y}eMd&GAI~{42G9Q>T zKs6~E)1ZNZ?Nm;8$h;(pb2-;;hOVj$k{{wIGsH1^NDgIL_-2$Hs-f#C*BdO;{s=~RwEH0`)W4KD6704~GF&e|%Po63S7Cy_`0Esj{Z*k!6zD!U7IeD&q%=!{*5Mc% zc@H}Is{|BP2es4s(rIIRoeOg8@|=K^^OJ0K=h?`UrNx|`JPVv7itAXpZ7=Y0cB#({ z>}IG@UPwRhwI;`1lIF-yQJ{23HaQ1AlYRz=Cryts?zJE^otc6%sl@;u2rs6PZodeeSGlbBmUuA zUWdtq$n{ueN=K`&7|P20XT_^!p@ z9O1E-G~@;GW{cUA8ymGjna48}pyXA-snt05s#wznGF>B$)<`c2s78UTMcX>LR|1Z$ zCz1$`TAP%D8E=3_5psNPFG1Kugq8?1(+Ech!mkHV2&WNtZ3p4-XZNS@=QP5nf^g;m z2p6Xj-V%g?2OyNB5grkQTUsCl%#)Yu5{#2T&sY1UzeERKDS?Ii2O8fzk}kg>lpTPu zB8_ka2u?{?zGDtKpffjsP^X6r=s6AA$%YO<2Mef9gEnfAM?lv?pNQ{k&@X7T*fb5A zuR&V`v_VIFL4!65XpY8uM1wvN&?*fIYtRY-?a>i$(V$uZHEFD?H0VtM6>LRCu>7M#w0*cUCBT5Gk+K>B(dhSh;?Ol ztoLzGabQ{(ORTjmVx5s4>oH=5{ie?Pm28B{BGJhg>-D7`C9G6}voom|-y@rg-JvZL z?4%3#;{zl(ifB596mAV5V(3_1iKW#6zd>Km*b|b3nU_ENN+TJ^ymB!v#ou%H;61m6 zII_0yR@P<-*>d8d7*>O*XcoqrfM7aY0kM&mdFv{j3r&$h0;2z(`yA+aowZeUhVO2=J*hrkumo7J8F8KYt#1{;6RKJTGhsZZxk)purM4;_zVG6zVkh(;7 ziJl(Mg7G8&dQ`@o7w>9VCNaq@TY9ACd%S{@BEuK+aPkZIjrICQ^StYQd|`jJ;eqMX zo`=Nf@>gEu6q0=8U(UxsIqO$YgOREbI-Dbz=J4%GvbySz%>cwR!AAZ+=l>)3DYqGi z35k<-E64n?wMk8-B5jf+XfGh<_?)YkC3WphM2Y2oovjq5ei!H@(0UdKluxy>ST7KF znkTQ!7zTC<5xTGpqcGRa7n-9Epm}Qw)%}@GD6uCFK)5W8@Ub8)KLDXm8sQBPl(0!1 z)WtkW{u+m-Fmw*dlRFjE#B6p*a=&UXZTo}-v@SEwLw`+1&!n`X5>R*JJLsSMVZdX{ zm6l8eyCo7m7v-Gd3pwfRi{*;c!@Ler^m(SKh^~h@S`X}DGfqO>94om?%1vhqy?`*!PU^1RTB9}DWWHT17QpoMj*X-`0pmTsgaZFdp|+amm&DfeKXH3Y_IC;|RsIiH z-*Jp$)DCmSy1fmml?4!%N7Wh#bE$bhSOL=Azu8%L?Iehdxs&sG70CNNi!C)3pxkdAC+ptXr*Cr_DJ z(hRspv8U)-c2bPuH23I2&W9CowcnftF) zxJ;is%SYl?IFr%8j`0Q>zI?D)fNxO-CLd-35D%LnwWq9{OEHd9W8$hX;q1{WE05gl z%j2$UF*?GweDVYh;p`I zbR-`wvrsvCdhJ+|4GT(c$GMc|E=m*Igs!54+w?EqmEk<{->LS*{m@;O(`&KUhUUTG zPm0hlm%Gy08dQcT_sbpM9SCxKL0P0<9s+R}z9H_y+iH&NC#&ywoR??1zjB9?Y6G)} z>HS@JbCCUP;^_4E^1*698_OLZ%QiQ?#Z7j%u|3k9S5`C#6<(YF&mVFzomwb>H3K@togN_ECyPq=ceC6`!p40f|c1owREhgg;Gp{Ux+T1tWC{V`x) zKr}{Z0sFQ_xSf64AuSJ@U;C2VM%bzw+1kr}@iI;*vk#qfXLlo?meapLd=#*QlM&V` z*#u=y;Zy^Y+e|faD1h7QQk!UxGpimVBx-FCr|DA%@XisBTyyFPys2Y#NAVK&-!+LW zn^lMNA>=vboi`wQVs+4W*HE@nUUcN*=tcCaaF|QD*ujKf;{}e03YW{ zQu!n!sU?#-Mv~&dJvj_Sua=HrRGx*Os?x3Fdh7aU*2y=3J|dTzY;AR8N6b2f*^PTW zzLHbo_DAl7uaG{O%%hyWugx33(z30*$pd_0Y21;ey|N}`r}r<7oA+)Y*~vHhCP|;L zUpU*8&8i3Cnkp{Sow~Rz8fF)lEu7`vWn2UQaq+H(yVd&F_Hs5bi(`q>Z_Rr*q9YSB2hV=V(wlNaGh|Dfs!X|$JFkK!!ujtj9cvy~7 z>;2WhJ_DxWsl%m7c;ds1U8vyfzfLSrFs>`f?DtN*kipA_Lw90|t~qa2z?mX?D(JN5 zl~dSvYbY=bXl(Ei{ z{`T&D;Og;V3~XhnfL{c@vZ+$X+TvyEXgb~WXm#=z8%ogm)+d4O31z%n0;9Jdh}l;l z&Pd{A69i*_>#J!G{7WPk?Oo`}sdVzsv z&tLFQdTG1EBLs3#V3f3J90!c5>_U^xlP0bD$0T2r@ac8vfta0}<=7hi3zmd)Ay&m= z_tEx}Jm2ZqTEAcq9F#ome3A6hEYS8)bm#+>R~adMsHauBq!N2=P_FBE>DA);I6pU- z$bowjIGiFXz9>EqT@ow&R+%7A|0CPDQuWV{;dGJ{1NJAf6{2)`D5>w%5g74iqtYFo zPM7BF=Cw#V(7UrQr23rw^APBr;|p~fsEe%1M!XiVhjyoAYOExSz&``_%k=ynoLLP>T02QZ-ARki}t%-`*Ee zWk~2fiXYs|M9?tmimp|OK!3b!^eTFaV;XoCLBB-G@(LPi(&5mR95%e5>&J4=N49oS zpS5HMfnZqUOnbdG_TD0OVxI5B5EOYbUzz>jL1*M>oPjAm-i$4#=>_fYb$2rP9#4U& zWs6ME3Y7yhrKbm2&alGd83J~&P42DG==EiH_;z{_(WX`DL zYZTo`nK>hV98TBvgp(g-RZVPIpS(x1Zy?EB99UBy-9R7@HS}_K7>jt09!Q9PF?gIp#@!_fbQ4&ELqLE}@|TXJBLG8w|UL5Ip5*c91wZ0OL)p2A9w3d(7a#jP7wN_j^N zM8-PNk{5fkT{J2r=TAkzTXDvV_Sh6EPxeEN(hsp$f}?zqUvb4yN46usVwAtAUc9xr zw+-~nA3d68WA^_L&o4x{s!0@q<=lhp>_U73-FAyVSMP2{IPPg5Gqmw?h(m0z?LluP zNX%?x6oMM**mS@dd5=~cdJsn>;0dd%yAt7KJ7aS5cB+T$m+cq*Ds1q~_>*q5@!GKi zJ&Eg-4y0@9+vwiT_oezfOP&xW?I{uOngxo@0~jDyEMpGlT82?0(K(fQYC~ER-YPiS z9~u*2I)*Bgfjvv|vd-SrI#}8`W+dCee}PHpWAT^P?Q@1`Zt)r!1o9o&y%AF&bx3U$ z)rpyYSzfnDm>BMTzae2>=xQa?*rLsPE{^t5grU)}AU0a}PggvZ*6--XT=#;$oZvUw zj#Ud)556Q+A7yB({AsM0Tsg+wNE{`&mV=~~_c(_44w)$4Jwe4#`iq6->PB$G{t08~ zS<8jBe1MZ!7vL$GXJ z@P~M@jr$}fs4|#M^?$}>P0p;ofGWa27oSW{+QyB%(4ZgesleS8flGn86WD8;I7-(i zchC_)<{vmhp`D^*bD>d*Z5+!-q8SOw$cLibS}5by=ysw+ws`IQZR3;qnqJ&&=evBl zkFdE)4Z?N1RFkWe>r9wTxdz;xEZ0-K*v6~GNSpw*>8d`i5HH1!KP*Vq&6P(h))D#f zR5F?T)aISee)ba&!bRy9Vkb0Oksh~!=B;c8cl}WCR34l)zmj;T4ZBU#(=F38wQ`OS zr-}`22S)rJi5%LI_*G)0`5p1QqlIYlyqvn`;B5RrWb7UG7b_HQU5LR!{w=E7D;76NPL4p|(*sYFj@9I)j+e@V(eTobF{)Z} zsWL|EW3Owm4$mYh?jwbs{3XjF(}eyTfw>;Z3ip{N!<8Tjzj3}IMKY^563d)h(vvT{ zG3;L`&}qim;G5Mi6NX1{0FOSm~>5k|x`qoW|r&5sIbu2Ib+><_E>`9Gs~ zrWxD$t-R8l>;LvPs5ebBz61d3aFC`MAM$~##_Cs~&AyYH>Wu|JypHkKts=yg?YJ+C zH<}dpj~q(V^dCh$Z|Hhe2>7AuQBBS@%oaIN-)cKl;u_>CU4II$2AzqcMcyKty_Gpt zYeI$!m}XRvth<|WPsCqCM!l8Kg#DlM;;H1^oPWwKx>{}3Uc+Rh-smV9m0Q(DKu@_3 zlk{Vo#t&9aHE|VK8G#G?uLIvx*(Nz3mFRs~cJTDDzr1Dm-u=UmYY|@Doai zp?3%S*lJCGH+iX~PuolBXEi(W|1kF^;8j&u!+$Q}NI>F^NFWYquviljO{}S;cr}3p z&V?IA8KhcgjbN=sxB(mq-UM=bdMjiN)gSt)n?kI1C?I z_z&qXAu!kme*TLuPMuLA9isTD!T3G~JxG5a4o408yF#8_>0gn?uaE42zX$QDqs;@- zuj(5AdG!JDk9Up#?dSvIf8Hft%byv`DF22o@u{QF?UMfghx0{xBx*0tKE0rhD+%^=L8yB_bH5^^v$Xvp6nd9q4tWf|DSK1H z+NzIdGpaLwJpDOmm@H$cmTZ_fvR6deMY6;6p`dmLRcT+ZP)F~R_5Z~Vw(!&Q$#|M< z-K_$hIHI#~ro`)iISemmLDq~o({5zi|JGd!cK?3qZv%cJEk}u8jJPD`ctGp6q3{ zV#;P8>m@{Cw~^~*m-w97W^1YkPL4hJ<=nvzt~Q@eHFq*T(e|p>3+NSIooA~EO=ZQj ze@V%k5K;Nn<{1x8p=0f-L!C=TbVIGeTUigvjOEKN`^hy#DyH*e0C13P$Q^B5mw(wK zot+{bi~R6Ry&SQ6582KsMjB4n-_Adub=LLJL>`IoA?t~p#jmHq8Rr{0_xY+UhwVmR zZ)L7w0F6o+?8F`{ZUgcpr!BnDEp*4$;!!f@>`OW`U7fqAx?xlNqr{h2-nPLu-j=+q z0q^ir>{!N2{HF7hLLLPme+)N9iwu)UT9(ssMV@*Z%yG}&f34UFjir~r7T06{vYCVW3{HMwUuwL z{0}6m2?}L%>bBzfVnYot=-mxkU9L#eq?|IvrF1g@MieN?zY_q96nHtnV*}t33Y2>G41oJ#aBW#vT(o3{&jLLnY%gp3W+@iZ2KnWZA zIg<79f+TPOG(nK^CDb^b+uq-+ZQYtv(R5lDXcG)EKx#Uv%NG@uIJPdR8bxW{6j%ji zC#!+~5W~=joHhhDw^2gc<8s=v`Z)d4b#8I%yjaddXq}}I|5=^a9JJ1Ty43O;>+H_o zt__ink?!^DdO+3xAN~w4WM%(GQgK(ME)o%EkX#Ah9_13|2M}gV?%)^7v}R(}`h;C* z>n)!+M@bChI8%vJzJxf>&9UC{i8FvT6*xo0GgvR}XD6Fmf}phIy`BI20$na6swim_;^B=2O_v+Sp%X^l@p-&7`d`}q0TuNG(~ii zy#avbd*Y**;Fr}hfw60FPZT>+1ioh$@9$j6#ljrBtVUAt6I-U`_5T(A6wDX+$<^wnhvvS#gmy`S-&&mu=60nyI!c;OQW|b`Q!91;!MSDa} zW#WsR=@TkE86G9LCdoS}UKE?oBOygG+N-{~QP;q}D1fkX(WV?Qj4MEp_?WJHNbwJmN=WupqS-GH+0oBI}8jNy$j_ zw7tHj>b&%+S0U$o<`_czKR{|Tp5uR1wzuPbymC8vu$)aw^t4@Cwtp{9edOm_<~6oa zH(pG2@rx&nE9J%qF+1i@B+k`~@zhM7T+j6}o6W@8S@A*62e_m%QBMbhyL%kxO6gNO ze~^5)ci&7`WN`wce86$!>fe)vzg$MsJbn9cDL-vblY-lfFE0m1?u&kaEqrgc___4W z27$$^wfCK?-O?9~lhU*7dNsKu`__}@kKj?yl}@FL^B4K1U5EOtghyyWy9lu6ofPW!VB@WGJbZkn3R|q9}B579b8K1 zE?Fh^{M(2(v-2;NA9u|^+~p$!^w_;|jzqY2gAoLqhLY#^0@$enD{$(?SK7`WC=uc) zfGEDLMCB}%*FHyaH3So>E&mHRmn(vm?I2j8z>fpqI|MUCxcrxbs8)iqn&&?yIDsrz z_K-xJM8xj{(+~UE~Ua);7^&@-GmKZESk0(ILuLRpyus)kGRMMB;Q%z7+rq2S3qdT<$HosnYY#zIDh=-c0@4}RwZX~6KK_-oJ!vHWpi`(1oi8)^P8mD?EEQG zWOB09v6f)Xm0Lz9dl!k|Kip*k1w4aIWK__xpSr2O!%sA{G+O?~jH8>^QVbl7_Y!@9 z6%X~FQ(MkQ?(kaHiv&6fA<4j{;oXy@wI$BTe<;Cz%%|LrC!7NNAvF045y~N! z3Wn-?k!J`(rzm~-j}ol1J`YIsK8Xty!2F+SGNsf6K_$SO1Sf-gTq_a6JuVNBClbUj zL-9u|SPAxQf*A~?B#1eIppxq`3e(X(Twua9atNeZ$>$gFvAIekwh>Nq_}mSAxs?4T zA$M8MeTkrw(GrDe#!m@MGJceRo^Nq`^?pII)4yJAXYt zqm!o>%G-;hT++K&=)xOi{6cu(;Y4ZRR8e|?5blmaEcE~M9wf?T;={A)a7vq+`{ zSTEVQT~#MA?mvG_>F*lJScuPo=(wS1S&X-IJu_I$GEAa~<6@!0TU{mLNj$2Ex( z_X7lR*XymU*tka{lvI)gwe1Z7>_&njz6b^Vh;TrGmrBfz)>MJot=oJh$M<6dU^upM9VNI+@H9dY<2d>0vIHN_ zS$Z&sO9a#-TTuCBe86^GTYHfg1AKr4t#xf#gXIig>*hk&D%ncX~-j zR?*YkErbsQhHh!BQw+QtokYk|^veLb$w!{8Fde%% zL2F%lCAvC@xlm#@Hx-b_xdh2tc$e1aY`$F%Ri^j~Jc*!IWuU?|_kIEs`pOMp-3V4l zt67mC?oZB_o;tX+_$F~WeO?hHR|;7|(4A9H2f#-NX7c;{f~a2-)LHZs!O7tFH%Wx> z`x^q}S|9mhg(F9}&b173^-b1LZM)u%NZWJg6oVAr?lftRFzPvb{B#PSTJh zlX<=OJZY5{vW1{n*z-39u(t%(&87IX{ikvw@+8N}lw(J&mt?u`qSh|a4E|%a_Dl}S z`^wzcskIONRd7VD{W@9lKiDA%7*?<)plmAml+noeqKh(j2-3FL3}90?)Y|Wa=k8{@ z6S^qeC?Qv8+E#_Q$Up>|t&*(htwOJ|>7bHgpvVeQ2465DR6BWRD0BKsyv$uTS3GR* z3tA4c4kl{=lezJ~p=NYND!aOb4AW!sdQQ3kNJcJj+LJ-EbuUn(Sv@rM7Rs+=>%QwcTxa6PJyR8 zKYm!y^YbJonBuAo?w5s(g!4^%Vl0cQUFHKmvB>-G@ z_-#d3c6hX)3uo@5FlC251Safoe~o0pAtnWHmoJ5XM92faO;BO016Vu3mf5_X#hbIrq`9+AgUX|gU>DF9Fl|p0!HhAvF^IWdf^r7(b6uH@OXRy%R4{GFxqK=uj?^Ry8zwLj4o*{;w&O&C z8SN+tVsZsrs?%LiGUm>wqlu8Q=pf+LeZ9a0`Avms-CrVT?Mn~E^FhoL1ZDPh)oc9y z8CSniLvW4t0-WzToxnF zwPz2DhFYWLpUoJ^mKf*vd&>*$&fbmg8mifeqokggNzOu+C4bp2R}MKsE~MY`oSC_c z>=)%0?DHhIJYUi3Qi*htE{#pB^2LAUtYu zzrqW^)XCI@g2;1AEiv2*TOIcOX|Xs!2Bddz>R7DI@qcR++72=bT-bn@R*X|V2U2YX z6J&%(;<2RnrSyi-;P;42veeR_IwBN#(C1M;LlMZt`%g_0nCV?