From 953f79d7b8cb932fe2171953ebd3b7b43f548935 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 8 Jul 2026 14:26:25 -0700
Subject: [PATCH 01/66] TDD: add tests for terra

---
 cmd/addref/terra_addref_acceptance_test.go    |   9 +
 docs/terra-anvil-drs-download-gap-adr.md      | 339 ++++++++++++++++++
 docs/terra-anvil-tdd-tests.md                 | 154 ++++++++
 .../config/terra_remote_acceptance_test.go    |  36 ++
 internal/lfs/terra_pointer_acceptance_test.go |  36 ++
 5 files changed, 574 insertions(+)
 create mode 100644 cmd/addref/terra_addref_acceptance_test.go
 create mode 100644 docs/terra-anvil-drs-download-gap-adr.md
 create mode 100644 docs/terra-anvil-tdd-tests.md
 create mode 100644 internal/config/terra_remote_acceptance_test.go
 create mode 100644 internal/lfs/terra_pointer_acceptance_test.go

diff --git a/cmd/addref/terra_addref_acceptance_test.go b/cmd/addref/terra_addref_acceptance_test.go
new file mode 100644
index 00000000..21c366f9
--- /dev/null
+++ b/cmd/addref/terra_addref_acceptance_test.go
@@ -0,0 +1,9 @@
+package addref
+
+import "testing"
+
+func TestAcceptanceAddRefExposesRemoteTypeForTerraReferences(t *testing.T) {
+	if Cmd.Flags().Lookup("remote-type") == nil {
+		t.Fatalf("expected add-ref to expose --remote-type so Terra DRS references can select a Terra resolver explicitly")
+	}
+}
diff --git a/docs/terra-anvil-drs-download-gap-adr.md b/docs/terra-anvil-drs-download-gap-adr.md
new file mode 100644
index 00000000..aacde75d
--- /dev/null
+++ b/docs/terra-anvil-drs-download-gap-adr.md
@@ -0,0 +1,339 @@
+# ADR 0004 / GitHub Issue: Support Terra/AnVIL DRS downloads in `git-drs`
+
+## Status
+
+Proposed
+
+## Issue type
+
+Architecture Decision Record / feature gap analysis
+
+## Download
+
+[Download this ADR as Markdown](./terra-anvil-drs-download-gap-adr.md)
+
+## Related documents
+
+- [Terra/AnVIL TDD acceptance tests](./terra-anvil-tdd-tests.md)
+
+## Summary
+
+`git-drs` already has most of the repository and hydration machinery needed for Terra/AnVIL, so the remaining work should be scoped as an incremental provider/identity extension rather than a wholesale redesign. The most direct path is to add a `terra` remote mode, wire Terra authentication and provider resolution at remote setup time, and then close the two compatibility gaps that are currently not well-defined for Terra references: SHA256-shaped local identity and direct DRS URL pointer identity. A manifest bootstrap workflow remains useful, but it can build on the same lower-level `add-ref`/resolver work instead of being treated as a separate large subsystem.
+
+## Background
+
+Gregor project users want a Git repository that stores project structure, manifests, analysis code, and `git-drs` pointer files while leaving controlled-access payload bytes on AnVIL. Users should be able to clone normal Git history, review which data objects are referenced, authenticate through AnVIL/Terra access controls, and hydrate only selected paths with commands such as:
+
+```bash
+git drs pull -I "data/cohort-a/**"
+```
+
+Terra/AnVIL DRS downloads typically start from stable DRS URIs and use Terra-compatible authentication and resolution tooling to obtain authorized access URLs. A repository bootstrap workflow also needs to query AnVIL DRS metadata and generate pointer files and manifests deterministically.
+
+## Current state
+
+`git-drs` already provides several useful building blocks:
+
+- Git-compatible pointer workflows.
+- `git drs track` for tracked data path patterns.
+- `git drs pull -I <pattern>` for selective hydration.
+- `git drs add-ref <drs_uri> <dst path>` as an initial single-object reference workflow.
+- Gen3/Syfon remote configuration.
+- Local metadata and cache plumbing for DRS-backed objects.
+
+However, these pieces do not yet compose into a complete Terra/AnVIL workflow.
+
+## Decision
+