+d zb(sV1z+uA^b;h5(UB=4Aa2dCV)H{4PjzI90z4ormIm2Jr6HQf}sYEobLNx87&wNrP z>%uWB?fk2Iy4+Z0)UWK%O@G&A!mjuvZbHhsgU<_{_4f(Ne{*}T%Gx7R-?*H#{3-rU z|5v;eL~s=i0k%$W%ZfS%^O4TaDr=jT?*i#&mk;`_^SP}omE*`kL`2E!U>SYfC8KXt zfe?Pay1V7o=zt1s_@)ZEg3>|j3rQH)ON1+oUrEqaXucl+&r#qR&V9HNqeGl6F<-0D z3?x<+ngRk<)(4(K(~B=xo5_;ot~FydJpsF&f1Sdn4X_W|3Wu6L< z|L!CIm%>z)`8B}|Rpuu_%xuBt6;MZ92$ip5phE1hjjI(&*l^i}g2Y@m&I@281qL%W zA_`NX?=*rLLf^N7m;%9u^BG}5$yr*|VW+xP?6t{(rOWRacUBtKoqe&kvu`gN(!V2!X%KAD;%^q1QbYzF)JiN2*SJ_y=sY-IU_u8` zg()4JMKFU7P7PuP3AWI|(FD5CK`)6BItT^WyCWX<76RT#Y$TXT2djgqc8T)nK-~l@ zaORNx{YQw9O=WhMGkjR`AC#nwzx;F^|26LTON2N61hwT?2Czv2D{vnEm5%;si3mnt z1~I*@e~Ms=4d(<+t!B=n2v#UCF8~?@GY5UwnNkDA-%L;keFK5aL0=^iGU&?!$qZoc}j%rbuJ( z5!ZewOXuryiAh(f>(*gzkMN%Q>;H*&)UMauE|CtYvNn9xJ?h}bk_?sb8>Gr$rUgQ! z%rQnFSX9QOwMth;auNIi3RV%x!WEM|p(0~*U;LrCb`D<}abZk7##3YXlO=ELF4w7f z_o(^1=;1pa#+S+!RS`j|l2b7Fzs%-2qKM~VHuQULCrVAB1@Wl$ch-xOa*AEm`kuX)l{i>+yi-yos*TL+Xg-2P~L!9^L%QiR1Bo1^5@lGS0^VWb)KMXd;ce zTM{u!`ANaaSV(V`2;r&m0C|d!e3`rO`iTTd`!nadRTWjtDm7O`hHd%M!xxGm)W9hlqQ ze+u%sM}e<8j_VX{NldVS9k31YLt?ehuOJ{hohrFZ;KP+%#z<nq!mvlT_w>pD%Rv~n#$t@`B()8U^eu;an231Gto){X4pY58S*d?our zfbPoQPm^i(he|Rb#cm4I?Dw4RWxthx*8v|0OtR+&sr)s3d?ouDP zn6JUwS%3l0uXe}!vs8HP^#+uj!#v)2>J34!HjcM`RjtHR|)FeZxfu3)(+n# zZ-GPzRsB6c{-eO8Cw{Fk?TMce%%G~-K}=k*g{poiD8X`?dyz!Q96nzn{GI=5fyxv< zlYqzSN(ClFSVX|*Oxj`n0Vr#5Rka*GweHFd_MPSxu!BIrBt8(Zl(3F~SHi0TlM>nj z*s}y-5;~Frhrs_kW33*FC(|+bK;3aNS^0N6b3mY{)0h;WlkS6vyh$SEv6X>bOW<55 z5pvlwru!mX`m@2f3=Fwal$3`$V?dB=u(;0Bj+~=09KDv9QjKYIW6so=EpAMIjall( zoTM?E+?X$aD!IKNF&Xdt^an-abDejISKmFsNLKeXlM@Pgyy}%w5VCV0l^-f9-St-u zkLMo7kGWe*&w>KHyC8$LF zy5MB+(HA5_DE`?1`7s~)L4_&B|Bhe=#V3Q9+XY)F{zioIHZlcZJogC+i8UD8K#5MJ9;bI>l?e=0EPl3fJ+`A;yjH`WDFuL``9Phac4VP^TkD*U=Q2yO2Rx*o1OC8I zTQ>N{uLNM1-6N^hxE^T~h(2Nt9U_FUbN(u6?Z|Z!5qe+zpCx$@Nj}L6CwQQ@$9ayeCMx(OKfAY|xY+lk%o?%BgP3KLjZ+@lqZu z)0M5tbxwnuyjmi(n}&JG6GjQ45TbSFy}{}83+@#~AK{7T`eQz=o_TA6Zv(o~2kyN1 zL*#ow5Z^<-fGy2?289&orcIPe~<{RL) zuDxug@ZIeEN%GT0zVEkGndm5qaOqX}yGyU91;7&(_(x~vT;-Al67v-S!S{RFHyGj; zzOaKpS9{s}KwPQw4MHA&SV1t8KRgpeJxWmd!vlho!5{9H2;mRO0Qq(w`9_5)f4H7t z27kCTh#4=~!Y#)L>_B_jcO_O9<{_G5Dn{F~;{_%h^GJp1T7MY9K#Mmzg=M;`!lwjv zx$hv*#a^~fVoJzoRe;^*V?VDjf#y^O9l%PBQf|EJ^5~1TCAm8pI->5Km{0U}`e-JZXun)Rb@I6J+AwN}+ zFyI*94q!(M4Bl<@QJ9iJ4}uwFuvgim#%v*|WUz@qrWpFVL17OcH)ShTv$K$cA~20f67#k6`#oZneoF~-rQhR#xb&MZ zS-4trFM^r$yYJiSsBHw5em^3RNxy3(Lg@G90C};G{ItT9ejg#2LBGEbV(t`d;a|4E z4&+}mBv$y>k2Hl2{uKg~!T-L(bnwq1m@)Wg2QjA$whaDY0$m3GD2b85KRm!b#K->f z1Zlhu{!W6KgTFC|dQ+mh@-P3q2G2h6Qq{aJKKd>cN?dlrnxKiR}CtZrTg@iH6#vo^x zN5F8&=R1gcRiJA2s|jY(&Eg@7*U6LN|8>$UpIs=O|3+W(L6wy16EZLF{qqW}L!wq)dXDBQ-RL8X{3T z+TRL*1rn6KZv;)(T~nng^~;dW*1g}7mMhV1A*dX5QviF5pd3CDCi=31l@=Eh%%H`8 z1Tha0R9gJKpk(OscSwYg;@klFW*>Q)!nA?c5X@krlY*EU3HnEhD)?}w->fqC=^8O$ z2tOiobFT#tc3G}`C#$+481Y0xEab#O>&bIyRJyG{?0j_^eD>;g?^+IB!32ax( zxJ}Zzls8>~Sr0o)Zk9eSyGmkk1z_H`rf@<$hh4sHg)u943=vJIfH9naz=541u)~0z zLO|zVEIE=0<5<2ct-UxCIye&^0!D95rI8_m6-{RW+*2r7DezweHTw?&*jj-}_OB8! zlef{3$O{CmcGq)FviN5Z^{}8*mT|wrbY9&>5Xbnmla$dA#N8-yGA+1W#V-4yL?j$G zaay(2UI$pY=Su{ApyRDotN`NmKp8=;;>iRud*B$pyY@gYO{I*ixZ#agcCQDSz-ehqioh(IV-^JDE%wL3;HKEbZeRz zB8MW-!;M@a2x*QNwK2b+pS#gpbFag2DPC=nFOQ`#U#Tt9YDH4OVj)p#-zVe}>KlS* z*A;rn+Ja;oogFizHIXMYnP{{RrIX#~CM)rh-QguWR(ySNHQnbt>872bX+?LxE}ixY zLBQISL%{e4# zk=zo-?g1{ZG=1kLo^kT$t)2fCv8l^ANGWok3|pCLNk7x|)(UPK@6RnVx8&`GEPCpd zGR1qN#qFVGJk5~Un=`E+zoo0KHHpPJHFoziVpjJv$`?=D#xTv1d@uC!CEFY}dE@=L z*e0IG^Z&?VZAG5Sn1p8_87&$taV&^V%ptTcDa%yOb&V_$s;5lHlR0%(_W!(70xvx+{xwM za@14quu;3ce?Lo?-CMEeCn9T)k@{RB7k;=^nxx0!jfW4Dk?MLG%3a`U$)~$G_sTaV z!f)LYVb3q*XrT?V6p_C^bSD?!*30*SzCvG%8E%gpdHmus@fTkI8D>Z(ptJ`?4RW(pl!~wKa;OzY&crm5^h-N zl|vl2W2W9hjH461_SlgfM?l_jsC3Z)$$$y!?B=Rfe(YRI$*BpPRSE7_VnTHc?} za=OmP`^x=22iC`Y=G8spKKS!*Unn%icewLxbI<0|7PEC9>;D?A3u~TCgHw0YT9?jE ze1^G~dox{W?chNct$}w#BF}GxAMd<>AFGp{?SMk#0ZC$TRJ*$x>&$b;Z(H(26u+8{V`poN4l5toy`Zk zzL6_~^nUOBfl45QEVFd&&HIc>_3(t+2c7a)b zO1?(8gyDT`ON))y8xalJ-6dadAyH-ZQ+J86eP|y;DzP(Aa{B;E+FN6QdIoiPtlxC zQO9y9JuP@Y(-Mwikwn^(hxV%QC2A-Y3R`R@Z_lbAl>AB7_Arv=?O8$x<;!MP3uvsw zJdwp)nASG72+bpx*KaV)IjxG+x}mojS{1Vvd;QhTdlfFRxT4m&>0e}0x4HF$oMb{; zSZVS0XSxmc*b?qbFz0-vuQ9c5>}}3j+<7*I!Ea*4>*S3Y2%>c(j}mU^o7mhvmTWjo z%M9(1CuNh5OJ&XE&!y^eO-=dEnRf}4ic0OMcGvn!4an+{7)CBD4+W}%0_BCzT5Fb8 zG}Wb|DK@U)(C@+9Z*{vV^|~+L#N?(`F0W)>@s1(+My-lGiyhq--gvUlMV~Yas_aoE z(c+cS*7b)(LwhT!G5{WTu@+mSIFqvR5XQGZwSF_+uYGt4d7!!u*X7-`Zps7K3_ssu zwvXa6JzCO&ci48O%o{B-&ejD?(baJ-Xt@d5xchd~I&-N+&<#4Dt>siE*_)Zt{bhlt zuIRFSazB1?z7WE~Q76ZbCfB7(Z;~q+N!a5Pl~&6+cJHM^TQ$rR9(zC}T*j-GN4k7O zc#G(L^6bey(gL}gyJVUpGv$_;b#C5h@{`o2?bdjxbP7wDwI(`ey^gy-{Ofz0hCBLB zU%j80Y#DbMtnydl-n%09XnGEco5K<)gPH1!I^4QG$B?m=Znc@L)~Gz@$9V*n1^nZJ zJjhMvk+uJTlC4>Jj0Pv{ev-~Jc^>-fM#^TJdri3UY&y@rK*lVSL>a!rLr~|O#acKN zDQy(X)!4jLUf2G9Mh2m@<>`9qqjuwPBqaGGxSwT7gVvimg+DR>3d?^Qs?2&Oi-F)< zKL8T+`3b#Px;(t_f|H?-9Ew6V991aU)LQ2j2~B>R#RF07Z?fpwz2A_W7|Y1#poHg5 zWOm1jTVut%6y?SVwXx(_Wj9NLIU96jKEZo*YHG2K^43W9)Dlas;F`*7tg=X<(e9^WF>53_vBa>F zGes+yq9Y5aVnhZn+#p<3T8q`C2UTqkH^{?3ywV7qVXE+|J1b8g{+ZAGU+FfrF(15+ zvpub?+hiS;;2g`%>^z(BqO^T-3BA3U07 zDmS63mDv@X;BFTt>JH@G-@%VkC1g@5k17khxX10B-pUO+p7!bAo+{D1%`4#wr>{Y) z+ofEggY@S&?-7CT!qYNk5N>_5uYr4g8g1PK_u{74_#k0l`fe37HM<8l@(&Ush4Zn( zL~)8Cx_CQtuoC4^`5P}<^=;w0ov-k>n018?dq#i9k2pwQJNc|+?is@83Skqrg!f1&&f| zH|Ozrbni;KuIus<6N!ZfrnSuSb>Vr}L!z=kiRb_aQTeayw`>Ktb7d}!19=bsHqm== zYes?0LkH<5FJ9{%DUO+mCId$=a7zE zk+XQM*u+2-pJCb!uLvy)<)?&9VYm$!Q$~1h52*@wl(joa88Tjd%IG$_EIE4roX>Q? z`bvMmkMmmmu8=NJanD_+C{D~#jkD+pkxxCXP2{V~^{zrfrY-NPdgJn@NEkfTOBpgC zZaLw3Uoy;aGX^Kr?(;IMGVf_6J^PH}RRKM5nYCSZaxO%AZV69cXy-Mq*Ytf$&5+lt zR(?-V%<}wwy|IENK9zVYe+wTehp<0?g>I0+T)wiE^|389WsMdZS{Y@{4IvgA&7?A| zzB*hy0}#(+faEN?OaBC%x?S*#e?Ymc+sH4%4OhpHHLYo|Miz2e#qZKs;W?uVQcd!a z?E4l1x5^zISfAUy#+HpGM;dJR_uDKDwRn6|IsW)?FcvrEi7XTgb=RszlYPO?MYJ6KBxb#m>J4L&d`e+2ucY?FK{FXl1>Lw^ zG#YQcly_9vtP*NoW)56wCMTi=?+qp1>NE%L1lVRK_Jz21n5P}5p9)#`m|2Ye4M}$N z^Z9{G?>$(}%9qVRqkV3L5PeqsBbf!^26^s=m~g`q0+p=9=)*kzw;Y?7c6=559V35u zp4=~uHsTE)&ujfg0M-ru0Lt3t4&FD-7Z}`E=ZkPCyX>Z3Q0%JFq24d+tmoAitE?6n zgaSR4jUy=ZR5qFbGfZAUfuF!A+?o0T7fyCG%uoIGbLn8-MmifQb1{^3+=1bQuSZ&$n2sKKJRtdY_A<^PJO#`N)059$)t5yRXCV{x$gZ zk?+%xtU4}v9!ns!WNdSjJ7aD?iHacamrMM(aKlQG%#4>l>%n!_CkU)kbxj^f6A@1C z;g|Zycxck$61}MXJ)WC)EfJ&b?k`s;r$)fTRtO@uUg!n>@e@%DItBy{&eRJYQwmM% z1>wf|0MeNutfM2i8B1o?XNWkm7+hta2b*}2hb8p!X&heVZEkFA2T0+nC2|+@N2mht zMaw@4H#C#KC}xe9$hybOi(<{LD$jj$Zx4jufdHkq>%kJV_`5YCYuV>f_E+@MklQZ#ovo^GH z&OTXXX7pl54)M5Kw75m{A(MApUDM59ZWiM$UAZ>Tz2%(D>dFUPy@wv3`zSfY>_P7e z@zgYK3OD=-fIE*XF;A34?K20FIju#5V1Sd4Nu#UuY7brN*r=Qy;huY#GQ*6zXNLB0 z`$od)UWxEo;v9Co$oFmm&L0Y4M=&PKakobp>WZw&;$89{b)NIVK$2ejh!0NzsWX(PV>{jqZ&<_=iCNBi&MnkOMk*Z-{bmVLOh<0P9AGGo(3r@T7qcp_0o?yGCm27IQ+$k=~6+TM4acL0z zK@e2tDJ8cX69ectFDNQxF>DjVzCZp|)`#AbQki%GD^-U%WvL?>B$jqFvyC5#4`b^G zJY@DEYh^-5y*;svW=qqZpXsg4zZ7tDy`-{7&w>RM+I?!Ru|@Xb{D0Cj6i5@so+9hG zKFEN?W+hf?*NN8f%e5NJ^6YI^V!dSjr?sK1s$nOrXK^#z6MF&49|^Y;Y;Tm}70}+8 zlMW^vf>NB>-dL1|HkJgzp+PV&2o?mvLN6G;eIt^ayZ4b^?NuI&s6RApVLW$XQoC`G zeo1Gr93|6&*$R@@-qaP zw~E=Pw~hN)>Fmf#{x|KrA0i1-ZXHLQCSrA6EN^g__Bp1ReNGWp$DUX+!%cap9ktg0i18&(F&KuCUynB{Jx73DLafcMGd0Ql1zs>X5IHwf*k{0KCH{-1w{JtN&8%hmcRPQ1Dd#(3z7_E)tuzEQuN-P zvGB>uYIr=nN1HK?;R@Lcgy~`LZroj$(|}S@MyfH%c%Ls^Df-bh93Y8>R`Bq6c;0eQ z5q%|bnIwipN|NWoqRLJb_s1#AbzUVWUS=kLdYGwItbm}qF?CbJ;%~cMVX3v!}{>wmFo?5HQL_O^g`>W_?rK@Ab%gjBy_3>tvr|fgE z6)&H4fn*_>3t^owlDaXfCyZ?G&S0MUQh06yrKKinZ8bmXG&JDFX86%HUWd(nm1xRI zm(k33jkTgOu|XQJJi2OgP0tll#tNxj$KAUA1?QXQ{L7&eWmg8if|eq8c-%6mqG|k~ zvoZ3R;y$GoXU45@cb<%YKdPC#9#MpKwIkg!V0fb#&&cY%@)n-i8C8pgNED`)U z-$q?^em;;S3nINpTG4>y`8Q(fBZY#4OTj023%aIfJNM9Sti-59zXu~`=WgHHBP&_i z8M6nx0#Z$~GN&flml^BY+gM!do4RL7p7EYhOgIh2ve-b`XR6-Pma!fWr;D&25{Lb9 zDuy~gF?&OW^3|?cNu6t~)*4#h@TbGX7TS{2ahIJtor+M^vDAXuP!&=LG zk!KTOPH7QpuC%W+&`18IEqxD0#4?#j^su6E!*SFP8Kt2UurzZEzp><*TclW?5Yl#m z{@IouS=H871nlkJ3Od?8bEtFEC$gEr>+z}x?I~LUS|zt}Bj|T>L$O%KZR2@>841s^ zx(~H;|0$T|FHifEIc1B~ks2rIeV*8v@hRLXv?Xd!m>g}do;;QJLZjAQYr*01Dh^^A z6Tqt)Rv0gj+SNIrC}Hud;~TXa?*Wylyl8vlLj>gy=>78JJzQ0~MVgud;ZX*P{h^ z>29wQ#37^AOA^0ql=)EO{Q#WTcm|tM7&hdbe<3X1ehjn`wY6WQ9heVX`MNf7*(rG0 zs7<(TCtX%3(fuK!uZgetrua&`QMfxfio_8XRw1>Qa*BL8v`McrU z?*YL4`w7dEo%>J++;kNDj_kt?VFE54*Um9d$zpOK!<<%YO)bK2;tIoUUqrTdA2}!1R z%i!8U{lW`}pCT4F?4lJ`TjG_RhbqEVZS|XQuOh-eALg^VZk;{kWc=aWaY;-j1Eri# zw~LxFkGzBYxGOf*gY&nDtmc%rW!B<^_9lbMm`_l7%vc2iH+8A}N>|uyh&QRcZJ&-& zuSq%s>x~2js@>-HNGy5sD(50?bhXHucaqVxN2p5qkSSDUW`eghm#EP8016Po+Kc?i zUw!0SeAr<5D?9*#{%-}vGJYpN_B<`W-FTvF{8O?%)Oxt>iYwWX^RIoxcH{0K_{$(T z-wVd`;YRIro?Y)!ez@_*Lp6&w)DthaB|-2ZKghjE;$?>Ius$+ERxc`h2as^%;l0sO z?a19ukF3(StC3m?-G03hfakBqYgr>EWn~Q;a09SuALzQ-T=?L*BxpC5dPO)Dxsp*? z4LI$_qaL)HZL04E<4NrYYQB0f4hjhJV)u5XbMlh?c)<0NVqSM%JqpHhRDT9d7HTcf zdAo+CRQ$7?${n4ZZN_G-YxH2%ps{Y_xp7q3H#Qu99eG&%$!IqXzK@{OlXP+&{v>hZ z80(xw{yeX?#d6SP{a;1?YtQts|> z($oCTw4e3H9IPw>@Z!Kiqx?jTlIY<6WSoiaf5hlS?@?(KvRTnuwyHRqlt6)(Z zD!2ek$UQE?x68k|c(KNw!7@RQ%*t^ht3pzIokLD7Zh{Je%iN$zu~Llu@e%@GQkwh` zY|(%Q1zrA}vnXE>LoYZZZW3b4U5^8l8Cp^e!#uURboYE&P`R?uX&~AQS0cwsidBF> ztr}MLR}xKoLnnH@tXA`8z=BY7d&Y`CsEx1i-Y@2#g^?aF|q{le|5%7<(}GAC<#Ta`WJ4i+(JZBvh|Sol#V z5qW~|P`KeNhT4wY&IiZ(8%I#KGvQkPTRBA+z(+~$oIa8nw2f(0AGwcjD5*a3V^W9= zDicaBGF2Jbx%PIDZs9yaxN(g(N}Cpe$s2AOud4_*2>fC;iiFp4A7T>ikgM4 zn3wxw(o@scaNGKOpVd$8--}2r1TOW*zVx-%&eo;Xxi0jh7xZ7n9|i{UHLx; zUz{y5CIlwSDEfxA(KdEqdFzZ1;=b2T#epNN#xGbvc(%5CvDao@o7GwNFcD*&-?DyS z@2jYf2WaWFUN*WuwUF-JxnT zbvBia!D>?KmyEp^ip)rZS-%rwzEE1=IENjE=QK#g@*Wz?W zWqU+9&D6S=`c@a~n z^eR-Xdi}>{gZXQ7&zI5irO|K=Y^vS)_$m~EACbLnj3ozl1ubI)f$*Iz;RP+Q3(FYF zr*jA1M@`0;_*kXnA*d?*L7DN@vh%PQa)k{I(RPj(Sq6sf-1liHD>Z2k_3r+2is(-w z5pphbjLW238V0Q-y%29fYU@_8_LE<#Q#1g~AqCF1M@fD(^`Zx-<5p+q7PF{%nohWB zk4Ud#I23~+{K7bqSO`XJL8~#{Et3c=e3O>JJXXx8Fhecq44ML_(o3=`Zl_P0GyCPU zooanNby;}sCRX7#<1-nG)LO#AiZ=bzXGL47y0W5Jxq}Q~hDYp8JpmRoGW94;z#`V_ zvMRNljbVdScwvWTP=sO4<%iaG+J}_lv&728MYoa!v$PYBB_iU$H%N9uWm!?ib0bP_&cRP>N zLH+A7xCk$?+GHrrRhy;9dhV2dSWK_Bq{OjTWd*r-+1l+alT^o18*Dfm;i1YhQ`4w4 z93s`sZy^6xgcs~jU30ToFY76h^7qGV0f(WlhzX$^I+yNXAw>xL#a6%kMbL*N?tFzeJGVT?gjp9T0%){X#UM)zxnETd|u}7r^r*-Mphn#HJJ4#l7&QZ zTPw*Yd&wue$)|QrK8xgT{oV7qSH34g2RM_ZuEWH^H11W~Sy`z5`73di2WxZ_&g6BQ@cb6{#rCQa$uBGQ z4%~hbWp{RbnASJt40WaTMQP`R8tX%RJhRo0QU_}WzC~k7O#6p)>UKG{WsLxGUV%CI zJh4K}?juZX@C3Hc_U)zoitz8-ZKNi<#x)}1iB`U5=DFe`Eabz+&IpXzb!S!1`Ldqc zc>A4W3VG0@peh{O=Dr)6f(%%iIQ=nBd)M2#PuJHR%vrV|tgt|zZ?=!nF2GlS+0BWOsL+c&g8u&DP?0$Zl^Z8ZrNSeOLGo)E1NiBf zqx^N7Gj=tDe*^s=uiLM- z*W{VS4zsafbaMO&2*SK~ctKtrGYK0EQ&u#yUr8!!xE%k8bKE4)>36tr+O2Y??&e#> zz_BSl61(8JQcU@PvHZw;D)dx%L}a)CtpVTBpUCO*li5G^Y_dg7u2rIzJ%P`9$t@98 zLokRNPZFMaq87Ey$)hMUG~_K{9Y0U6SH>#7Q?eJ*{6L=i`Q38};m@hFbL^p+ou&I% z;#y+u8E1Xstb&~FzJIU37w^9JW-ZXWG@cmG|xzEq`g|mGK*+$==66k(@gYp)g&|OsLk23DW#+ z(YM9hp-?It3X5QL890-m$;q%gco4@+WCWh{N5HC9Eh(Lz@?==T4cSrwgol}KKT3I_ z56oc${)+E`lp3!#xxqk*fYqLBYB`Z`L0-7=diltPBEZoBm)YQsbCFD*)Jaq;AUF;! zQlt#%`I0e+x3Xfe?xDST=Q}?;j08S^f`&^$OpVZLRfrzaozrN#GsOw3LFI^lD97=nibv(xzM5ENd&KZpvOFRb-1B(LXFzum1aHtnduYXKH zXW?`qj>yWldSops_%mCca}hhSjC>4$<}B+$d5ni;?3a+0-z+~&64qb*@j#OMLG=RY zc&=F2P%cgmheu4ljJD9<4r##!`T|dWbn^qlj`RxRTsT)1F+&(6iqv`k7^%$B*-a zAF?4qf;{JZFI4E5UMR;oi%@-Ju;ABCh~lDERQWvR(?(9|O_&;G@3@F*LEr_cc%y8i zU&Q7jbXO@?q}FmCjeGLM<7_+{m?rMxroAEMw4V`H`!*3PV$8+qHx1&na zNC=rTUAlOzoZgQG5Xo@@>usUSM3oP_`ojXcB4$ly>S3@lrjk?CdSkRD=cI<`bSxDW z=W0r)bDGz>9&+)J&`bq-?9*>jzFqdV0mWfDHvYokm6y1xBxg13$io0iIR#ix!?UcF z;%4aX(aOykwmFsgGgYEYt7$zy5?-%v%Eh(^#6eXj=a^C`} z6MMVGk6>0#YCa9dQrhCY2$2dMC%V3l?b9cQ-nAqXlYPVTs&F+9&~4Z_%X*V(IB^Ms z)owHpmcMFQe%0t6@B^mDlun08Gdt2kot-hPg$*s_v|hHC2E5Q6Tj{#$22|$xWG2;k zN+=-1)Z?v(kvSws_@=X|uQ=_cdnsl=CY3ak_sCCl&VH$G-B}%%Gyg>~YK@5py67J6 zfg@M>h*{q;d#*sqC`6J&-o(Mp8a~-e9Y0n~Cx?k@#VO6FqsdG1#5UsRy^(R-L9;!J z?|vK#!imX{fHZ$gM_$0+?8tKP&|>`BwmT-vymo=3UC>J6>72bq``TUIumy`(2EVDc zcGXPTA{`jZ9x|JpqV~Po);XU`Bf|~Xfy^@BP8a7a9N)?uNYrWrsY-10DX4?0x zmp;d*_^^&h&|dMPy*Xzrb&K~jlQ$PQ7fLmfHy1kRX?;ep$1A9$YY8#|t=im1-MvT?*E0{X-2qs6k8}<&U61HE6BGL8$IIXg+H~=@z|R-RJiK znPnSUQfOkp z!tlfN{MS3T>LYt(bqF_B(xEZC>=2OL@g$$ms9&_a4Rd+BA$66%m{qo!pctkb-ew+R zh$-D7{VH23j1^A@9HX1wi!O(Kh$j0(gekdiScDv@DW^EH>BpGG`P-J98vDB@UCZ&% ztxuP%IydVXDMk#%o6gwYiJg{xK`l6get5Lvk`SJ{d$ipQu-bLa;vHsr$F%&^p_HNH z&4wY<2f06v)v@pUX6Zh2&th4R;vaBk;@I%q4HU)sp>va0^}r$LBqZmQ>E@dyY#YC$x2vp=u$L82%8M0GE?_XOB1-<8 zN3Ric=jrHd4B;Kp9N1$Q&PW5>#w5r0VAa~eLpwFe?t3~8cl9>RxjST5a1njfI*j96 zbsc7i?xtnBRO$#~F#QX5D+Vwap3>dYtP$U3fUu=+f}fSXo$5nBG>>$bjAg8KsYgVo zp*qcbb-@d2m3o-y^mwxVt)%*OJ-qXi6DpsrpdpKHBCByR>upg$!V8UGffQb_vdO6F zMC6e}>*42Dn~9xgn^&$ji(e~Vn`jA#7wl~^PS*I34d;_=>6-z3(z(V70=8Pi4SgXG zbq>bSyz&`mHloqfRK2q!*Qfj3&-Sw)XSF0};ys7wlz4+0Tt`@Ct=t1alAhjPQ1${? zwQ>fuy;4VmUsdr+SJzsVM^#zN_UuWt=ZIcbc}!J#+sp@WQ@VpRmDcu3>utAa9EJ=v zg}HU$7OZQ)x)!V|j_|E6Znf5icCenlwjScR0&sZYUXCFrf6PIGmO{!YkV@_HD)mh@ z(Q1%)E}3BO`nAh-Qv2EQciUaMJ9QD=a8P}aJ0>ur?D9Cq(l?aco@WEdIra@P62|`M z*}%^xkhX!>N8~dUzH_leOEH`X#aPGNU%VW(!6aBsWsQ0yb&g`6OB#ZHkx zebEz7pkBjrhmygxHr(W*?kI8^BNVkNbLf{{cso>;ue>df`#!-+VF881R!P3Oa{#b8 zDQiY}el7k_dwky^&Ll=YmsopLp-gF`qa0I3c%k@8BT)D@Vet0IoE6-vv^kk$)O37{emv|6yJPWnKmakA&CAvMhR)`bJ>IjTY` z*t?^`UpM|I^&I6^5ZBC66;hi;wlMkjQKoz}ix5hc`v_9&dR&-|;|Mxz-J#zQ6!!FDclrc!uU)a#f6_6 z@6$By(vXZ{+wTI`Ua-ez$n5#60f!rBlOHMmjs)YFr;4S$r9N_rq@Xg_@LM+^RWDuW zDYMXQB~al{Rpl+WO|HR>yLF?1dfX>wn>lhv!s}d+;L5jc;e{f+VxABY_oGbv`p#Nw zG=_9tkzS($$B?NjJnZ~TIy?7J0FrA*qs|BEyr*y#G@sJ8Fp#>J+EL)ql{1))2SE~l zLQG%z42OH&%FZzeGzp~7th#mPvq5UCK--)Nq;lt*$fuHq3k-9dMWm7FxtdwsMy`{T z&j%qOKVKK|E)boPW3;!XNE2*^F5*hSAy{^Ly-^Jf??sJ6?no@g>%l7KXv91BKr$N3}8jTXy{~JqzOz-O=NLyF6>YR@2E>ytxsdOr+K~$=qZ4y zf?>LVy%z(x6s4qjvJ3cF0B-^id6M-^jSKP)mn;#ccyX7|9gpL!EyPjiE}(l+I?jyQ zCAxj70%R3a4YdXtPgZ57eHAHl@c$m#@oiteMnCC`kO-M;l7E0lmVL?oe6o*OyO2Q5 z)-C?7(TA?BVQF|F$~&qZQ=%%o@T&etRfVn^l!I5tP?4tM53>gw|F4?l^~cGc_fhZ{ zO<+g9#Iw#zCzr|{B~=eEyroA$W%$ufaepzdY!5HoFW3AfKHke2WZ9ocPTlT&nit}* zV|Do#bx(G!a$^lkiAacC!$Rw-!V9hv-v(?2A`xH4w5R<;rTzHXK=dr>ABg;FA+$RO z-4DZ#DiTSyF_y~Gx>-kw)8A0!uvqfy<2nx0c_fNwb@{gV!044rae+7b3^gAA4P4~o zhPUemOQh)OAk@82)u_*p#LI;$#V69eLp$pI{zvVjBT*N*r(b ziF-2o!U@af6=@JB3)tG1b+poYhs$FNs;xb?@vmlK>*0nYXtnfAA&M<6FQnzwTxZp~ z9vd;H9+w~3xsQWh#VF&S0ekJv?vJkcG5cgLp-Ab&+bMtiH@M^98eWLokK0QpQDeWC z!VUB2=xDO~xGIhq6qIhM6vH|~ZwwDr>qAP9TCd6-YpS@@OI76`a<9{sOY3jR?voYY zTHUZa{vp>5V%K&ve;LPfzdOuq#+NSnN`I_94BDWX9e)vju}`XK2p#b+wUi7idv6h0 z+};-|p@Rym*$$*jO2P}`gU+mIDgk$Bl{KrkHMKjzzSg8XYpT2tmU-o(QkTpk+NMs8 z(3?wNjrTK+g}x*vbvxR8eI&{%iEC4RIm+!xr(v^Si&%^FAJWyi6at|D0N z^@E!zB^x5>n^%tPO_Swxe7!Vyf|&;|$PBj+07qWSM#H*6*W5QokeI>UA9@d2$cz-}rLq|K0lC z3jKQ}X4Y@ye_p@xi1?CMs|3mt) zA3Lo(;@Is&jlbMUbI{VX9$(S-+}r&Ar}K3;&Vl}X-Ave&`TEv#{}<=0yT8x&nox0h z+4Ea*JCzyx9D!-vZ!7c1rRxbw*NG2Uwb`bA5qI)Q8T74FHiN#sdHdDz-Cc2N_qqo? z%-Z=bz3+bZ-_A!_Qkfraecj6D`IQYzW!Yc5OOG97aF~!=^$XKeGPBB!f*s6Cmv4V_ zy?^J|JAEX!{`su#umv3Elh1D_KS#XgyqYjg=eq6dr|r8-5ZpQ4s6pX6S__u}r<0}d z^7PK*Feb(LLma?Qj|KEqe(JThDxkDcQuvebQ9J~;IXB^nLgEi;PoM0FvloG> z3UPMBCS&&WNo)^HR;&DML?5MxsC|8&;HXVa4pf?RzPwCP^kD6LS%uM%&jM2H@=C?Q-85b&6=}FQiVS z#xa}At4^WUqT)3m)08=C=grwCYpmyAgFm-le{a3@7br=@RM1w*MI-e6k8=F3Y+Ojk zu{)FFcYott=}D=xKVSvUI9(~GyAY?^{klvpY3t>Vp?KAaq?KcvMTyT2n|XvT3Amj- z++!>?Y`jexn^wBi30dSwSt!E|V#yM#=@xW1sjHorlD4uxd63rPA0?jaq7Mf1-D@GE z^%j25sb#c4>oL`r*NKOA-Dv-f{ z?PGB@N#ejR>&1Yd%88}_qxAwA`Rk_MSJsQRCxw<|o9k=kH*dX={UEo`enFaV5PP!_ za}Of+2Is)ym_kr(ov$fKGc%C};42zr#B%Jt(FcT4rK064n z5V5HC;cngPt`8(05sa}&`L3QTRM&L%syfMWp?Q>DaSXSd9d?|V*nqtAYIq@6Up=~) zdpn~DH^ajVVu$n@n!DBp`OcQws`BBzX7*@Uj>#GCOm{u>B`*XoMBobU1aalv0T)q% zIB6V%kgxi-Dm>eq&xgon-9=dR-e%v-6?g-2ZNBS9;pNfa%_H3K|FQQj@KqI8|Mv;u zK(y!yRx~1N)M$fv0V|diqX`7vM?2yUSJll^*nyu}+Idej|5b(#M@AP}qOIwF zB@T!2$0MWI5c99TVK84i-oGiUpQGbD5kKo}qcp==XSc(6PU1I@LGmic;*MJkIBe#G z*h1dM*>BdV@~#$T(#u`?k&rdE7=xZ0xMVf^H(a@3ZCS_KvJ&}kMJO5`8A%+OEsxAU zSW!BE5y(}B5@c2a86n428UbUVTG@*$3#u4#>E1vdeDih_W#%_`9kf5wm4}ccn!K*5 z2dudJd?gJ=0xk844;HihO95ubUx(ms{L}dw%ks_U=Y&vgU9*ohFDmp-!w`W>kZYXg z>0x5+dbVmUf#`y%*+Y~)l_k+CMSlnC85zc+seQ)HnMkVJ3-v98#^@Cz)Cm2zf^YD6f_}BiLnzDE}?