+Add first-class Terra/AnVIL DRS support as an incremental extension of the existing remote and reference workflows. The primary decision is to introduce `git drs remote add terra ...` so authentication and provider behavior are known at remote configuration time. Once a pointer or reference is associated with a Terra remote, `git-drs` can use a Terra-aware resolver to translate the DRS URI into downloadable access URLs. The main unresolved design decision is how to represent DRS URL identity in pointer files while preserving the existing SHA256-oriented cache and compatibility assumptions.
+
+## Goals
+
+- Allow repositories to store stable Terra/AnVIL DRS references in Git without committing payload bytes.
+- Support selective hydration using existing include-filter semantics.
+- Support Terra/AnVIL authentication mechanisms such as Google Application Default Credentials or bearer tokens.
+- Resolve DRS URIs to authorized access URLs using GA4GH DRS and/or Terra/Martha-compatible resolution.
+- Generate deterministic pointer files from manifests or workspace table exports.
+- Preserve reviewability of data-reference changes in pull requests.
+- Report metadata conflicts, missing checksums, inaccessible DRS IDs, and path collisions clearly.
+
+## Non-goals
+
+- Bypass AnVIL authentication or authorization.
+- Mirror Gregor payload bytes into Git or unmanaged buckets.
+- Replace Terra workspace data management.
+- Edit AnVIL source metadata from a Git repository.
+- Require all Terra/AnVIL DRS records to have SHA256 checksums.
+
+## Team feedback incorporated
+
+This ADR is revised to reflect team feedback that Terra support should be smaller than a broad re-architecture. The preferred shape is:
+
+- add a `terra` remote mode and wire auth/provider behavior there;
+- extend `add-ref` or add a related reference command so callers can create Terra-backed DRS references explicitly;
+- resolve Terra references through a remote-aware DRS resolver;
+- focus design discussion on SHA256 compatibility and DRS URL pointer compatibility;
+- keep manifest/bootstrap support as a batch layer over the reference primitive.
+
+The ADR also captures an open pointer-format question raised in review: whether `git-drs` should recognize a `git-drs`-specific pointer file whose `oid` is a DRS URI rather than a Git LFS-style SHA256 value, for example:
+
+```text
+version https://calypr.github.io/spec/v1
+oid drs://cgc-ga4gh-api.sbgenomics.com/4c33ae65e4b08832ce3d94e9c
+size 11305017366
+```
+
+That pointer shape is attractive for reviewability and direct DRS compatibility, but it needs an explicit cache-key strategy because existing `git-drs` code relies on SHA256-shaped OIDs in several places.
+
+## Gap analysis
+
+### Gap 1: Missing Terra/AnVIL remote type
+
+Current remote configuration is centered on Gen3/Syfon remotes with an `organization/project` scope. Team feedback suggests that a `terra` remote mode is the cleanest and smallest enabling feature: auth, provider selection, and resolver behavior can all be wired when the remote is added.
+
+Example target CLI:
+
+```bash
+git drs remote add terra anvil \
+  --drs-endpoint https://drs.anvilproject.org \
+  --auth google-adc \
+  --mode read-only
+```
+
+### Gap 2: Terra references need a remote-aware `add-ref` path
+
+Similar reference-building behavior already exists in `add-url`, and `add-ref` already has the right conceptual role for existing DRS objects. The missing piece is a Terra-aware reference flow where the command knows which remote type owns the reference and can call the matching resolver.
+
+Possible target command shapes:
+
+```bash
+git drs add-ref --remote anvil drs://example/object data/object.cram
+git drs add-ref --remote-type terra drs://example/object data/object.cram
+```
+
+Required behavior:
+
+1. Resolve the DRS URI using the selected remote.
+2. Create a pointer and local metadata without downloading payload bytes.
+3. Preserve the DRS URI as canonical remote identity.
+4. Store or derive whatever SHA256-compatible local identity `git-drs` needs for cache compatibility.
+
+### Gap 3: DRS URI pointer compatibility is not well defined
+
+The existing design still has code paths where local pointer identity is treated as `oid sha256:<64hex>`. Terra/AnVIL can work with that constraint if the DRS URI is stored as first-class metadata and a deterministic SHA256-shaped local cache key is derived from it. However, review feedback also proposes a `git-drs`-specific pointer format where the pointer `oid` itself is a DRS URI.
+
+Option A: keep Git LFS-shaped pointers and store DRS URI in sidecar/local metadata.
+
+```text
+version https://git-lfs.github.com/spec/v1
+oid sha256:<derived-local-oid>
+size <size>
+```
+
+Option B: add a `git-drs` pointer spec that accepts DRS URI OIDs directly.
+
+```text
+version https://calypr.github.io/spec/v1
+oid drs://example/object
+size <size>
+```
+
+Option A is likely lower-risk because it preserves current SHA256 assumptions. Option B is more reviewable and direct, but requires parser, cache fanout, inventory, and hydration updates so DRS URI OIDs can be normalized into safe local cache keys.
+
+### Gap 4: SHA256 compatibility is still non-negotiable internally
+
+Review feedback notes that SHA256 compatibility remains non-negotiable in current `git-drs`. Terra/AnVIL records may still lack SHA256 checksums or provide different checksum types, so the design should preserve a SHA256-shaped local/cache identity even when that identity is derived from the DRS URI rather than from payload content.
+
+Required behavior:
+
+- DRS URI is required.
+- Size should be captured when available.
+- SHA256 should be captured when available.
+- Missing checksum should be reported as a warning or policy-controlled condition, not always a hard failure.
+
+### Gap 5: Missing Terra/Martha-compatible resolver
+
+Terra downloads often require a resolver layer that can turn a DRS URI into an authorized signed URL. `git-drs` needs a provider abstraction with Terra/AnVIL implementation.
+
+Suggested interface:
+
+```go
+type DRSResolver interface {
+    GetObject(ctx context.Context, drsURI string) (*DRSObject, error)
+    GetAccessURL(ctx context.Context, drsURI string, accessIDOrType string) (*AccessURL, error)
+}
+```
+
+Expected implementations:
+
+- `syfonResolver`
+- `gen3Resolver`
+- `ga4ghResolver`
+- `terraResolver`
+
+### Gap 6: Manifest bootstrap/import should be a batch wrapper over reference creation
+
+`git-drs` still needs a batch utility to initialize or refresh repositories from authoritative AnVIL data sources, but this should be implemented as a thin wrapper around the Terra-aware reference primitive rather than a separate resolver path.
+
+Target command shape:
+
+```bash
+git drs import-drs-manifest \
+  --remote anvil \
+  --input manifests/gregor-source.tsv \
+  --drs-uri-column drs_uri \
+  --path-column repo_path \
+  --output-manifest manifests/gregor-drs-manifest.tsv \
+  --data-root data
+```
+
+Required behavior:
+
+- Read TSV/CSV manifests or workspace table exports.
+- Resolve each DRS URI.
+- Validate metadata.
+- Write deterministic pointer files.
+- Write or update local `git-drs` metadata.
+- Write a deterministic output manifest.
+- Support dry-run mode.
+- Report additions, changes, deletions, collisions, inaccessible IDs, and metadata conflicts.
+
+### Gap 7: Missing steward/reviewer manifest output
+
+Bootstrap should create a stable, reviewable manifest recording at least:
+
+- repository path;
+- DRS URI;
+- DRS ID;
+- object name;
+- size;
+- checksum type and value when available;
+- access method types;
+- source workspace/table/row metadata when available;
+- metadata status.
+
+Run-specific details such as timestamps should either be omitted from the committed manifest or isolated in an optional report artifact to preserve idempotency.
+
+### Gap 8: Current scope model does not match Terra discovery
+
+Terra/AnVIL source metadata may come from workspace tables, Data Repository Service snapshots, manifests, or other project-specific exports. The canonical scope for hydration should be the DRS URI stored in metadata, not a Gen3-style `organization/project` plus bucket mapping.
+
+### Gap 9: Access method selection needs policy
+
+Terra/AnVIL DRS objects may expose multiple access methods. `git-drs` should support explicit and default access preferences.
+
+Example target flags:
+
+```bash
+git drs pull --access-method auto
+git drs pull --access-method https
+git drs pull --access-method gs
+```
+
+### Gap 10: Authentication UX is not Terra-native