< z(GsC~<=EgM3*R?yjPSiU!1wIiJ{#XZx8oN0pQubf7H%Dq*r22~Fh9^(VF+D~Ez3y6E9@K4Qt3DkJxhIg-@E!tD$#9Cpx!jz{Q=wlLC3wOQ9|jJOufDZ zf1@*ZsUCgMkwhluen3vi5pQauzQvppBCFg<*vEhJ^~Ah`5W=g{Yk9P^?$U{Hju?va z!ooyjJ@Gu4v3peX7|AwJaI$Q9qR}O_zP#>E!P0a*ALG+U=%{%xN>Rx>)#*Br8!NhM zg1N-$i_b}dk?0z)F8ieRM5b?PH74(Y!Bpn`j-aMJd#TAP@@v{mb<|XIk5mw4%WD5- zW74BKZ!q|_CSkpbq&~~Me>{B(*O&V8o9{5FeF}sDEAsX(-a63gj`aD#25h;V!DUOu zPdCjv+%SybXydKyqm7TnFcOVgmNE?7aSPp3wxmAZBhe_Eht%79<1sNY?;QzmGWO=8 zh4@3+%9+=y_60gM3C|NZ_G@^{>KAR*O>+R;A__knMqok6>k;$5{HbW3h1qNP?k(>m zleZDLMO};+=53;=`ts)6!A;FrNbTuYKt|cqiMcl+mO^EZ@tsJ`*GKwQdxZk0)cqO) zg=iqFPb1y(vk;CA#0ak5V0kP^5A){-{pcxq1SY-B)((wACqJ5QHlVw$=`C%2)E4Xu66bA#hVo ztcou^(3QP*7HxC3Rw!WO0J5!$Ox zm-!Fz%Y5RdTtT&4YB)vhUgPo6m+tUiG_t0Fqu2V)4stVBS*U-o_;u!jb`!BT%P;#)UYYR~uQZglrA16uFnEzlva z+Ls`&^m6}ee1_O901VpenZ7%-GQMKku<-Vl|9+FFg42EfTr>_Dd17?=))x`Qzl)}A z3xQeRlA28-Wh4+VM}u?ym69qqFE6Mav3Yslngf`p$1;s~$`&LKr6c4TJQdk+*3L$3 zHFBW;RaiXZmunBjeZHG;eo$2cFO^%8MB_9lQ}csqh_9|e2a${iL3GveJ}+a_fN4=< ziS#g)?gJ(A(t-8Q>T36^)zT1fI_2H+SMZt6H-}fBQl~kP9({Jf%-#K0`D{U}j^66* zg2ZLIALY2Cz26vttLDvWcQjk7)CF6PoHNrMvxTK$Lc_$Ed&;I{Gh4c5uCJGEnbn4| z#KSKLrd=N42QK*|I^4Ni2A>#N;YED*H84Jm*k*35E_-AaM@wrWu9jgET$q?yT=Tem z)u^WZMFT}@2{9Cvv^FjScrp6W6&dmF&Vd+)s(Rt>is|j-) z2#XUE?`BYv0-bu5sqg6c%QuPx$bmSEQLgn8c~!qUF}In~p$C8CJCUl_ z2mT!o(kcmX72RrIX?t)6*{FS!t$pvH_V-|%)Gk-flT_Q>F+}ijs;S!e&EW_qtojZ0 zFKcgSk<)Z5W&E8?O}tRRyRrsO&@jlNp`WR&pgS6_F|~Cg)I{StW(AoD$I0e2s!T7LWTRrD%3`*Tv_z&_$ zG*{e_8mH|Cq-i>+x9ck9xg2B5j|$4Kj^5rCeKlFEONT}=~;Wu6s)R!Tfzp0At$>t{vOfbK}Pn+yw8yLUiSAW=HT&p5({1W|i#Ajs^Y6xcSXq3p z7QU2SYwU;+TI4Tf7v{5?@u+Md+0;xtQ(HfkbmMP5YnpkHpP>Dh2xjRgyf{Wv?x2pF zP4?CLY2N)5r7PZd)qr9CwhT7u$e9c+L zntYBLTkM@?TB^N0JgT*|&iRYf0cW1g+2gi=ept~u7iXrUxexWUlu|~QZjI4dD!qwi zVo4Xm8_mM`ns;goHZ@uh^mlZWNV8)*;~bT>cY}p=M3qiSH+ibdLR^UH$3fqt1Q%cgpp&|E zRIFyC)6uuYxG|iI4I3C3wRqj9Cqq_j6yZ_`|K3i&w+SOQd)rthb=|MNd{0%eXwn}h z#1@zGU)B7B`U{vu71tTCH0OOO9Y0%pZw!C4)mAJ(&0{WQOV(evK7Rg+h^6`OMSYDi z4!Rtt`Pvwwo}K?vFlcE{Z}4u%BpaLO+6_tfcx)yIUByN%*<7`vs5)$OUgAtnPhvz0YLdT1_11y13=C0w(-u}#TVMKcescZp5M;vs+)gMWbRMA(|LJ@ zmU8p~!6vBmC>xUkn3qwqJkB;7rXVCRnU%!QdQdaMgG7cgh0 zI_{7a1y@dle{l^RLz)Tuv{#QKr<$VdUxUXWaatoVNIo7`Eg zlxyL#51HOs;Q42P-j?bqGuL4rc%&g!W71ScbT&W%9rXxL!RLVI>lt{GWiRgl9*Ksz z_Zvp(ppNDIqeQBoktsd_fBD>GGtf34zdp64Br$Iw5*u@Ua*DZ5y71QgBlt_jrX>6B zr5pOC)*Y8^*a2vBBtp?Bo^yjbURd=`2gUo|i@8Bv9}2;aKo zj4lSc*PiH3`fKQ4ZYcrWkUc^bc*0>2#7~|-lT_VYvZBb);*U#U66-s61-}Mw?|`?O z!Ihg=Fb}|45b2$)cFSJUG@!K;o6jot{9l<0CW5;uV>UVNp?$dB&cCq`H*fC=Dj{w|DDGb3}xO5d9&Z>PZ%}lBImpc9{P+YA=OjfU@xB?N!DD`Tn z)i-X+ri@vqZr~lVk08HA{GUJhNrFi+iOu*jbKwGl$5xt^r8Dvq+}dW943BZpm|>Yy zk$+fzn=dVfq(Q_{9iGclVLz&tVfI({fp~zBX)?s;BnV&TXdu%s!|B(mQJfLgh=dLi^%?TD+1GW-*$xkp+1G^|#04 z{2#2wMon+|j;)8m25nvJjAp-Oz#)<&r>~sZxo?lY;E?0fp>!%AU0k5FXp(-&0<1nrZDcg=y_%e(}T{6xY6);$y8!#YWKFqEdBt%kL(j_ugHxIo+kUJQdW%z;K*RyKf`u#=K332mOAF0ItXt zNs(3jCK|_zztdf9djVh(k-l`RK|Ss9KP!88avB)Y7PyC&Q#J?ECx5r=RGbS=~FJ^kxtSItUBFvL-1qt)V4Ip$s zA^LH*3SMstLf0F;iv7(rxK`0W%W7v4h5?jnQhZGqPk+5jb(ShZn{5L{-gyMb`fX)R zl9ly#9DL;BV#7<0vw$3<)M1%+y>?UoL5kizQ-7hipRH|x50(|i zZ1tl<4IIVZyEahZy+NS9{7Ge_qmS`hbGAm`=#=k?FDAmjnHpQDugJSs#qbUt0eUs0 zNH?xfwz*`>8b2!029?xWrJfV)<5jsf!o;7g`0A|qB1`k*6n|7!{3JV-4paP)tavF1 zsArJk`)0*!BTW3KeG-o`;Q$UhYfO=~h@$JpyT_kcw8MGh z_AS9!zk2kHf|+OgH6&PiORd|O+A=KBcmOf=<)1D9fi-*Amk;hxU^laFbK3gmN=+$w zxj}aKJS?!ZEtLl_#05m@_JZoN8R$HRkYl`iu+GAav!+99|3C-Ifv!D%H2>qdGbv4c zdsWFEvH4Xcd$KVA;O1|#eR;co?Y{naDhT)+aZDUz4*qt3r|g+oXR*O}tO#d@+I-X> zGmO_ls>?bN6q1RtFF9pvXGuT6$|>Q=d-@Q~tWV5(@&Fo1;BC}hjQ04ge6ckF3INz6 z; zvJk>~Hp@8cDtH%e=E<9yzKmJ4kr_eZ_Z7*RU6uf6$HktvG*>MzYVTWW!Sy{dTmJ-m zU_XN~5w^l8o(wGUM{fYU^iw?322^7T{2BxR@Ucj|)z~I!&th# zhVJP^AGanon33kH@y{dT~jpKlA z^wixgJ?Ju0ZGUBnfLAZa9p;|KG2@^_;~`X&`glm9aeo5tX&>aDwh5D#r=W+4{Ffed z0A;D_K>egyPvU#2sam{kQ25h+yaIV(YFq!ryk8NNBjCUA+d9dLDu?srf^9doZAdLQ zqggO^E){G0h+CDhMANXH!ujFG?<2|`^oMD-3r#$j0DTQQm005<=BWbH(b0V0EStMp z9*4W2P}A5X4BCypqGGvDwb11&_=R3MPN=cvYGD4mI^<$$8~Nh>_r9>h1vA`tn~d zRqq==6o0UoYSh^}Z-@3_+0xcCO;g@G2eA!VO@hH+dwk7x6!V@Vc9B*Ou&s#2=JX;l z?jdwsw-I65`3q^sR>Z{bjgmUBi5Q9=-ZPM*0tx|aY^iU#ofU0R8gNEvO_~!wBj3UrS zefhjLQh59!pqqO{X&|D|^GkqE=i1_MFKz%VEwqazxYGYW7_i1!-2Pb%Mc8YP-=qZZ zR?6C1t`9;*-meKQ(wbaft}CLk#pYbbVs9o927BUj_2uuk=D<{|lNJNhX+doT-bsY~ z!wn;2sZ*+zjSj@>#or@$;jPvhI!e~XXy_&dL+(e88}?khq% zfBL|H&KZgaDd5ilkM-qaasj@axf9ex!)C@LQVp~ctq);+jbVM}AX`8dcr%Ez-JKeQ zioCN3`Nsu7zp@7(M+P6?V`Th;_%Mar;|Hr7-l0()2M}5$QLDauXC*B*2UZsCpIjTD z{SCw;(`0-6P2ytSh65}NMc!*csMuQ@gbKV>gceCmt1rJt*%zC$C0plBVV%DW>VznM zrA(U1Mcx&vL{>Y@!bRW?YauI#BhRB3Sp&Q%-aCuh*x%3D=zp6O>EBL;U!7Fwzoxx_=5gx- z^efRgn&hDB#v>HYTM+>DV@PX|fGQ%o5|4Yx^zO(X{2U&cihucc_#oh(U+Uew#C%z0 zCh-NS2hkdqwecoFXLTs=cEoS}Ee-K!Og5$7C_AAjG56;tW-Mn7EI#IglYoA=0sz;l zeyV!uM}1{#TUQN!M=vaOQeAm9w{vG7jytxL%kiw9(A~tBcn-}Sxu&^)%y_Ue0Hvq1 zF4*;39*&ykv8||(ho4IbAm-(shS#eij6J*prb*`=fxO{ACV6MrcBdaf?kwg+~-# zYxCmQ|3*u^#ZTj4BU8wx`BaC>v1aX)Xgb$KUVhv5V40{au*^3da_|Ux`6AO|sehhu z6deFn>gAUBt~B}$_n1vdH(^e^Gj6)r9LPQ7a%+z-B8BlPCgM*7PjnAmXB?>-_!6%rLF7kiFF4)QQ zvSv#Cz7XXn%xBy7FaJV@$Vu2qRO=WgVbqM1u)Df1)niop>y+-EFjNU6GzGdX?uAM? z+ssVlm)BbBt&q4Ap6)CJ2_V4WvJkQFF?McAaGCD=581u>_nGNd5tFXG0nCf8@#EXb zQP;;9m+W$X|JcxNRrm)W#>smY7lo^YBvS;$Mxmk`XxgV`G;|L z`S#@!V<+(ch_1@}w2$JgV7@9Lm_l~7uMUvoRDb;t!#|8@`yutq5E+I3GYI()>e9)n z_82kQ@TtDIZk>K*JnH_$@z0nSX1vs8a@ft=OzF1qLm$VVLg2>I9XW6@vPgRAh$ner zAU&hl?KibDUBTA6k~iALeDrz9h&KHk-g$J$U+6eb>QG>^^(0nT;2t|QT{q1=7WZwY zSi0_qBf5yfLcW7r`WPtVT_(K}OP1QD4lf$et$x)!SI3+6$j&u!dB4LvvJaQ+@b>`M z7_Nzy3OvFZ9VlKT@MM#He#-gvy!yWC@Fy^^nq!R7<1n0`;Q%-9n%k7(UZdy8G8}~I z97KiA>UqV{WN}k1$|*_hX(7?Q!j7?dC8(yxak(FbKNj;Om1~mB`_Lz15%h4)mmK%b zAdX(RmQF_CZ$n20z(+xMgzn$qAD=f8*&4ZbidYndqTw5OpWjukpPf9{fSta=q?*UI zt}t-9%u5H&#*=ExHBoxm$Q^X@BF#OXh}wB-+9@@UT^_=qs@0T`BR?&{J!bcQ5%yxy z2oBns-cnth306j}O4U!D_Lz&G|{=t|btyl9?Gt9CDreKc}GJ+pEmm6ffZ zdDHAAW?&g4Xf7Fru{M{IJ{mdyQv3?(0lDh* zd)}AmjwEjCm_!}lNY{))ztT~NZuZgiKILlTtdhPQjykV2mJY2L zNg97c?WD^0q2;_v!xUy$AfLqdr@5;1dnP7$FQPPfFM?O_Rs+@Ak4AoQ2^e|KJM2G+9vi|BD!5uZ$j zTDhv_9B=19jz~RJ;4Ik$39$8N0ASG#W=anAoc%Y+(`4Fy^{p$l^0NP ztfn6(5LJ}qYO8kwtE~5{^D$v5U&nf})^v*;$b_YGIWh5P6g}sK{)BYS; zQ7$ekprY`h&AgTALUF;s;SImAdKw5Nn~sX&;JY;V9UlCS3VthsUnlsTpkH^F@oKxH zVzP~`U#MUHg8?f#uTa%b4AKJ}7)p%YmdkWsqAJiw6CBaj5r0y4;{4GEJsA!?p|DK%eMUkBwwfGfF0FmX9r;%(!86@trf+NE zV66XG^!z&x(*7Y;eje@Q)qF*CPOXlSd<^XAMY^uxj}rTi7V&eS9L{3Cjh1`oFgHFEPR`??;SRdC#^kysPlQTlve_>3bviKGS#S z89BsTe-lpTUT?geJd_8QS<=)YTkSE|4FlZBTTCL>|GgD#*vjQ40R zM$92-o;pI_%6jTZ^;G8zVKQZ`{Xil>xL$=4LHO;K@76$lU5TplJOb%1{}3e041U~Q zcBT>Ts~P4F|L}LtNk5f`b_xKGHx=AJXsP7AV+OIBW32RA_HRgfFPYIRYoCqmv3u~b zy7tW^DkC}0$dBJ<3Jftx$w*=(WTlD1%FsC}Ci;=Qh=)Dgc(jZg@h}^%+5hBq2IJSz z=7m(sI%-a;ENiRzKo6Sl{9J(@zd;03UCLl4bz|xZxt2gN|y2nIpJ{sZ&V@s7uLs*B>T~qoyE8;-FRbp z3kSUEz8?4ToYcl5a~z=)yZ3qYw}_VwFNQfT5wJDqdgpM4p2X+88^3@itK8v9w`mZ=SO#;STkL1$ymdnn z@A$c-NNG{CuD<-Ni>R^oxwIb95>)7rz3w{XSzmI}gOjP_3ko{_#`}Y|Umqa7&@b(l z%{E!);-+8lh_|(A>U_k^x194;Op#;<$t0_89>W^_RI+I`?|W*}@&2=ue%xtVnP~d8 zzEdCfPh9o~<#b!M<-kTWi7RKF!k$5F(mfgW(V5SL8Jhg)#qs;g5H0`Y<^hK$8@5`u z@mqSEbo=8RGylZq-FJ!xdrq~U(a;-bPgHZ65vBNR-kUFO#3+f6@p&f~@XAEey-d@} zu$tBQ| z@p&J3`_K^%im1ywsri@<$)z5&@Dv4ya{jRUOM=+j`ocz5F$hb1dr2`W>(*8TQ16d7 znEO(6!P|_WYucwHK8D7b{oE2gs%P{6RQZ=27=8a2-@>-9yDH)O8Tec2=x2^hws%Xy z-J{Z}%$?A`t?Z+c9Gxca^S&Q4MX=fae zc$WW|`}v2>d%T;G<7I zzRIi?>2HZ~R*-8GLU70NRZJR|Pq|}yHQPr?fd86Rp8-E}BZPmc;2#mdPdizCsECE| ztG^f^dXLqr5BhR3M|7EOK|fGDxNgu7UvsAOFM>A%|M34M_=oQh{sI3U{J?JcgQcGw z{J)lke;o1}`u|M)3xm;e^*QNh0yYa@lz!?j84#=4S&LgX{O!jNV8`8)FE35rFGl=> zdLsUaZlHE=0lpMI2izP*S7hHkvHNT5Pp(&3YlD6G7vVE|Z_j5U{ABZ+b!dn(aOd2k z%HcP+WhN~5J&fB2H~!IiY%|(we$egx2iEH~q{w{3aepDPE1CCLeffW}!;94(;KtjO zD6L7^+Br`_$xN_yx)KtN9}Jn-t44_Nuj_|+{+Qi2qV~_qodL*=|HJ}v4%@WT2^xjV z$jw=el@DH9hLHn$lm7+oX#Ie5UZJ*iInSga3C^>b0OpfK}U9jRV@cKN`?p)eq0xbSrMhnfgbU&k^wM35C3$l8^iB zeA)p4LH%c#`Y|aVbe*YB83tWzgAT#(nc$#PO)H=+QVm#qyYUg&9;Ca{n?bdE40dOGn$$Q>$?