+
+Terra users should be able to configure auth using expected local mechanisms.
+
+Target options:
+
+```bash
+--auth google-adc
+--auth gcloud
+--auth bearer-token
+```
+
+Error messages should distinguish missing credentials, expired credentials, 401 unauthorized, 403 forbidden, inaccessible controlled-access records, and expired signed URLs.
+
+### Gap 11: Need read-only remote mode
+
+Gregor/AnVIL repositories reference existing controlled-access data. They should not accidentally trigger payload upload or DRS registration.
+
+Target behavior:
+
+```bash
+git drs remote add terra anvil ... --mode read-only
+```
+
+In read-only mode:
+
+- `git drs pull` works.
+- manifest import/bootstrap works.
+- upload/register push behavior is disabled or fails with a clear message.
+
+### Gap 12: Missing Terra/AnVIL documentation
+
+Add documentation covering:
+
+- required credentials;
+- remote setup;
+- manifest input format;
+- bootstrap workflow;
+- refresh workflow;
+- selective hydration;
+- missing checksum policy;
+- controlled-access troubleshooting;
+- common 401/403 causes.
+
+## Proposed implementation plan
+
+### Phase 1: Terra remote and resolver
+
+- Add `git drs remote add terra ...`.
+- Wire Terra auth/provider configuration at remote setup time.
+- Add a Terra-aware resolver used by reference creation and hydration.
+- Add provider-specific diagnostics for authorization failures.
+
+### Phase 2: Reference creation and pointer identity
+
+- Extend `add-ref` or add a related command to create Terra-backed references.
+- Persist the DRS URI as canonical remote identity.
+- Preserve a SHA256-shaped internal/local cache identity, either from a real checksum or a deterministic DRS URI-derived key.
+- Decide whether to support direct `oid drs://...` `git-drs` pointer files in addition to Git LFS-shaped pointers.
+
+### Phase 3: Manifest bootstrap/import
+
+- Add `git drs import-drs-manifest` or equivalent as a batch wrapper over Terra-aware reference creation.
+- Generate pointer files without downloading payload bytes.
+- Generate deterministic output manifests.
+- Add dry-run, conflict reporting, and deletion policy options.
+
+### Phase 4: Documentation and acceptance tests
+
+- Add `docs/terra-anvil.md`.
+- Add unit tests for DRS-URI-derived local OIDs.
+- Add resolver tests for mocked GA4GH/Terra DRS responses.
+- Add integration-style tests for manifest import and selective hydration.
+
+## Acceptance criteria
+
+- A maintainer can configure a Terra/AnVIL read-only remote without Gen3/Syfon bucket mapping.
+- A bootstrap/import command can generate pointer files from a representative AnVIL manifest without downloading payload bytes.
+- Generated pointer metadata includes canonical DRS URIs.
+- Missing SHA256 checksums are handled according to documented policy.
+- Rerunning bootstrap with unchanged AnVIL metadata produces no Git diff.
+- `git drs pull -I <path-or-pattern>` hydrates selected Terra/AnVIL pointer files after authentication.
+- 401/403 and inaccessible DRS records produce actionable error messages.
+- Documentation explains credentials, bootstrap inputs, outputs, refresh workflow, and troubleshooting.
+
+## Open questions
+
+- Should the canonical command be `git drs remote add terra` or a generic `git drs remote add ga4gh` with Terra-specific auth/resolution options?
+- Which AnVIL/Terra endpoint should be treated as canonical for Gregor DRS discovery?
+- Should Martha/Terra resolution be implemented directly or invoked through Terra Notebook Utils behavior?
+- What should the default policy be for records that lack checksums?
+- Should deleted or withdrawn AnVIL records remove pointers automatically, create tombstones, or require explicit maintainer action?
+- Should bootstrap/import live in core `git-drs` or as a project-local Gregor script first?
+
+## Priority
+
+High for Terra/AnVIL adoption.
+
+## Labels
+
+- `adr`
+- `enhancement`
+- `terra`
+- `anvil`
+- `drs`
+- `bootstrap`
+- `controlled-access`
diff --git a/docs/terra-anvil-tdd-tests.md b/docs/terra-anvil-tdd-tests.md
new file mode 100644
index 00000000..40655e61
--- /dev/null
+++ b/docs/terra-anvil-tdd-tests.md