^6@rA~Wv>-K>=SA#XeRDPwq_pDI$V%!#b`-*`axyr1@u z@zR;mQ6jdOn~ol0fdrmDo4b|`9ye0ypgU+VR7 zK3cEa6Ikl?sm^=N$$QRiXdyGg(5~Yed3x9>dz_7K{`rNRkMl~KG*(q*t3)Tp3$k_` z4ZQbO*f|$C#&h2;KbanlqZzZ?4d)AIFhGM4c&znj=nneH45J@8UMD8*Ec;f$0@py}vxH?sJ@u4fDB}M`3}j~FIC~{ZBOZ?SBVqkZU*mvv4clDaS#aZhO*1QX;<)wq)c-Klp?Oq!TF&VK6!C`z0)y^P z*eJhf8jjW`De#ofgl#;0#7F>~FJR%lFb*GnxwpQct;uz~59 z7_(_=!>Sn1{mwbuxElrjWcqg{0=V-wJ3sx-wHve4NroS`wp~6k<~?*fg7$TUP_Xp_ z8{X|i5PlDIh^X!SZ5^}=x?`pWPZ3>*&dnZVUUqG`5A8l*Pm^?7U%s45sO*i}K{}*+ z*IV)Q#xCe-SbO|0q;RzMZYv^Y%=`2S6F<~Bms=Q*{ARS1UxgqdaeG;7>|Jvm;E<@* zLR$5H1RKxr2;}Jv>aH6r7#AmWzadYnA<|Aqh21Wha%l4ckd371m| z?ao~h6)`VmvMSqeyswe1b+ry%OrB|6+dvIt_(E&NGrS)+ z^)WN>bLz`S)BRZOP#c{v(TPUsIT!y10G4=E(pqmP!qO|XA6EI+dR6kz0ZjAukk6&I z6eJpT-Nf7aq=5EMq!RXP<)<9W+^&6;k-%=5S9lTL(n}X#71lnYt#vZ>dsC=g{7t;bAFWUh_U&Ed(c;t|qRv zNZ2~n#MGT9iYWHt%mj^jv0)HS^OYsnk<)wmVU6#rizkno5L@!qoAk0HWz);NyXh{^ z3&HvKz;%6X9Rw`|naj~;T*dnDGL=}Cb0sx(KJA?cknSk&VCGEgA=GCH;v+7pd8gQ< zFDYq{DCtEdiGC=x2_ReZqok!u8e)^4QPOP@75^E?90!FnUkQqQ-09 zIUKg@0g&W<46BDA-lPA9+(Lplg*q3@awCTbk5Nmx{48kiSGK~zrgg3w(O#Zc-mMj# zmU4%x|>nlEaY37i!LS%V%LcvlzWlY{{`;$8#83q?Ni^ zY$?tn2}6PJ+jcA6^07pCvsa3sj#2PO1TBL8C|qbJo#`Ks$#Z}|w|p`GMgvkyy0M%J{MYixlew9fe&$qc{^6vlH~Q3` zil~A2tJ-gJh*G(T-gVt~K!s!@?;eI%jL6WnEZ~iU+P4<7Jww07z%DL~B0Zn)&NBl( zQ2C(N)u_VMCw*$py6*s@cw0R1a(hOm@|rqsKwiICMQjV+?^OA~%=gdu*6NU}oy<_c zeMjch{V8Y&0IywG`G69=b7>E0D4Bk!W`DMYowtc!Rz4u0I$x8t^}qoY1fMhW2n}pa zJheWrcGt>|J}|gg=VKFq&A&e`fydOS|5Y5P${%lg@PfM&*%E)Ee7pq>`h4 zVflWrzpi!vM*UX7lkm~_H)cP7Exzx4F6cE->}+n6xjl+VZ(f)IUmxyhuY*0 zb`0|1Tf{zSV#_)bm;F-mOml60E0ZARy^NlvhnX!;eR6m{zDvk`6g zNzfVbLNfh&5S2{7h4T1)=dUIOYZ!u^ljwh@N!;zsyPRTDw2n_7HN?>~r!i`!^`kf` zU6q)}Lk*y!?|x2$0ooj&$a`k|Xm`NmU(rRLrHIn6kOPe}3Z93)Lz5|fDZRTGq& zZcTl=}6`C-|cFGOT=I;T#)k7btPCvoLTd$rxiuKfP>Os{N ztNo79fw8hSc}w5syb`rL#z3L}U1#Vj4iW&sbmCZQpn8Q>(Oas>5P-p=iuT>l=T1sS zpI#kwIT{8O`Eq=8*=%x+ctMxx>!}5JA~e?=!6SS_L@;kB-J|yN9&Q)d=fBiC;h!RX zV>Wyh7Z8F`sa<27Yt5vqPV@J9C3zF8qF#Tk{4VlftGCI_mvboK_XqBvz1B7p5Be-- zuQFIXmRw-bM7bu)e^A5Ad?+-HdqdQ)#emNfuGlVbN~FH8^StJZTfAK#G8neLpquZm zQwHLljwS`wPw%g7Hp@5zFJ&$;-Agp>s|ai-er32pqVY{(#XYT_?OI~KkSyoF?>UJ> z9(pfvM*Q^=ePiz>3U_JbcWUAY9C3-7NapzOqqWZdSjn0;ouTg;Ds3K6!8_84)MAlg zbKkaB4?e;!9p4rbBX4xWt<^A&L&S#`Q=Oe0>1`~@rDXRmC71tA8CWqX{pkc+zr&J5 z`S{OBxfoQvmpE&wg(9(d+j0I3VL$}@tZ`ku#!tPO=j`-Pbz|v!iAin#a57k4GiG_f zm%a_7x%-!FU~~@LI^T|8)#U)#W_jO&2-r*Df~_q!c5W0qO|jE#?2n_^QxqF;&&}y@ zeLronA>H(c-jiDZl^tB4vtf$ww$5O@y`QVq1$N};D$E$gyaK~}?S9zEtJ$c=xuNdbq%*H?VCz7f1PiO+F%R|4sg{8FcBwTPA-x%75;5`A=B7ef__P@|R`j zul!ar{j53CZ!IE+A(th$&>cCPc~qG3k_eliO)sMA1btG0cN6fNOipuMo;TE_zX{5n z^teLrHzbN(`-@w~O<MAKtNE{Z>Omh@w_-}U~&EheObV04o_njH@95uIN}UJb_e`0a)@ z@9!GcC_5@>4dyCqmLbCnvurmk7iERh080ilbZn1xHPwtBt~j(R$slM^s4sAaKJR?w zJLy%D7h4v5n%arQaa*7>cuzWmVr&mDo#-rn;-gd7-}u|*#er^N>Bs%GzAb*?sC%B9 z`|{pn<*X&pI;`e(E0hjYvSl~KDvRuM+bYH+;L%H^cqsK@6+Di~aMZtC+HE-eACo3C zYIN!lIaA&(3Y>%|8XM`O#%chvcIQu7ugAMnha0OT)B}|a>v1@&u1qAKUb#;;ek=l{;iuk&76vmi=1_unf)1>CdV=+nTp3IyHe;Gx;e?uZtC6-u`iaIS2nUDW zXrBuz-Q!DBTk>n>8WK1XnEo9whH734jJuu|!6uq83*g1%cWP$w#-qf=^v3b5&wbW` zs^DSrrVGg;+zimghsN2efh|~JvSXZK0oCar>ajlvzOhrXnH!(@ZINH1=|w)RDG*=AOGnY{Sn05Mm%h>@3<`s zl>2QIJ^m%of|-xo!?QYor-IA|Fh_v^o}Iv{g=e$isi;nWEO@3`cxn&!szX>3O_J3* zpD`2%ShX|7jPv|U!Hy93D!=|zkt>VH(OjnWe`$6!kS2C_2J23TF<>_D%(X7Fg5l5V zk(xYYkHsW6KD@e6A5t{Ixkszliqrbp}?~QU?OODLq1f6$Ze-?{%8NzR^ zqaqZ6gW){>L3GQmPj38-Nrv;p{o#Mv)-|D3Dj@IsOM-M3Bt3xFu%V4;cCa{X<6^+G z1$-b2?hMQ0b5EEaXV4hnACvkdzxHKsD%CIH5mL6G2tq4aBFXi~pb&!1+d5hED(*AI zF!(pcUPNi9R>YfFo*N0$3g-nw`^V5g_Dc-Z&o|IRI)wzjRh$?&p_ssTh9?G28ctwp zMPlIO3IacwkQg{^0)g3+69Z>VCUD7&#K5{4RQ5rs6a`*AGPJK?`MQ@*kJapfx%IB6 zz?=EQcKcM+S%j8NXkBGT>CcyjLvkpJ{|v%;FKP12r^oz$_ZyL*O7NB^e?h(M&Wy`s_x_0{X1R$b->QZ4~qr=5&?k$^xqkW3~*+AIr~=* zqxAHDv39kmX!9xp@l^ZrJ1ijVGHzEYQJY!Zz}k#+G~jBa(h-TTTs$$s$`6*4zKE+LdG>$qtDWb^5HcAj+f?O^^R zzhPzXmVaMau^sn#iT;~}zu_L$)zMfoUu45y>XU7WMp zTRT~C7enbkD=8u_G4RR~)sqQ=R#5QUq}tel#I}BDIZWdPp}sORqm9o^_~cqvBYy*xN$-$qtEbt+ zN`&!3Cw0ski1}sGmK4!=Yds;a$bj~Wc1vzNpPVp2r~q0@OvgTbN-ZCdRATys;>19x zDlvW1@Wem}D=~d?MPeYdm6$#a(mGEpbjIYwKqxCQy$-^!$-xJ%B`^cDI;;_h$qj^Fg26_i=eF#-<1>DuZZKE2AlC1J+YbV_~uGGg0Y@fsks&LS`7iJJ@aMZr~MU9`R(W z-n7-pmNIz1uoWE098%Y{jU~42KPEmadrND9ji0FedebP( zzt+}sjN%W?#0$-8+g|Gqd^LKT?-X!4+J@2P^l<|z^l_3+71F%tZ4@Ve*5o1>z+hmQ z+zXZK`k=~pO_#kJY@uRcSM$<_)RQgNI?cj=WgU8;->^Oh{cPkrD{riILC}BYYsxH| zBid43edc`0nF0a!{WSK<>A4bBEJ{ruwS6jl#tKU@VT2{?-8+zj_5dt>j9_%KRxKuW z7stDMcUI?5i z4zD(C9Xyi*!>vPRvR-f9$NXPWyHnTqVH;ZuW_{GPj^D)0_xOLWSw8>oS-YY0RetxL z`MUNiowv8pg!$Vm_|>}aG?#ar%zY`|JZ|$|s0ER%^POD(q`$b2L7wA1s#o!^E+S;dPS7!=)RNS(4U03wu)5x}B6NWiV>T$8_uEZ;s$Gj(!tvK4( zM>!;Onw?T-iVVx7Y^x8tWPYS<(jV}n;tk>F!cYKzV(tYAQai?NnsFl+=+b9n*cRlX z)uBO$ig(Z-Z zK#nU6M%rSsVQFEpV2n`SUm!Q{Qh1Dh2Cae1usUFvwaH1`{w1fp?c4b8YkF_Aj;PEv z9j?3RT24JTbu>~7Zwg0BCWz3ZMv4W7VOUl?;$e~Amr+$b9+2Krr|h31J)Fj;*Df^E z2q(JVWEy=uc;+DfA2Rbm{@=&^Ur{^MOrwtzGY1p7*DQQSf4pby?ww4dkN2KAK-wuz zGgBWI%z6%`T-U4J=&k4e$GY`jrW#*x$o}JiTX`uMu9%KF^%r7%N<|5?^!=pUtb0=F zO3aLKI%PhbhV#u`-J0{A=JA`V%eKzEz)n%Tr!YmQ{gC@q?zJlBxF>=0b8+w0T*qe; zeGJOVZ*oCSfnj(uIH}GV%Bjdnb;;(lxj|v;7b}wZz=<1LPw%JuAc??;u;dd*eFT(VmNw+WXqn$Bw4?T9XyDkYQel z<@5Kp$kW1<e-UMXzVk)NrT-Z?$^$qAUCrUW z!_f^P{yP^2uyCigUbqCFb>Jm2_f!_jtUfH{#j|Ry&U9AYOEjLWukP4NG*v1(z*AQF zT;dNC8tM$?CmO$R;qWL~*k;+0A^!Sl8BB`kc1ZkClZfAe_{ZfEKPMd05X~7JQT|SV zUgW=fLDb2B%7;`&F_7nfp2{JdUn7hAKf@>?dzkzwfI>upkC$i^AC}~N99bYqX3ac9 zlRP?_xTh^-3RBK3*}SZ8;;LnddtSiP7L&r#m1oAWfk6e`;ulV;4!^*cvNiZKw)$}1 zQ9PD%C&5`iN{%)RCea9O!dEirOaDV!L&HHpB60&vWGSe;1sAL4Oa^V%z9FMYSL(W` zI8{eQsf=9wayT;pIn5)rTlC*$SDeKyh}P|0|2b`zE&T=M4emeRU<T-x2e0??CV;CDEB1T*MGsjzU)jn6ZW-!fYbFThs{pj z%gOZJmVK>Z1%!POJxS~$EzB#82kRpXZr%5^m8xaMT(QajVV#*U z-bx~omo^0np1*%z-tm&`s=tuG8NV$$D204G|1z~DY_HH}V^q&9^uNYOH+VATwW`EN z46>>^n7$zNIboti7M*?m$%bd#X#D>XQHrKpDce)gNSN$?6SV&jv@dR>xg4}#Wzjwp zv`+=?Uw5XQ0@_~#?T_eD-n`Z0(@hrb+gMvbJKB4GQd_>3Xu4IE1>DxHn3SQ1c5Rj* z)?|8>_ZXUPL$3j~7+pANIxca%B^Pa%3j75@nXvMXib;B9U8?*FX>lzNc|`Lyq`~Hq zpL`iZJ?0163fp(Pa;L{m($M)Aan6i>=q_?0levJNDt{k82QXBf40puW>w`b(1qcQR zrN#@cR7p-jQ!5riCleqfr(lYqnF`0<$F0Z?|Y!#MH+41P$ors}cUG^g4tw)puI zvYReqzr%%Qvx(Z|G*2rudnUWL$yz(6;?yNS1F6ap2Xxg6Cgk?HYH<0 z?n-tbbwL%uFlZm`3@g&*bP^W8`<%SBfTU2^7)PzdsGCuYx?uXvmL`gv1RI$G8(~{g z0UKEd8==KVxa^foUp2`V*Z63ZjSTv{q=rhITF_Xfd+n9{NNu%-A!~X8Pd5BgxhayW ztBYN{XZR(t{$}YE5=}RdY5R2`oA25!2PAtEoFA0~avCZJ?bP=%|5wQV#qeV-nbJJ4 z-U6D9lD;7^)8qfWX07G_J!@aahcX`U%tuX1zsAAgzhOg_1^XZBJDCTio>Ewts) z`Pb4Rv+S+&?SrYYe34;R`D(3gFiPquqK@KhI5u^Mqsz>WdX;}j|MAxw9NWVQjA|!@ zGqpnSF#wi%6te5`|B$KQ)}B?r-F`&tZ%(_ypCp1Rs3|D;dDGud6!HvaSV6^h<+07% zVS3P~sC|vQc90Q0Jj&5@Ko9e?3HT(UQN<0AZ}W(Y#Cb`v}G*sTI=%I{u#wt>^!451CFzy5rzQn-|}N<2Mrov=*Wf-l6C5zG^Y+|*ZE*lE<7DQD*?j9YBqn@DdnYwyUd=)L-$wwv zn&0)u9yND|Q(Ly;XlhHqn6%)*(K`%B7tY1iov#|kDK@6`KHbynbJL^p!m-L1kRD9e zX#7KZ^FKj{W$3D(+*JE#++ojU7%#@n&Z$Y~iLPGm3B;fYc1QPXLvT1PS-kCt-u&;P z#Sizb9k$(9Zx7mqZ>==#1rqh=X%}EU|BfSRyCoa$Zi2*ic-b^!$MeFU{+{MsJ!sUz zWtI__g{fhbo+e5(9R|$V@g1>6zXgSR5Uu&-&G<=XKJFNKzc=y+op=Y34F3to>p(Tm zUlLJje7Y7-E48ep7Z;6Bk1HOZ9$)%iC1+dH^#5ry^#9p)`v1myiYRcaj&u~bTbk|& z*v~CUCC!%7io!;cVKXVM_>D_*#bhbC{u7EN^k7mfp$Bv6uSnFaP6odaO0#PaBE!QSn_`e?{sr|*zxIM$ESxKpB{F6 zdf4&lrsMxHynk=aCC;VIi@>D`U9}|)T{{ZaZsKmN3q!YRi(=yL-a_a>df@0`_rTDGXOzXr$^nN9(8}Z>AuFGr4o|WUw3{3Zp^mFZ1+xKyZ6+0qwU^0 zg0qfIS}opWR{KDS0Lx_;1lR5Qsp3#2Am!i(PAWrcNRChqlN^5wmb6(rIu_-hYf(P` z158+R+C7_6XJ*=+rgoER*H{zc*sOcwtF;TW`okVUXdfPcP`e!n+@S69H@_d+rF0%( z<%5STdNTNtU*kYOmILeV!20*^L^yhY;7nW^M<*9rXuaCZLThA!-){mFJ>k)68sD1H z6CU%zPTa;z6RGl@jzFVQW6pb;ztNvZwe!t^Z@3CdQI^=nDpRY|vvj7R^NFy3W4=iL zo;W+|--`sd>)*=R-TH^MqUj&o%pX$P~_zOqqBc?dW7+6 zQ?_R22N4nVrMHHN?(8)C3~U<h`s%*= zHXiDm9SY~I{i6yW5f$DiEIep;QyAwUySjr4P2txl{7q#3O7@GV0y4cvS>(81avHYk zZJSz-qBa!h)m=@mry`Bx*YA)nh)E_D`X=M-?oz3Acp(8f8t!2J zqIsW1*Zy0m8bWz8wY)gOPl_VB_^JLuh@Y=3WbiYBP>7$y6wbyEns3tRA}7RXzZ*W@ zzKhIYU7kp<@=m|qc2R0Njx%-U{Ai|&#XzGjUUz=CE;>x^9rjOVUzz?559tTiQdP2+ zv7dj9YMi7I1=1PCG8CSGW)@vgJv#}KO3@Q3i1tbz%da+{6*Rm&ggY^>l`2Bmx8%THR}B26 zNmmy5ZKT*2z>@4I83lxNoS&xAg0|T!o7L%M4eMi@5)2t{LGQH8Nwo45NK@PFGqg#i z_r_fo{%_rU2jy48QghLCv{QhiOT%wMh4=V$yLSOtHuQ=A#tPAclg=N{36G2ROnxu0 zGGU6|&w8yBoLr2po`0di*jl#c>)4umY|T*@jMMgfwLgui57;AKpq%b+=&wioxfd5# zyW>hJG~9pG&@{XwAA<#hiF%5mE-dC$o9%YKB2(oTo)Z%ExeAG(2TdmAq)#<-_AG^$ zYR>ZBOT$)C1#YWN=ecbf90qI*gfZr&Q*N?+3E~aA3KQD*U;Qw_27GYBXCnM$Unuy@ zi?aO`1X1Op#+ol_Mlk=imP**7vo(I8%0c^eeSwoV;Ukx)@&L%=}U1GHN`1$c6vT>@AK(NhWFUhFD9Q(_hG?;~kC3~GW?J{e7#u5LNcb`_MjWOdiy0t?N`Z`=4Q`dQ(U%vxWk zim(!`ZRmLV)>QC+eoZAj%smssrx$c*j482JPZ(D~eiNK2>DwS=_skMfH!tf`I|SQ) zGz!L~LL;ultMi#f1NF1Y5K`wWX8#@XIUULA54|S+81J#%T0OuilOpPTHX_h%=U8Bw z+qK3V-gLcrT%tib4a*mng`ZcOLQTLHKj24Ei%8^3rDePY~JTy0s1FT>x7s= z!-XcN^@b+Ry?ZL!49o*@JjdZiaL1@|IE@sCN5m2;PoF^p=Nrgt;g*#acG+mTvrsg)vrh8s zerF3gi=vA)(WGK1xlhXS?TzI!i&+*r@`VnF3i=Kp+fT2c2K|ay6-3Z_tA&b1uP72m zehrRk=1Fg^>Okt3o$@PbHIrZ1gLg{qjTj6-qp8+!^QY%9TO=e8L6!zsYK(!um`<# z)bMdg3LgigfPXrZQ=(>=`)K91&5t!B!DYD%P4k?Qn`^wQtJ55DnbTK}wM8|PyaPfQ zn&a~ZsW~n8Txx@<%`A1?3yP`}OHLS2xw#F8EoN?W-i|p%GW}1kc;MVbPyJMtOq0*& z$>y{?IN7BJuisz8{#`^OS7Rq-RnHMGeZCYaZ4MOKf0|AkI>y+^6%ZazCmEatjb!Sd z;N5>yK!>JQo`b8!4AFp2wZ<++=kN|I@MqKKegT*{^!c+dLZ5etPNt?gub#At%Av8Poz0JZhy#uDEEkO${(6Ns*dFX$v zVF-SK;eb`Z7&5D-AB(89)^YH?9j}^bc$M}6+Yu=8m0>(=<3i4+dpc07;bKrI69jh= zbr}j}j;zV1&`E}`dG$93fH&{*hAd$XaSDI`7KLJVU?yKR1_+LK&cf{}RJ0E%L7Zyi zi&N+X%>c*S>&6}_)K=@?2d0At)Kof>q^(>TVCf*vRao^gpa|GV#!T~vA>>-w+2?e` z#E(NEHC&$jwPr-2Icpz)Jw<405$bgY9>8LY`I0+iEi@7CtE^T-G6+^Orm&3U;O_AA zC-$~I^WS|VTyG_%2IOqr&vYyDyRgXp6hY1i|DyF-rfmr9Vf$|U*gbHPyM-5F-q+l+ zW{`=w|IkNZT~R+T%lPlVeblfR_v)G+fk+dWg&m5)ek9~*wfs+-g~?b_ov6j^(pak^ zGvrHV_z8E8%~(L}@iqJKu8BLN)Di}GmYo=W3yeUA1XPqZg47lx0UdJ+_~{tuZJBSx zA~s#-Jl*r(f9W&z2AzM(*o$S2i?L6u3M8fXUK5xV zVYS))K{GWjHbI%5Gnwk6Oa#LI_{$*Tp8Hwg-(=EyEC;>{{dqe~FY-~wg!3b8J8YNo z#r_F9OfU7nvcvS@e*Yb&kMiH*`gOn`dT77G@7Q6w}XO`pZq0iV!^!T{sOZ%x>m}-qS_Peq-kE!-Z|~__l>RylqnG|`Pw6l3JzaNc{Tq5uFI0MC@99NKKd1Nf zVx?F0o~|vAU($Q}aHaR{J$;nYUuTceOaCjBzP$HzN9i~8o<2e8jlHK&Qu;Z)r%zUT zRqyH3lwQ(%`V6J_?LECt>96x&Fa57q`tsh>=PUh&-qTx@-q?Hk0;QkRd-`=suj)O0 zq0&owPrps+eS1$|r1aOB1ikdXP3g;fPhY9@8+uP)t@Os;)7L8foZi#dDZQ%qbWiCe zy{B(ddfy=3*eJT=QH#huVNt_tT_m75#!=xjSacR}WGD0PEyx=9V!Syc%39$VNa z%tJUYjHi{<3KTL}G6oiDu`7^X_WB3sv@~x1BKaY($<$_JsbAFas`_iH!a#;<3e*G# zr#7sn!>~Z&d03MNP*K?1FkPs2$J;P{lVPIy2zyS1F_|j}aYKY{D#RWUV2-wlF!&_` z+}a2;0z_Ddy3TnVvaAX^#ZOMZG>*te{~zkkt6@*Ve)vs5s|@5(Z}i|Kqb*FFxmZvOTRe!)j1pPNg*`MLG)9p-a6=#z!<`Yot1yEMnl-;mEp zKR7ELyXF(kdDB*-B-nropj2lfQwc1GgJ&{spA4CKF#qpk z{;#M#)SjUbV{VLove&G43G2q_oBW11M(-tDFzadM#V*<&4J^^z21WmDv0MH~`=X;Q zwsw(XH?|4$y0DbFDI1&%^?yv8Pc$ePe>Wb$7A@Ervj0Z27+!2*=EwXOpR@aj5MLoa z{7$<@BCUY!1kVaFZmyh@~3k12i3;Do?HKlDF3NF z=RYbp|6Ni31AERtGB^LVQU3Rj&VgTeFyoS&zd6dkEI0oJB!qv6s<9A{Mn%zFJ|QaS z=9ZfolndMIR<1HCcWQ3A^Rn7g8FonKFKDkKDz|rTxe&^)d{X za{Buw3E^K4c)cSkw=B2Z+dD3IZ&c3BE%(}v%Po$|otj(j@t~agr@wH%1^v4zDz|rT zxqE_gVK2MUTT4`K{a17F@`s>Y*iN@{=SSuKnp6~f8EM`FDf@Hx7<&Ia_oG~ zU$=56Mde24miu;4E}ReD${iJz%g-%W6_n#Xa!>8;6P0`P$Q-<=Lj8q!!3f*@1>;Z< zmAfLh+_0crI1b&)eVPd8%bB_5_6y2|{pwb3b5!oY+;U$I$_Y4?4e=Ae`9@T(b3{)6 zcG_{dm!oob=9V)^;J-tHK+w+fQT|lV`G@7^Ulrv)wdeeY=H`Da%70+b`E~O^e*rv? zMETzzp3`reD;7H}2n6|`i1IJ%IY0OA%wLedAj*G5&-stZ&EGG|Kc(mV$L8km8|D9M z&-u%9^Y0Yp&(F;t($f*S`FD--KXpV7e!~32bMxm#`LEB-A7qQ@&S;UVVzGP*=r81B z-RSx0UBh{B>h|?<6+L#GDIJaHb5Z^SKUe-WQU3Q2&*@)KZLB1!-`<>DgyR|Mj{~tv z_fh)hDB?fg1x*gkTIjgAqHd_H$KPOJHyGZt_)qKf4Zau_ErY$^Zx1u)r7URn94p;k+4W{OgwLey zoPAliZ`sbjk}fk1nTdZ5E<5V~idr6&u!kbL>G;0+SVux)CIUZq9ChDu&swh&2T0s; zTxSj^Z;tl0at@`x&{E}e*@{Fihp>uZr*WhXN{as^LemvWk4skD`7;XPC7pp>i<=7e zK^$qaee&1djd$s;?{AVmB%G(8yWIuXbV-F-PLS{Vu z0YMu*jN|t8Pr$a=(#+?qztF$sPKymkv9fkV&XP=W{;bHzXrL9deJK|S( zBQ)68*6fC*qklC8&9oY!X|>&4wZ70^CdWQA_5Wx4LX&RO{Ouq7%Fa!?rtm?LhZ61 z&cw4r-r|3S%qg^A#csfH()jXPD#K1(5a}cJ5I+hssXJnmu((QM#>|9&o5x@381(Ui7gg=JH`3X$^hE>F6_K5+^vcBylq z(>w`Jwr9Nr&dz$M$mwcBTQrl$;GO~nvM$xENzDC@W@u{b!L`PHR2vgnP6UlE?}>Pz z%UgMn#f3Cma4UCgSJ%2^x_Lglm)RdvA^*@e%~Vpmcs(Roo>bKo)OH3LF9H@G1qNsu zaUG+GXO2UA`8#{=4xR_oV{p7CYr7K*@$a?^mRpaq`qex_cku4EbmqIfptGmbd=ee4 zew>cBsj5Mf*~!C)J)wTrAJ7GW_*)N=@TjHaO3%)bQ~at@l~<^aSzS z(bHunQuHK4F-uP-6w%ZDCO$(?#rG8x6VcOrK6cc3ag?6v32e^9c1i>#)?*3kCpiRF z_?Ik#a`OX%nsZ=CP>~yf?Wjs6{bwKS>dIv4jkI0^!YtA%&LXY9_1rT#wQP3s(kK2m z$P3@cGuLPJKBTW7KwsTZe9&jm*A7vfNXZdb=lX!a!qYHTGTum>^fwFI^xLtvv` z=}utxP{^*^|39Oz8MkE7*QmUJzV_Tdq%RI;tQ(5$=u0L2+1%pKWck1J1p_nm)z6q{ zLSJXU*#mvmzx2OKU-xKw^So-f9(J2tssAkh(!n+}Dp(L#|1FEY-q_a19&X*cZ%AKe z$?Lu#s*u0;eZt%h7Q`KJt=<>J|4puS$bXM(NkEFY)`#L+x7}n>;`hf;*mA8uWw_Rp zFLbA>HVXX@@TYfq2KayKDM1^teD z^mI^=)AKmFn-uboU>hC`& zXZ@d~tGYY0=<4*31G-8K{!F@3L4P_*hyP1g+tF3*`hc!Zf29Yynz{B1(N&*BqqP|~ z1`L_~;4dLUcp>upH8#Y4(1arS{dN<-C90s;mGCAqcAw#?wr!cMp@{wqi1Ksp8`=>Crk0@_>1hus%SR*u zFtMLN%j_nzMgALlLBao|%zuf6%3LMePWmtGf!}@pVc~UEOPEGcHBLKjgH%K{2lrzB znb$#^-O~I&zi26!Oc#nn9<59WBYv|<(1w)bP@>F+bi%XUDfxH`<=X9R$0s9l{KE7c z=r^d~WjmgcWLJ8h%nqWR>0kNiWiYL(LrTov=($h0HI=(Js2E+x3pwAEy)D|=lpsIYY1XS==ZMN*Yq z)T^qb!^z_gPxZ$}Rl+mn;a=9DE8NTG(sj4t8Sq(jy~E*2q|V-su7y}gcE%P+Hg&DA zC*`cAd9zThdfw78nP!QuzoSf|>$^>Y=z3U&u8W`UPS?kNHeKUE{&ho^-RSzaCQ^L* zk2VCKHlc`5x0-lyr>AX*s&HN>j@285OQW;>uzs51*gHhw_7pzJG#74Ob zQ9&X`4T4G(7qSq|zzpfZ8Ho}M3Mej$D5w!;46cBINrc{ZG~Rfv=&s7H7w#$q{E-t9 z4v`2VmvSH7L?D7fKuG@ISJmCqGZ_+K{qxaGbseu>y{oETT|zKJ(|`yYfy)|9eV<7K zh$#^KJAZ@VKlo;(cCb!#{tu=|+DFR|6tRoyQP7DSAk|*xf>C+Y#|Z$`37LP!m7;3X z8~j_nizSeHeFhEEx{Zgwi&n3N;d@B+b-8B!#<}ZPmBE*d2483!y;;9{FQN?!Mh`*^ zJdFtP9)!?5T@Mnc>la=2$$OA75&E^U)TCdR9@6yd%?rc&H4Qz7!Q5o@A|@T9KB5&J z(>j`#bc}FNKc^#@hK}_%bS&4{^wCYS!VYZUA&A8ZVpecz6boC`u@+e<1hEg9+z_}@F@hDr zs?+KjF$Nm2A9p*cr(OePO*+Urc5$64(xgLL_qFLL3NAGljLM_7B>-H{c9WjHPMN72 zJGhntq-P(7_3U5YM(f$u9xaMp*CAtbjXN3c(OP6zbB#L?p>dg&CXHKIr)ga3`7LPN$#Ad6u9^p# zqt~c(6-BS6b$rb3&KEOl9NVeaie#m9?v}s6gQD_L^)Ah9Ry57?j*u1C3e2hYx8@^w)N$=O} z)AYV~TV3yQ*ay99go#f@Z)?(h>L-cDE$F`1A-ACWg%W`nKNVv7zmfvf z{kIS6|B0Gt{db^{zQ4Yi{@a8??k0=s_djPkP5nOizfix=LPo#8jcYw*Hm{l{{j9J9x^OJ=AumGH!Q(ZNN#Qkeh-fT2=&uh0-J6LdK;GDeT*1PmSCmH60F~) zS%RzM!j{078bgG7!y5b^9tn`NwPFo4gVBOD_=f8d=yk-_QINg`Cscg-VZgGwi}z%`Vt+;E zRUQJbyAU&jOQTr)8aQ|wtoaC`MHUOeOJZ6H&HgsC63y6I<4)ErN-{rD>dDOUA z08ExbGfzwF0VqEfps2j+f2w0(q-P?dDq+Z?kq%8;bqs(nZwYWz8TAgTfSax7$@9EJ z;@@gNmOy6f0azx@J5W~@ZMN=4p;?d!X?YD2KO__MTQ;3T@Uw1VAx z$Hq9{^EkBPN~0Asc?hjw3=S@hVtX~XdK&z>Rcn#$LeLh|s%ibm8Cf;W0wzaWwU{DN z<4)DAU@G!QSTd6pBxzG$fPWz-3|wf7vbb7(BR^0;?qbvYiA*R=#dh2Rr5-6VnHREx zWL|HnG)0;$oMt}PkojC}E*OU=L+JI@8#(&J_|95z^{$O~0|6q9g zF!B2%+xz+-3@_^shIcIV$F}#QFg#2W;NXvt8H{+tG6=h|92dX$jwOTS(=cRk7=sD> zTY@DO{7v<3}-sGodv`Io{0|x$rFf&9sf(@7&u#g-VK27ruOTuAZ(<;1v`E&jR zdhQb!KU?)vG)_D2op#hXW1ga^z?@n?MMICg@>4YYoG`h!)oUO-a5Ug}4AmwCCu4^M z@-?V?;qi&MH&;6~a})%P@<{6Tz|{W#@b=UBJYgoCEHw^+=b|wG>6kbJNZFG;3q$pariLgG$vIqr*@eL@dzgb%cQ>e zgF%dBLQXHFg8Na#VB;1p2N>R0P;P!sQJDEIedvd)bUJ*%B1sNd$V`X#coM*@WFZaX z7!(m^5sf3LLff?r(Ksivum$?I)IzqEh|9-FGg;Q+rXJ9uL0c$kh$4k1KFNeUD8}F| zr0ILq{)=e&L4#LN8Gc`@F!LYu5ly#GStQYoh0Ju*k^qKpU!-9pmb9a!Db<)fzYS1C zyY0F}MbM6hKBp5YwquJ#itpGmRfP7^cwMa_kAsPR!#Mp6jMRJi{-AoG$gWal6QszE z(i$C8sl__n$C)Q1a@S!r9Wga#+d*_Xa=Jv>p@jw=S;$OBEeUk|hGzmm+Es$~8u**_ zGfdGEjihLV&_+pP6t!8M zR;n{<6|mT__aMs_B1_1`Aqw~kW zw7K+#U%*+e(RyQ8dQG&Z!RqOxm+clI>E*jcqAG)=(NtEo&5ESAlhZo_Gqv_dMspGi zJ5Z*17L)%di@@13EiCA9J;_4=ef1f0VmHc=)SEbQGA#A~6DQa@^V4k7PfLVc^83c(#AjQZ zbAs(6h|&P2Ae<9SL83Sjr6CbJPc#kDxx{eW#-{j@p6zIR1Y#Z_vWDCnnVxW!h|&{n zNf&y;LS{bES#Y!*eBxG!Rt6o6JG9z!3+K~D3~Morj;%G}_s(d+iFj2T)*2J9Vl5f! z!w9zWOIpKMewQ_`5R%Ir?yG`Ka}0jn!1>jzfO;6-Dz5BYd(Z^(do%fOu0c?;X}ExZ zt>kkhi{>48i*&P=#o`|=hEpvJ*KUMs)XId$zj2yh!Vx)dO ztHxa~bSp$IdVknC+#7oA8BfK5w$7a4qV(G^PiQnA53Ix4b)2=QbL5lbl(x5E#3wDq z0dzkeyc&jsqi8PA`A!~7~SR&H2$zQ zuv5LjUA|G2@3f0O4lC|1zzsLg&@(nY!T(-3;=j~Ba&(n5r?kiC!z?IvYM3bBXBT^R zD{IpJ!GnbMnoQnEJlH2?17w^S z2VsyV*r{B_&O|XT8=v%G2MEFHD&~YGL6W=SM8ChgVF$O-%_MSGZ?T7M+iwXLr2`S6 zXiH!Z6&0mJBS)*BA3D_(7FLe8Z2JPaAzGTe$O&S4+r?;plkj@Eu%KKRSZSg-#w87+ zbW9fGi&jj}^~$2dlb)7;yF0DC6c*A_cges|y!E>VacnI}b*HEQfbS+<=akArdDirA zr|$BMEf+)anV$5i74{OU!X*qYcS+@@3Z#m<^-h*nx0n10!UCHU_=)msa~RQ{Wk2b) zLg7pF%?R<@YzoTH7SK=8THH?