@@ -0,0 +1,154 @@
+# Terra/AnVIL TDD acceptance tests
+
+## Purpose
+
+This document explains the test-driven development approach for the Terra/AnVIL DRS work and how to run the tests that currently describe the desired behavior.
+
+The tests are intentionally written before the production implementation. They are expected to fail until `git-drs` supports:
+
+- a `terra` remote type;
+- Terra-aware DRS reference creation;
+- DRS URI-shaped `git-drs` pointer files;
+- deterministic SHA256-shaped local cache identity for DRS URI references.
+
+These tests turn the ADR acceptance criteria into executable checks so implementation can proceed incrementally.
+
+## Test files
+
+### `internal/config/terra_remote_acceptance_test.go`
+
+Covers the Terra remote configuration acceptance criterion.
+
+The test writes Git config entries equivalent to a future Terra remote:
+
+```ini
+[drs]
+  default-remote = anvil
+[drs "remote.anvil"]
+  type = terra
+  endpoint = https://drs.anvilproject.org
+  auth = google-adc
+  mode = read-only
+```
+
+Expected future behavior:
+
+- `LoadConfig` recognizes `type = terra`.
+- `Config.GetRemote("anvil")` returns a non-nil DRS remote.
+- The remote preserves the configured Terra DRS endpoint.
+
+Current behavior:
+
+- The test fails because config parsing only models existing Gen3/local remotes.
+
+### `cmd/addref/terra_addref_acceptance_test.go`
+
+Covers the remote-aware reference creation acceptance criterion.
+
+Expected future behavior:
+
+- `git drs add-ref` exposes a `--remote-type` flag or equivalent resolver-selection mechanism.
+- Terra DRS references can select Terra resolver behavior explicitly when creating pointer metadata.
+
+Current behavior:
+
+- The test fails because `add-ref` does not expose `--remote-type`.
+
+### `internal/lfs/terra_pointer_acceptance_test.go`
+
+Covers the DRS URI pointer compatibility and cache identity acceptance criteria.
+
+Expected future pointer behavior:
+
+```text
+version https://calypr.github.io/spec/v1
+oid drs://cgc-ga4gh-api.sbgenomics.com/4c33ae65e4b08832ce3d94e9c
+size 11305017366
+```
+
+Expected future cache behavior:
+
+- A DRS URI pointer can still be mapped to a deterministic SHA256-shaped local cache key.
+- The cache key may be derived from a normalized DRS URI rather than from payload content.
+- Existing cache fanout assumptions can remain SHA256-shaped even when the pointer `oid` is a DRS URI.
+
+Current behavior:
+
+- The pointer parser rejects non-`sha256` OID types.
+- `ObjectPath` rejects raw DRS URIs because it currently requires a 64-character SHA256 hex string.
+
+## How to run the focused tests
+
+From the repository root, run:
+
+```bash
+go test -timeout 30s ./internal/lfs ./internal/config ./cmd/addref
+```
+
+These tests are currently expected to fail. A failure is useful because it confirms the tests are exercising missing Terra/AnVIL behavior rather than silently passing against existing Gen3/Syfon-only behavior.
+
+## Expected current output shape
+
+The exact timing may differ, but the failures should include messages like:
+
+```text
+--- FAIL: TestAcceptanceTerraDRSURIoidPointerIsRecognized
+    terra_pointer_acceptance_test.go: expected git-drs DRS URI pointer to be recognized
+
+--- FAIL: TestAcceptanceTerraDRSURIoidPointerHasDeterministicSHA256CacheKey
+    terra_pointer_acceptance_test.go: expected DRS URI to be normalized to a sha256-shaped cache key path
+
+--- FAIL: TestAcceptanceLoadTerraRemoteConfig
+    terra_remote_acceptance_test.go: expected terra remote to load as a DRS remote
+
+--- FAIL: TestAcceptanceAddRefExposesRemoteTypeForTerraReferences
+    terra_addref_acceptance_test.go: expected add-ref to expose --remote-type
+```
+
+## How to run individual test groups
+
+### Pointer and cache identity tests
+
+```bash
+go test -timeout 30s ./internal/lfs -run 'TestAcceptanceTerraDRSURIoidPointer'
+```
+
+Use this while implementing pointer parsing, DRS URI normalization, and cache-key derivation.
+
+### Terra remote config test
+
+```bash
+go test -timeout 30s ./internal/config -run TestAcceptanceLoadTerraRemoteConfig
+```
+