}&17Lcs@#7e0I*zAG0$w<^(&y(JWF5nPn5Lc<^Hy! zG@oZGoySscUWmMlE&H=^#7F7*<*6pRahY+X3iPnOh}60_H9oK;Q+tMs@^vGqD)?fQ z8xE2V98#{q?`W~c)*lJ<&y-)j;HAY0mZBAbM6cYb8`6D6YXj$*^%<;}8okm6 z1RI+Cy*%=r4si}q7XMd@a-KshI_mF~wlSI*wol=zz_W!35s_^m=n4ff?Gh*;@HV}qUmYJqC7R*vY1(eFS;IT zsvcyw)_n;(fnn-gk|+7*8yA7TM};EVUJDyd4PJPdHQ4_knDt*4KH$Hc`^`n^Akk6r z(*_jz(_*Ts=s-a6%2&OCoW7#n{u_MKPM`eGlmY@+uy`(hECIs502#ber>F4a;S!1L zf$z|mdk{tc$gZOWE{la4?v#g&fm->}4!F~{XzlXI1ILS21mW= z{Kf3GtuW&?E9VSWf%41xx%=NUW@;HpO54d6OYpkwzrY--LrAmHKi1gR_V zFh*D5{SvZ%(hq4Xg!iS*B{aMY?o7rbmbg$S;HWrwNeT7G!M#?;m6Q3 z!6$shU^)6@C64fhJTaTp_2qglQ+PWP9re==Na)khT-(!#_dg+4?29WMh>k1mfO5A= zR$)*QEc~)-?()W?bW;3&aMqeW!Tt>15ThsLitEuXQ9=hY zhlS*>m-31Ov$QUQ!%I6*)HJ<2{6_?rU??{NHUT=I-p)jV(+k&UsczHv@PcQO0RL3r zLKv>m>Z8C_>o;yy#t`CU*K%14kbFA=<_;zk8s<*h&1j;$*OA5yRkCf)AsEc7^mb;v zh|i$X`?gTWe~NRwAv{m^(Zz?FB-;~+r`N5<)*f};VYLUorv}krh{gaq|3v8oCwRt< z&ygJ~y&FVTs;MfuQ)hyJ4xy_kXIzBj(npBmc%Ku=Wn{w@->y?li@PAiy05Y#q~j&x zeKPvb!x-Y!ZE_B0He$xlw6Z7LemV$T8hV~LWMI7KMh%}YK*iSM(-i3p-Xf;>_vBIyU@`zU=T zOZV#On!N}%j1~$PKwnEgM_bBLsgVtPPc^~LBWHDH5+2f97CaHg@*;xuCkD&HU;)Se zyqbmsNV<$A?Ljcu01P|wq@O6s!je|9B%e@p0JQ?SN=n)T3QM-nS<>S|(F&gQ5hbl; zNw2V^2jH0GNzYNz=Pcg!O7Fwc8-J!|b{7iA!Mw32yHNfYM9y|~Y4VQUg;A?j zX~(jz<5>e+-JyvoR^QkI$XSE9fz|OTX#Yirno7S02XL30Wcvv5%A`G{=6f+}R`ww^ zm{E+_WGstY0#`)fJA-on6ImqNV+b=1;p!fH`Ay-b9y!4yU)q!Y(-W@5TK zQ7CGn@NhegZD^QWh)-&d&jC#=#|>G1z7yr47_IdAF5PX<-^(mnXg4!y7Nw8^7^+Rh zuWZ}9pXky{D0&BNMBQ8QtymdKt5_05N}Yi;YHtN4?ru-*{me-02%AdSBK<`~iqd|i z{oALS>i*$eLWT%NQvI3@F*0US@efcOS)W8$vW=$#GnSGC;uAsj2P7}bK{>pFA!qcP z1=IFEcn#C`jR4cO{0MB|PV93);$=t#lPsm*@C+YQhI-0SfeedA14!N1i@Gydb^lrP zAP@X&(L^4YyC}c|uP=Il2cBQ_I1dyp^09#W6xz0E3J*U@;fHznehL$oYA%IF^4Qz- z-0aC$mRBWblhz*uGxAi7OZ?}_wn79jv!%`&{RrzsYHSk_Nfc8KcSb{gM582IF5;99 zP|LEt_@)`44If-4{MRY{E}#!vJLHmWO`j7h@qFD(0Ac=&U3Jv*oq7RwC^5Je) z+lz=RwajPi$w1G>UUm%2W5yGdJ~JI0*#^G=VJ+FFAx^dp1Fm9GlTerg`Y0~~k;M}U zHEKVq$Sg{*lqLU46mTQIk_q6f(|3+iT{wNg)?=aH2K;9jd|NUibcKl{$bA7>vRNsb zrkN;iW5r!e|KIxruv3slYwnZ;<-_fyCY@#>rSt-{j3Yg7AA9BaZgdOk%WTep@ph+D z#9|JU04@R^^`=T+All#d9uoYwLPQG?C@naYZBefOC&A6Q4-pukK7b$kryN6dBWc1k zP>W%s<^oD9$msDIiAxEJr4pPk-vA+BgHuFvu)K>q9T%g|)q41jz*gxD3^CNVP&Gvd zghIL~LhCr5hCsJ!h6uGDYiFasSkM&3CKEWJw=iZD#KXTN0Wh&|55`$ z24dCm;E^sbUTMc-m}RXs_WgXa&Sv{S;uNSg2sU4sxvxaLq1(<>+A4a6HgLARY8Bo6MmGVHlr_9gYYl0U_+%*7>u^!O~sw(!A> zcX*^_LtIAKZQ`#^F}9 zssQA{XnSD2D97U-Q5J``W1KE$rsA6>7yO&e6b$DblTZ0}IC!dO6YG53hvNZ*MVUHvOiG8T05j zS+Cy@b(0|=CHHg=@zVDS4D6$H{j=a&msKix~yuL8ro%V1t-JZ}

eOuy?Y7>^PS+BH2?@m@*Hz;6Le15&U>Brk$X84vACcV?zNyFAiZ*L zZ)gGl4Yx3KFBb|0NK&xj3M@(j21B{zg&tuVC0JGS1_?g#ZD4#z9qgh!$qNaS?#iorVjBC-Ln zcW@bu2-95>BguXoZS%^L>}(_^PwEKf!-+lMw`3Id^f={Bf3!rH^&CxD5s5f-%7Yr% zW$iuS1%}U|3WIBS8d-b1mC2%%h_iPXTc=kC4nhl)*e+_xJzu3$3(UR^3At{vJK=xu zq*n>gUeu4Mmr9t^a{waTT+kN0C;;4Ti@v8W>w=Z^lP>lXf)wwS9-WUKb-o*GCAh}f z8*)1Ei~lo|d=Qgh1y&Zy(Q4m37{s~Y@7QX0=q@Xqk1*T|S)v$#i^h81UAo71SyWv*|G zsXo{Yi>ku18S+0I0*$BS_j$0V$v`m!*U6a7LD4U?(|X2<5$FtAw|Jr!9U=M%>J(3i z=mhofaz6{(mkUJ_>OyL7JdZ3CPURo8$ww$mgOd&^bQLLwMwi~|5aDRo`bzB5L(M|ry`wCaP#+BW_F-9d9+sctsAt=KCF|MJ z)?(A;JY4}h)|*j&PtCo*x{CkCb}^h?*cuPYMI}?yp2cp)?l&C zTaCJM6Z7}^q$+pXTC5m3nI6(0i*;=hhM*foc~X+ze|gBPokBC91@5@V6Ft=R!us7N zxeg||(%0oL_0%NL{y<--*G6@_HqX%E;ns23(=asFmt-<%Nl|)KPu!MmYimi(Z{9^e z>3RJo-Of4_bROtXEanb{bcnhUm9ABx0dH})rl!Jjp{SOLZ6O#&JP9kD`Zs3&N6*I^ zY`wXQQWv8HA1}0s_jIP|IPeDzkP1_#z(lEsur%nEejq=5EuC;J!Z+wHEIeFR{2QC& z{c8oBp!#?nOx{3;dOkH+9tIA?xq&0NhB0t078ccCnK!_kBF7g~ z!j@(UFq7GoLjD2PZOIpDz=Q=DP$T6dr09h9%Hxxqm>c;*ew-$kHhR*x3eQ$$!%~Mv zqIMXOjXsLPXw%Zq4nV>?w5&+R(JO6HN3{kDh9MeMz5(i8GpP2hfodGu4Ai%X;#j?H z22~9@x7fg|n}a%fyAJB_W>8PJ1}eQdsCEWcFPlO2ZVgl!P>3S?3kFtfHCHG59>`UT z4IBX9P86s_L~&ZZWX9^v)B65yR!l9^S7=KOC!NRv=Ejr+JZxX8g>AI->F#M7eI{b(b2gXx|E;5TnOP zyGvM@s#~Rp5GO3OyCel9S=S&eGz?P}>}^XlacTU6>ygr z$dwx4j(}J~sR>-E0q&|+z&*r>Mr~bSfO8^FSfGR3ZZg6fehs%Zrak{0m_%8FXAs5J zF2Wi-*BYpMo2$z8h~l6ktbx-6Dwb5EV3Mq9CTKB9|C_rRxt1Y{i$g@8d}C{%){D(ReSoMK zeZ#(AT5e+@Ln?w;_aVyFJ(^g5Zw1h7#=r57xKb@FFw5`&pMU8d1W6HZYG);qxj{&}~qi`d%x*@&*w*#*a1Z_T8<($;NDrj1L?Iy4mhY6F6BnWr{wk5loO`O537=%|t{(l%`M-qsgj6 zVN%6}wN^vRq@3>~N`n<4y7{faI_zwQS0$n}SP>&Px}Qha&zN}q*xUep5;i~)#(LYq zFf2{iBcv{Y`$E9`V~{%He4P5RsZ7lJ^P1Bo6H#0ZBW&py6R23G=CVvq6?2FE8&)U6 z9rkuphuxtSXww*85#l(4_~jBl=h_$^57it9(Kqsm%@G zBEtYijQ7%719f|ItS(2CCPfjj_WT@fVJy-gYu;U~B_Yz3*EDu~%LFMVt@hp0j8+Q~ z#c35W%+78N)T7O5m0{2-LQ8BWP_f$QgGVCDHl-qJoa?4&S@^oHWlBBGaEcJCyAUN5x{+dWJy+iRU9qSKM${r z=JPW#Ou<*ul>3u5Pg8PW-)8TbW(NWMyC zuO=3%m+2*5HIUXz_*jX0_*t1dT8^(^B~+yqjyvJ@in4C)$rHv|9$`n`0W4Y+AipZQ z30itkB`uB|uX(G<`p{KNb5QhZ(YRO=eTBv;@5fQyWuRnjTVVlVdWBZ z`CTQA1CL*wE7oQ6H3@GMH(;FfLUWbRTo zEeO|nq}8;Z$6cbaoZ2tpk}W{hoZ0Ig)!Q?~;M8D&}}(+%*iJ2l)Z!`#xlMlZU?P{-9+ zny`pH)`{35QMe4*v0ZT<)=lw%FI(U3h$eN^mUov24yo@WOBAXRlZP9i1lr2Dx_Fyb z`(C4VP6tE0L&H$tq$DhnW3R`~25iIeTGwj3a8?Sz9GFnDx3XpSAlQI)YD)9kBfN$m zqCga(W*|x%m4$~4KkjJOiU>IO_ihGf0HQP>Y8cKdfWwU7vsaz1taYHaf!3@$La&~V zA%y#|I#7qW(ijSyX$QBvmkHu|qAtJnI0?#d?0nWZ7BGmBT_$k+yAJUpENq>fhP8#* zMtAGzguOb%9Y(8ljo~`BJX*&t)l2*hOKcINPMHsY=7vk~0gwV|jFQ|4o?pOZC&J;N zu=Yc{$WJV;Ge*zv02HYjtzYY^CTVfBV6Ddmv^eDvHW;((dxzA+TR4E_(FvQhgn7{k z%Xg$W zk5)Q_qL0WL$kXP!q*_tF=_*Sbi{*S<;}Tk{?YM#Vzzqpa-4FZK8N1zRE16I@u`^1{ zXr%pQLg9V~P`iY}e*9xO`{+p@MQf+GbJMEs4LnIfk{>%Sg`%A;BBHHi=8JGY4#!t3LA)7GDduO|wjBJ2{8Ew26}PBOjy8=x{s`9?3+ z%+{UMY@IEZt-GFNjoCVB&`Gj&{d9mucGx-H*yqB> zix_LKYqoD;Ku2IHJ8r|cp87sdaKCl(w?jf*wx}QIy0-tU4PQAmoz48hvk#ckVLHSc zJLzWZOwGNO87Hj+37dPX4l(I69iqvU%G96N9<6K}xI&b^6N5V-#A)(iY;$QV%(|?D z1v~GBqN8Up)m_)q|R} z3|94k4*L+SOAOdJLmFR!x!W>5-<^gO8MGrD;7f?F9*2x?BO_r>TaI*NKU<5VeN1|s zUyGw1O?uoIEspjs>2Y4fF$MU@U|Mq*1}=ky-{ShXzqS)@z%>;~C`0}WhhDbIAY5cw zjOXT{Y#h8F)y#ddb)#0>>zC-{FqCB?cbJgYg%T@783)IFbL8xLIrCRBd~-ZfmET9ZB&Ai@fp6@G(M=Wv0mpBm_6dFIAl0y7 zr_nk)O=f)Q`vc#K(sEJSguRA9f$fAG66#ndhVE(bNO9O4Y3z#>=Xlyxd8K2N%VIh@F%;ml6Z6R+5$O{n_TMH8f zNV3%{52!}dRtpfyaZ+ev6ZWd^z=(Ex{W!@t*Dc={FZRIw2m6rcC(7fMHetgvw%^BN zs~Dy6JzaamjNV`8pnu$hK7{o#{Di4gO}i_lz#Q6G<_&c`;tAc+B=#JRGr)b~ywW>) zs1G}t5qxzDf|9QQd&*|xKE8R%%bO2kt8@WvDD%zp$}B7Pmd*CcEUTwtR~)vGrT8RQ zCv2jk&GPZs09lD&s4HqmFXyqAV{=&GN4;A$_QS%dg^jw{pm{auB)9QOqfxI9^}6RN zzwbPVJ*J3|eX~7MC2ePO%7ZeUQk%4LA8PE({eNOjd=>Au%P}X%{DSs3jtfqkOM6b) zzG83awt6x|*vF1}yf-wu+$*VGsoE=HLa-V2&Gkyd=b`TTO2sB*kVnt=%80-y&?kSw zTo5JWF);ARfh13Vt5CEMBT%?;JR#g*tPRX6AT(jvQW-|{KtJBw`n+^V73hl}VH+unbop|bJ z>oncVjL>xEHeoKY=M1+A&JiTBg9-dlf)LEY0G_Y}IZO)GyaT%eW|}dOcB96rhrSQ@ z`i4i+G@{v=%(BB49fQq}Q_EV(Pi|I#r~DhqHyx*jP=cw<3G^VE%0OF~>cOC3*cs80 z$0;XI;Fb)?GwaI}r99j#W1-E3>L4A`ybBFTY@~)it#}LvFtpfYCF~41qLaIWLGE~9 z#>kCv0fQQE_Ej|_`aih)D2nJ?nwgL}M!xzMnKMSq7pzMn(%lIJTbh-80$$Q6%H-0Y z#n@}iN)(`mk1gyyt(HK2)f`lDB&Y@*)c>t*8LLMyppKenyD5q-^6CzWd;nom@maXn z1;HadtI<2_-{u&>Qm%*cz%v2g!;S`AhanVR19;?>aFO`sR6sYmV*(zxpMNtas30nT(!kSdWS6f4|e(FvjRyX+%J6XhBh51TDA%0?9b_F#ypS6LZ+T z3d4=4q4HaZ(uT?rtEb&tgVh^-M-(gzbtilX|5~|eo5l~dd=x{Qp!JbRr4~mQo9l6( zA&xO}I65!Tn0h~Sd!$I1X5w#Ru81CxeNxvrmxf8A^fWWv2!AUzRvd)14^n2JduqBx znB}^`VrfeGEop8JJ6u3BNg5p*R&wn(T8+ms6b<*mXX3Z4hob9#%LO-P_G3#dht>US zG>G%VCW^@lGXX6wMa*Xqx!-cZdHpoEx>Q-I5QlMRDvwXRZj1r?|7~bF`>hpltk|1Bgni}E0{`F!=3}1B*OU&R_ z;LJmzD9H;_6yM6BYlOuFB_`!NGB6R_)OSOyw1v)yeH>q|YPn?xP%a9iLm?X_1;wzR(xC0Ip~G+5S9!=9HAv&x<8<>E~}H1ux_&i+ObR^?GhdQSp$92sq0mSQZ3hbK z9TY03P!@&eQYeGPQNEj49EEyNXgh_vQK$els+}k_hC=64D3d}~3MEtM7>-DlSSWOW zLfboaD75`Kgy@WWNjZfi z3eBa^GZZSIP=G>XC^UgWnH0L8Ldg`$rI3X}J_>D@5gJ6HatftWXfB0rpilvYuA6}gK&yDPyP1_aNvT-r~1eMF^3WZra4q(_I-+`eGIg*6J|KeL+gFoT( z!R+iQ7tqgE@?