+Use this while adding config structs, parsing, and persistence for `type = terra` remotes.
+
+### Terra-aware `add-ref` test
+
+```bash
+go test -timeout 30s ./cmd/addref -run TestAcceptanceAddRefExposesRemoteTypeForTerraReferences
+```
+
+Use this while adding CLI surface for remote-aware Terra reference creation.
+
+## Recommended implementation order
+
+1. Add a Terra remote model to config parsing and persistence.
+2. Add a Terra-aware resolver abstraction that can resolve DRS URIs through the configured remote.
+3. Extend `add-ref` so it can create references using a selected remote or remote type.
+4. Decide the pointer-format strategy:
+   - keep Git LFS-shaped `oid sha256:<derived-local-oid>` pointers with DRS URI in metadata; or
+   - support `version https://calypr.github.io/spec/v1` with `oid drs://...` directly.
+5. Add deterministic DRS URI to SHA256-shaped cache-key derivation.
+6. Add manifest bootstrap/import as a batch wrapper over the reference creation primitive.
+
+## When the tests should pass
+
+The focused tests should pass when `git-drs` can:
+
+- load a read-only Terra remote from Git config;
+- expose a Terra resolver selection path for `add-ref`;
+- parse DRS URI-shaped `git-drs` pointer files;
+- map DRS URI identities to deterministic SHA256-shaped cache paths.
+
+At that point, the failing TDD tests should be treated as regression tests for the first Terra/AnVIL support increment.
diff --git a/internal/config/terra_remote_acceptance_test.go b/internal/config/terra_remote_acceptance_test.go
new file mode 100644
index 00000000..79b7d410
--- /dev/null
+++ b/internal/config/terra_remote_acceptance_test.go
@@ -0,0 +1,36 @@
+package config
+
+import (
+	"os/exec"
+	"testing"
+)
+
+func TestAcceptanceLoadTerraRemoteConfig(t *testing.T) {
+	repo := setupTestRepo(t)
+	runGitConfig := func(args ...string) {
+		t.Helper()
+		cmd := exec.Command("git", append([]string{"config"}, args...)...)
+		cmd.Dir = repo
+		if out, err := cmd.CombinedOutput(); err != nil {
+			t.Fatalf("git config %v failed: %v: %s", args, err, string(out))
+		}
+	}
+
+	runGitConfig("drs.default-remote", "anvil")
+	runGitConfig("drs.remote.anvil.type", "terra")
+	runGitConfig("drs.remote.anvil.endpoint", "https://drs.anvilproject.org")
+	runGitConfig("drs.remote.anvil.auth", "google-adc")
+	runGitConfig("drs.remote.anvil.mode", "read-only")
+
+	cfg, err := LoadConfig()
+	if err != nil {
+		t.Fatalf("LoadConfig error: %v", err)
+	}
+	remote := cfg.GetRemote(Remote("anvil"))
+	if remote == nil {
+		t.Fatalf("expected terra remote to load as a DRS remote")
+	}
+	if got := remote.GetEndpoint(); got != "https://drs.anvilproject.org" {
+		t.Fatalf("unexpected terra endpoint: %q", got)
+	}
+}
diff --git a/internal/lfs/terra_pointer_acceptance_test.go b/internal/lfs/terra_pointer_acceptance_test.go
new file mode 100644
index 00000000..7112c866
--- /dev/null
+++ b/internal/lfs/terra_pointer_acceptance_test.go
@@ -0,0 +1,36 @@
+package lfs
+
+import "testing"
+
+func TestAcceptanceTerraDRSURIoidPointerIsRecognized(t *testing.T) {
+	const pointer = `version https://calypr.github.io/spec/v1
+oid drs://cgc-ga4gh-api.sbgenomics.com/4c33ae65e4b08832ce3d94e9c
+size 11305017366
+`
+
+	info, ok := parseLFSPointer(pointer)
+	if !ok {
+		t.Fatalf("expected git-drs DRS URI pointer to be recognized")
+	}
+	if info.Version != "https://calypr.github.io/spec/v1" {
+		t.Fatalf("unexpected pointer version: %q", info.Version)
+	}
+	if info.OidType != "drs" || info.Oid != "//cgc-ga4gh-api.sbgenomics.com/4c33ae65e4b08832ce3d94e9c" {
+		t.Fatalf("expected DRS URI oid to be preserved, got type=%q oid=%q", info.OidType, info.Oid)
+	}
+	if info.Size != 11305017366 {
+		t.Fatalf("unexpected pointer size: %d", info.Size)
+	}
+}
+
+func TestAcceptanceTerraDRSURIoidPointerHasDeterministicSHA256CacheKey(t *testing.T) {
+	const drsURI = "drs://cgc-ga4gh-api.sbgenomics.com/4c33ae65e4b08832ce3d94e9c"
+
+	cacheKeyPath, err := ObjectPath(".git/drs/objects", drsURI)
+	if err != nil {
+		t.Fatalf("expected DRS URI to be normalized to a sha256-shaped cache key path: %v", err)
+	}
+	if cacheKeyPath == "" {
+		t.Fatalf("expected non-empty cache path for DRS URI")
+	}
+}

From c4580fcfe1a3b1baf190a7bc9f814c3ebc341863 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 8 Jul 2026 14:53:01 -0700
Subject: [PATCH 02/66] Support DRS URI pointers in LFS cache paths

---
 internal/lfs/inventory.go        | 19 +++++++++----
 internal/lfs/object_path.go      | 49 +++++++++++++++++++++++++++++---
 internal/lfs/object_path_test.go | 14 +++++++++
 3 files changed, 73 insertions(+), 9 deletions(-)

diff --git a/internal/lfs/inventory.go b/internal/lfs/inventory.go
index 259b0f29..bf136913 100644
--- a/internal/lfs/inventory.go
+++ b/internal/lfs/inventory.go
@@ -10,7 +10,6 @@ import (
 	"os"
 	"os/exec"
 	"path/filepath"
-	"regexp"
 	"strconv"
 	"strings"
 
@@ -433,7 +432,7 @@ func readIndexPointerInfo(ctx context.Context, repoDir, path string) (LfsFileInf
 }
 
 func grepPointerPaths(ctx context.Context, repoDir, ref string) ([]string, error) {
-	cmd := exec.CommandContext(ctx, "git", "grep", "-z", "-l", "https://git-lfs.github.com/spec/v1", ref, "--")
+	cmd := exec.CommandContext(ctx, "git", "grep", "-z", "-l", "-e", "https://git-lfs.github.com/spec/v1", "-e", "https://calypr.github.io/spec/v1", ref, "--")
 	cmd.Dir = repoDir
 	var stdout, stderr bytes.Buffer
 	cmd.Stdout = &stdout
@@ -493,8 +492,6 @@ type lfsPointer struct {
 
 func parseLFSPointer(content string) (lfsPointer, bool) {
 	var p lfsPointer
-	sha256Re := regexp.MustCompile(`(?i)^[a-f0-9]{64}$`)
-
 	for _, line := range strings.Split(strings.ReplaceAll(content, "\r\n", "\n"), "\n") {
 		line = strings.TrimSpace(line)
 		if line == "" {
@@ -527,7 +524,19 @@ func parseLFSPointer(content string) (lfsPointer, bool) {
 	if p.Version == "" || p.OidType == "" || p.Oid == "" {
 		return lfsPointer{}, false
 	}
-	if p.OidType != "sha256" || !sha256Re.MatchString(p.Oid) {
+	switch strings.ToLower(p.OidType) {
+	case "sha256":
+		p.OidType = "sha256"
+		if !sha256OIDRe.MatchString(p.Oid) {
+			return lfsPointer{}, false
+		}
+		p.Oid = strings.ToLower(p.Oid)
+	case "drs":
+		p.OidType = "drs"
+		if p.Version != "https://calypr.github.io/spec/v1" || !strings.HasPrefix(p.Oid, "//") {
+			return lfsPointer{}, false
+		}
+	default:
 		return lfsPointer{}, false
 	}
 
diff --git a/internal/lfs/object_path.go b/internal/lfs/object_path.go
index 7085cbef..1f25ac05 100644
--- a/internal/lfs/object_path.go
+++ b/internal/lfs/object_path.go
@@ -1,17 +1,58 @@
 package lfs
 
 import (
+	"crypto/sha256"
+	"encoding/hex"
 	"fmt"
 	"path/filepath"
+	"regexp"
 	"strings"
 )
 
-// ObjectPath returns the Git LFS fanout path for a sha256 object ID.
+var sha256OIDRe = regexp.MustCompile(`(?i)^[a-f0-9]{64}$`)
+
+// ObjectPath returns the Git LFS fanout path for an object ID.
+//
+// The cache layout remains SHA256-shaped for compatibility with existing LFS
+// object storage. Git LFS pointers pass their sha256 object IDs through
+// unchanged, while git-drs DRS URI pointers are assigned a deterministic local
+// cache key derived from the normalized DRS URI.
 func ObjectPath(basePath string, oid string) (string, error) {
+	cacheKey, err := cacheKeyForOID(oid)
+	if err != nil {
+		return "", err
+	}
+
+	return filepath.Join(basePath, cacheKey[:2], cacheKey[2:4], cacheKey), nil
+}
+
+func cacheKeyForOID(oid string) (string, error) {
+	oid = strings.TrimSpace(oid)
 	oid = strings.TrimPrefix(oid, "sha256:")
-	if len(oid) != 64 {
-		return "", fmt.Errorf("error: %s is not a valid sha256 hash", oid)
+	if sha256OIDRe.MatchString(oid) {
+		return strings.ToLower(oid), nil
+	}
+
+	if isDRSURI(oid) {
+		sum := sha256.Sum256([]byte(normalizeDRSURI(oid)))
+		return hex.EncodeToString(sum[:]), nil
 	}
 
-	return filepath.Join(basePath, oid[:2], oid[2:4], oid), nil
+	return "", fmt.Errorf("error: %s is not a valid sha256 hash or DRS URI", oid)
+}
+
+func isDRSURI(uri string) bool {
+	uri = strings.TrimSpace(uri)
+	return strings.HasPrefix(strings.ToLower(uri), "drs://") || strings.HasPrefix(uri, "//")
+}
+
+func normalizeDRSURI(uri string) string {
+	uri = strings.TrimSpace(uri)
+	if strings.HasPrefix(uri, "//") {
+		return "drs:" + uri
+	}
+	if len(uri) >= len("drs://") && strings.EqualFold(uri[:len("drs://")], "drs://") {
+		return "drs://" + uri[len("drs://"):]
+	}
+	return uri
 }
diff --git a/internal/lfs/object_path_test.go b/internal/lfs/object_path_test.go
index 4c918172..e0ab6473 100644
--- a/internal/lfs/object_path_test.go
+++ b/internal/lfs/object_path_test.go
@@ -8,3 +8,17 @@ func TestObjectPathRejectsInvalidOID(t *testing.T) {
 		t.Fatalf("expected validation error, got %s", path)
 	}
 }
+
+func TestObjectPathAcceptsDRSPointerOIDValue(t *testing.T) {
+	fullURIPath, err := ObjectPath(".git/drs/objects", "drs://cgc-ga4gh-api.sbgenomics.com/4c33ae65e4b08832ce3d94e9c")
+	if err != nil {
+		t.Fatalf("expected DRS URI object path: %v", err)
+	}
+	pointerOIDPath, err := ObjectPath(".git/drs/objects", "//cgc-ga4gh-api.sbgenomics.com/4c33ae65e4b08832ce3d94e9c")
+	if err != nil {
+		t.Fatalf("expected DRS pointer oid object path: %v", err)
+	}
+	if pointerOIDPath != fullURIPath {
+		t.Fatalf("expected DRS pointer oid and full URI to produce same path, got %q and %q", pointerOIDPath, fullURIPath)
+	}
+}