$%j>Nq%3PgTGl{b&vyVpNwbgQAVap(J+1=Fv*z*<6DIw{ljpFXY2v zrscxST^Jf-zURXH66b93flC#EDCU6km5&cL;vxq3JWTuGjKJ(~zE_%p<2%*P9?PW> zi8y*{_era84(iVl=b&P(7jLIwr?FoA16yCE15m5N2cR~o+m@1}V2xM8DIMP&<^L*( zB)&OnpF`AIc64VR;?ytewC`!f%IhrCv|{xZtYWcDh@7cM-o3+g3TPsgod^Q3g>IZG zQ|_S{q9ysipT9aDh8ynk!mbF2a8Qa;XR|Y3-G+S<^5Bz;+oCbLucQ)_wRX$ZtA3{1 z33Wy}D*zL{R6DeYov}u|d%mKUQ#=lF)`9i#bh!E^u&%<6kzYHu+vUQF?GC54lBGGE z6}#|Jr8dG5>kQpxqg*(=Oo_Shki!YvNX2vGS)nQxpWwvtYd}y}V%hzy3*7`No^_#* zu~+D<3w`(#BoWAWP9U^969o*^Y5T}o1HAc{(*w*sV&eJ(W#D=qF(6oN^Nhu2T#&N? zf4#XU;0(fbkvnjxY&nZ)#NV9Ullat5wX3CY1v^87IWNdtm6OHFW}QH5Tv>2Fp>)Mg zTvoY~AY?T5zD*<&Sc=Ku;7Jc&Pr^x*bK;W+EBEJA@Dpk-lMLd>#4OG; zuyGG~woIJ_QDR5&)f()H2ulL;dUZ*_765iM(NnPl&or++NL)Bv&8TJ=~AUD9NeEInSlwZl=|@YgUY?;u=cC%^BLr+RlPR4DZkcv;@kr9-iX}3Uh9dIuJKP z-cEE9JtvC_L9NhfpqwkztBtw?_E;123%JGfG8K2_oSuUo&k4D&nG!{IZDDzbH&K^#la%i=gc+RK zVTe3&(qml(YI}33Q-PY`lW6X-u2XL(dl1!!hAW~K8fLh`y0AL!X{n;skrl1x6|Gl0 zU=JTBMNIoKo%OJ+|G0>)b{PE!;PuI3Cda{Xp)O!A@XinKs0R{}?#k*w#juS5v1*!O3eU2W9Ca@J%s`T% z(Amgo`njsaj2Obu>VWDxjK-VGIIIO^CgiePiO|fv(13xD0zm)exC%!d0zYcB@U>c> z4Qp>?{WK||{Qj&)h_loBgZlXYodd*+*w`gf*;++oH%8lMje9OFM@MN}t2I?qp>wft zHDuw=rQqQhXlh0Q-0YLv%qDP!> z9WK#Upgq!3w)~74GZvhsYQ^<6Ja+J!OnQ&<(E>E$Lt_+CE*OtxV0McMtsmRU$-MyJ z>S#>(@m9theB=7F&Fr2swL5wv+E_wP5n2%`ZG%+64ZByPFL%mIHm>P;b_*UtFx~Z~ z3SZ)08-lQEm9-myR5qk6C94JTm-q8-3Q*nA{Vq zDW-a*mVx?fWig^K!knYNjcDUGlYdgiv{mMeFX|cF>e0${ijpeT;V>ZFc_LQqk5e8( zG<{Z_xYZ+-BPzoaitj-0p!KN5kXHRS1X%Nr9HixXa>U%kpu-XKC1Al3BvFde6|w3I zh>6Y~uV-(92pQQAeva&$5o5IDM~b-`(-1}x*5DP0VhuiN&iG%-IDr9UD1kC_^^8t) z#=lX<6AVc`W4@lTmgo=~fgKeaAY_adBawz(Be+xWRQlkME_U9BVbS1PbL24(N(`RAxJ zmYeFkjk1qI42RAj_eC6on!j3ynnHy^$YTswLaYN7yn-RhnA(QE*T4=M1gZZ7F$p?V z89{zR6e9>RB$^=QED;1*yTXLvzX{5xh%w;Kp_p4(BY+5lTcpG7i0Ejz<8`>xnW4~B z`A&jzH)5i*r|a3@!r0v4%axSzx$y^0yj68P;nM z#i;QxqK%A;DC05An8GIFLp|eaL>n24DdT_Em@`h(GtNe|k?|qQ_%FDi!Vq)xjL#q% zS{!fE;(kawt%>+R=cm%1KtLqkjY0C?{!J|dE6>L^9D^v^5UcJr0Mt?@0JvVKDv8zC zl;dU11JSgz3i;r1o~OKk1bCcrzgeZa6q^^hWM8~h$QHVaPtaIGvm=503us3lZRz6^+B?cLq2XV=U6;Xpz(3B=U>@>qNMIiF z%?7gHAW9t$91LU^Q;a9VjC@1@$&7T=BuuyI1H?j?Lr9{hO5`3hmKi zenlRWq4^fktZX{SYU08I#J9wSAF4Hiab0E|_DrgRM9#~at7-W}#H!brhaC4%%<(b} zSEh$qtSIRFEuuAc83Tc9b-4GIa|*D5Ku3a-j+p4|zkj5mvCN!(4`S81F|vQ7XYW;E zg1&&Vw?#}e^mp{^SCpEv&!X%nmo(4*n4bL}BpPZsg0kPNXD9XyrkH!)DP}Rt10-0jOIT6V zTC8U@ad@r{_wvQ2*8Gj29M`i`Yo<`l3oMTg_dy-*gNQZ|7)lv?ePwR;06k+HL`PG< z8%uT+xBvH(IT@D!E zY&zVJ^=RerKhb(vsQ>(+(O21y7PW_ zP13XHd|}EynX=!2nCR^H=-D@$p}Q#iS23XX)U$UoXYWMW>oE$BhJNxN8t&OhG;rUG zShZ)2?5p+c6V2HdQuZu8JF)Tuius1gg)Y)Bv7+Gl`?_$LSQ*ga-m=hy#(f0k62wGf zJy_5Fm07TRQ}$wAunCRJDWwMGRV(>DljL zLaPbjzbO07y1Wt^uT#vr2x=6vqCjI_3~D^2!|ltAjRyA)g3>`Z946xR)3d)}W=eO; z?$?=O%HB@TPVdecEI;xdvUiC=lg&tA(*2X!DlDb!B{8hR$9nc_%|`E4%5F2;vLMA= z!!$r=O&%)>nw*M3>tQuB~4jK0wz>Bm>oehJmh3U?K z!9Hmv9))vb8;i6i>;ht!KC=CaUa8iTzE%j*P5*q)3NG!f#09_u>)q*F^S^OR^)Bf+ zt~Y3M9;M->|9%qN=s1>O5%6d~2aYMR(lkgS> z>oDX0-@&KeP4FMi*x7Unen4qWjqSW(0$PY2HaK1Cl>@+fpHCi~>I~(L&bq=G5A@Z$}_1;&Gt=`wJiG&vP7%}mdM+i)(Z4E!GwENL z5hgvo>@=;Btiv|t_qXsnww4i%3ji*s$H^B>71;ecHA3)5a7|f*ykMC#)TfQks^^x+ zWECFX^MW%jFa)dtgTS3uI5YVnZEqNHC7E;OaNwJ0u2dB;t_X$CQUl~p{fB6rVH*UE zons}+Olp|yD^UexEc5aWo}(Y9XQ;H@WhKhJTAsQ>B1JZRNi}LmNNw4Tyg)A$AXg!h z(~zvz|Bho|wO$E2J`H*VMKtN#WvA6QJRwRC+Dd`>Y9kC|ct0P11!kC>l?RdyN!#L) zb5f?@&4stbP_Igy7f(`#JVkH#1RxG>oRom<;)MXbR5{JEcrs8_dftRx@VMEVCE+O? zXZom=yk|;0^3;?m%7rM4w|?>Z?-WYMGe5zMOF%%Y-*|@wuPc^q-4TD)Xsf^3Y^lb5V39bW3g< z#M6z~&iE{Q?pw|pK}zHR#+gmE!D-2OD(WK2Hawf6==jNHq>*C-j>QGkpnGnlS8S&B zMx!zb=^8gqF;cUe{1+%0Q-DB?8#hLf5-(}c5<1`^*@1*xO%X-WKY$p|-g;Vt57|8i zGXH!Tf-w4NyX!Lb`^1AM;sOqA&Qo^f6PZya6yMD&XZH4y=2OB-Ex{RFikph6`nl2{ z95bC*glu@PwA}xloZT^aqD|mSQJ#_v#YtWK8nxr4G}aCVu8BoqmpSJ$Z12T`f714`jPfD=BJqny7xftYb> z4uvm<*d^hOWBzg*J+#8!S@Fnt&)Nr}hh5wx&e%auFEJyE6SH`X$s>(QN!FfXTCP3C zgtsF}@Hkwd@F{%YEr3+K(FCC%1cA-$=Sk1%Clqx+ijE(Dfkk_A%!PNOY`~MYkp`<8 zVJP+@=*4@zcoY)$IoT_X!Rt4J?0M9K0mD4fRB95|sqBga-JBEpp6Zb%rsUyGFH^m) zlz#s6IXq={A=#jMkMtN84V47m3>^K$L03o%+G)HlB@~W=?GhGl^vFf*$tStjMhF|Y zZhB8j2<~M#->AJNLoZ9IA40rvFCgr0bh#LGB6kgP zd+F8WLrPr`!nqgUPI(D`ipq-zsHBc5O8Z+#0q9Ham?C1S4|iYT2XAIChXCTC3>s>WYYrXm^)omZx$pb-VQY2B)SZm-a(# zO1qh4hPL8ib~{nXL#j}zKN*kTB#Omvvi6J1pXi+lAg7dGLl4f6X1aoBu-v_U&0#CexTI?8pyIowlmFu|GQoUxZ4UK{RdS3OL7a2{*d zcx*_{cxoa>3>DjL*uMvfpK__NFdO%X;Z?wmfJe`FGaf(y^1ID-wD`S-)n;o;|O%qz6^;-O0#i`Yn7 z(IL6h_xV%MFld0BF?Rwr%&1dXcxRG2fb0S6c$j<4WE%GexTNZ`%%kj`4d=L1O=Wf- zz8PVD9u!Y|7Y@ZrcUaJVV}d3u9DcnhkA@()?MExy;P^MJWN>G^|0*$kV}2*Kju}nV zi#Idqg2pZQ7K8mQ{sSB?#nn)p94F^B1RFDjS+)3-4mYK&AMsD4z4`?SIc==oP_OmG za$a8Aijk<-TBn>i2_66m)H3N})z7M>_G2 z&LzpHV=*n<*S+anLc+S37WL~wVN?tNY5?Q~47z74UWcKML8NoZ98|pcCX`gO@lB72 z1S^et7+;)AW)t-Gl&2R5MCjq|>;1TPrZQZMzyPEe72skB0Ho^#!j<9>2;veWD%rr| zI!5F}HwENqNW~s8QvZu@(pE4nvCdJ9`4=czJvl)P-eU3pBFYyApK7>PDC$nx=tTs& zz9NjGG8N-tCSUTSc$M)0o?NCuNZ6+6!nJ#BShzMK3}aIO9KimJiU5u1oBUnq;b}#F z6KDNvZ1WJw(rJ*1agUx~?o|0_^ZS?j``{T*b0|XLVF;`8>fhJ1U0tzk%Ru# z*yb9c=?FoDEQ*BsD#6#Q!(fqb`zp7`DOqx z`Brv54aQ>n$|B?oE(0|74k$)h$^5nNtwfNTLH$^cnnBF2<2zIP7U@^1n@dFM`gUK~ zz6EiG<$-Q>{lQeY`7u4-`7>27 zUoaCHl_J!lnbm2Bft1!bq1#(r4IvN7Dam)y_j;z6>ymRZl6-3XV>MzYfXFG!RQ)!6O=hv*+y zX0-|^fKRe*AmYRCm<|(X{9H^XR?ay71n}-cEt0#gMi>}ur60(Z^6Fp7d_3)dti5?1 ztNmlj{TQ_i8^at*Ato7yBIF>ue8GU5K`~qc`91J=W8ai) z`_qF&o^76o4=RYmo2{vK<)sE9k?k^`L~+T=bRO51;^c{`ne><~p5Dg1L!?nX-K2sW zJ}~}Oe*KL~GaDS(C3jMa{4|8}gYDgC;a0X6?CdTr2^e%-h}(BN6rZxv(=M;LRqKcRF% zhJ7si=z$Lmq6|B4vm)Ln?ZFOqo7bv{aw@gvDm|U=C%f(_YX;2afxyqec{OlmnK4jB z?ry~*&u5Fu_kod*dLe&TV|=6KU(d;-!@ci z<&23``i2@(q6tYvy)5-T;E49z`~<;(zsOUuJ5KSwLOKw@lyzrXlX43ykTDcF5K%e| zDg+C;@g>UhXm6s(eO~!NJ09`&ACzq(Dx{gk$82UX0rk>z&ZTdDK&1#e5RNB2US|M? z1M_`p^YM;gASkCy*qbTtzVpzL1Enb31Q-cRHfEgcA*8Qvn z89@qv#n`eP0YUhxd#!!HVoq6n{3f$svV=1cl5GPhS?>(vx^|^cQ-}Cl zDgn_u#0?ncDFb^U%G@D-=SQ7-hloxP;TF3-7}7l5Yf)8@A>7E+*>(qo%KclaZPzf6VQi=$UtsHiSoG^Q;FL+oAO`^q`EaqTg z_3^8vhQM3O(~vQMspvolfvEc)<0DJz+c;RiQqx=Jzx<6xp7N8a!Nv>o$CIPwBqm*B zKFqOu9+#hWGD;-oE*F&r~@%b?Inn=f^EbzyHrFC>= z8`*8-OQL*Vl-q2v$#6@yy&-tpp$-&wnF7Nt`LKg1dR34gpnUK2+FQJ#!B z{UPO*uSj5V^#U&x*g#I-@l>8fF3eBepZA;Qc!nn%jqfMQkHK-4lj4}|P3flOFQjoR zHBsqR0=Jet&4D+ZQ|w%aw)oqziIjvG&x~7XjRNnEVvgjg$!egr8eb^C0WJgK6<5mT z!UFv9rvILQAswpDgw5b|@X2kRnD>PSZwodg<+lU9H!^yAW;9G0MF9H~z!?oCqv>NX z|4{G|$ieG~DZ%Z>g3IG^IT&7zW`OE4I9%LDHiG6Tbo-IyPe~SmWva6GVWJK`sY&S* z=mXJkFpSWO2OGNyg>x~63N|JSMV%2~cedd{b6;pcjVFDZFmnj?bW>9^PaLMuw?@I9fddTq(ljdiQ6hVh^aWC?U+Z*ZawspFi|@MI{`pPV&ZvalLT z<=f4GcwC{$XDQ7+J)vAXatF|w;dm6>O+Lz%kg$HZKUcRXnjcgQVl)L5uVPKe)Sq!z zZwAUFr#|U-)Zy!K#8dHmoEx`9dqR`qUEqAG7k`qK|ND&ijgU(om6GZU(Tpz}t|L4e zod++;7Jt{YqYREb>L`*%)hA=dh{uNy2M!Dkq0g(a(CV3oUJdV`lVS%Sshf~0c-y?h z4Pr^MGU!Xrg=8;h1+EbY<>CJ+4mAXGr`sQ|bOQK#dmP4Q^*C4PufR7S_`=zwvtKgnfJ zc^rN!L+mQYpP~iS5sah6gHS$h%&$pOJfA|_YA|vlx(%%-PpJphs?P!_><_d|{RtIn z@;x>aKH7MU%FC_l7=}~PJ958n#oj=62+immwpKDO$;{1``ZRrCPH+{rHfIV7e2+H zg3iyvPF6@_61$y(=ApG;F-NxpqU%dmU8roF$zQ3vkp?G|u?s5knLAeb*KCW$pIFyRmlrG)1WgW2bPk%C9BtUs zAK`LhkGe|3$BP-vnr@;|ld#a8jHN3==VJ>Eov3xKkjlJZ%O0-VfF(3rTx`-w)sG8wtI8^nf2!&&r0^+;5{ifpIe@>!evfo%KVCFj-rn$F8f8xB09COrR zJjNOj%04wNcmj)WAA^qQ$VBOgH~qnEp=cHKP!3QRC(N3LFmtrc{Rn*=vtus#(G+KJ zPdpx?CkF7AKaTraV6?_Nm!JS5;XRW^j~|KG9nq)IEB95!UW^lc7*9Io+Z#f6Y(mxf z*904_ej6$ZbQNbzV_maQbTKmnjGpRe=rTcT9o1PQK^jc0%y5B}HlA@q&Zt;$dt$Hw z=skqY%3wAx8kQVp%RT^5x`9)5C6VnZqCE&&FV02_@-U6DtguoCQ0AI7yUY3*sxk1o ziW^W2dxRz5-lE)IOkb66!-XOKeE920goMJ&sh$}pO5VapQ8GRZ5JKT6fFRabDWmE_ zQrUby6aO|Ft{v*ls3t#b>>*m|!Vtm6<|V_D(^imhWC2H*4os&GsM8rT7S0ltyLk=7|`m=k*Fg4~0^WZ&qt6=`cR zKsz6lggw;#hgbtJ%HL!lcM^F0rqpAS=A{`N$=hgf!Z|8!g>$sJ9DsFsj2NCm|IG0E zN5UJ1n|i6GZvZT{Kv=K}(6PW81`ps97;pnWF*MkL)*KNt1ZYfta-ex^Y)S&IQ^H<|7p|sR%uCzBXK)P43e&vYYW8Uq6Kq~)EtdRHW+X4e zC;Fx`njR2gO5*{LNX(k^CY7tPO!+4X2`#6MNaFlq<8Q`^hvtzn%SQYo4!9=}knco) z(uQvJZyqmU*|T|G>P<#g5x(n`&ZmKw_g*Y`=TeVBPZBAb0HEDi396(P%QyGElIVJ? z@;IqDILRim*!ErnHBe8$hZQ!;G0Pw8&dYBjGZ0;VaYT7ho>hV&AC~#-w9;2R92hv1 z1@E3}DwxvU61a^mELW4y3{xBzACfEA96d=U4l4{(dZQ?!{kULwsbh3iaY06Y4@~j= z7*=4}>X7o>0%8qv)NL)>$c<1tA6)Zf;FTBdFgJzS(cz-}IU%H6gkzf6YhXujJKCfK z1sR3 z0Y4#ZDSZmjFhI(4i1bKZFaoKwdT5LW<3o%2cADR?$vp+Qml~8EiMdYM#$(Kl@x*QL zr;@=D9zj0 zUa1@c4(cK=zOgB0i=s1O|4g5-3rKU+ZKe5RRuW6A6nj$1&eOZ1N+?BcvbOww z1y)w+66!uHseUZ@nW#IC;XjORyFi(?Vkoa(Q6I*pk&J{(F0t08MpX&_i9RzH((tZ%@yA~JBu+#93a+5k++fy>1uKM4J*l5HDCz*AndJ8(=! z#DyhVPmdp!(dSdAZ7W3vQF6nL_X!JK_bL5Ye}W;AY;W+=(^E2-v6bd0>M!RtHWhR4P*|S~{l5AGok-B&