From ba1a2ea24257c30d12830703b384374e7a1b7544 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 8 Jul 2026 15:01:58 -0700
Subject: [PATCH 03/66] Adds Terra remote model, type

---
 cmd/addref/add-ref.go     |  2 ++
 internal/config/config.go | 22 +++++++++++++++++++++-
 internal/config/remote.go | 13 +++++++++++++
 3 files changed, 36 insertions(+), 1 deletion(-)

diff --git a/cmd/addref/add-ref.go b/cmd/addref/add-ref.go
index 84f3b7f0..614f8e37 100644
--- a/cmd/addref/add-ref.go
+++ b/cmd/addref/add-ref.go
@@ -14,6 +14,7 @@ import (
 )
 
 var remote string
+var remoteType string
 var Cmd = &cobra.Command{
 	Use:   "add-ref <drs_uri> <dst path>",
 	Short: "Add a reference to an existing DRS object via URI",
@@ -61,4 +62,5 @@ var Cmd = &cobra.Command{
 
 func init() {
 	Cmd.Flags().StringVarP(&remote, "remote", "r", "", "target remote DRS server (default: default_remote)")
+	Cmd.Flags().StringVar(&remoteType, "remote-type", "", "resolver remote type for DRS references (for example: terra)")
 }
diff --git a/internal/config/config.go b/internal/config/config.go
index 6006626e..7c9dfe22 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -20,6 +20,7 @@ const (
 
 	Gen3ServerType  RemoteType = "gen3"
 	LocalServerType RemoteType = "local"
+	TerraServerType RemoteType = "terra"
 
 	configSection          = "drs"
 	remoteSubsectionPrefix = "remote."
@@ -42,6 +43,8 @@ func (c Config) GetRemote(remote Remote) DRSRemote {
 		return x.Gen3
 	} else if x.Local != nil {
 		return x.Local
+	} else if x.Terra != nil {
+		return x.Terra
 	}
 	return nil
 }
@@ -130,6 +133,15 @@ func UpdateRemote(name Remote, remote RemoteSelect) (*Config, error) {
 		if remote.Gen3.StoragePrefix != "" {
 			remoteSubsection.SetOption("storage_prefix", remote.Gen3.StoragePrefix)
 		}
+	} else if remote.Terra != nil {
+		remoteSubsection.SetOption("type", "terra")
+		remoteSubsection.SetOption("endpoint", remote.Terra.Endpoint)
+		if remote.Terra.Auth != "" {
+			remoteSubsection.SetOption("auth", remote.Terra.Auth)
+		}
+		if remote.Terra.Mode != "" {
+			remoteSubsection.SetOption("mode", remote.Terra.Mode)
+		}
 	} else if remote.Local != nil {
 		remoteSubsection.SetOption("type", "local")
 		remoteSubsection.SetOption("endpoint", remote.Local.BaseURL)
@@ -162,7 +174,7 @@ func UpdateRemote(name Remote, remote RemoteSelect) (*Config, error) {
 	return LoadConfig()
 }
 
-func parseAndAddRemote(cfg *Config, subsectionName string, remoteType string, endpoint string, project string, bucket string, organization string, storagePrefix string) {
+func parseAndAddRemote(cfg *Config, subsectionName string, remoteType string, endpoint string, project string, bucket string, organization string, storagePrefix string, auth string, mode string) {
 	if !strings.HasPrefix(subsectionName, remoteSubsectionPrefix) {
 		return
 	}
@@ -178,6 +190,12 @@ func parseAndAddRemote(cfg *Config, subsectionName string, remoteType string, en
 			Organization:  organization,
 			StoragePrefix: storagePrefix,
 		}
+	} else if remoteType == "terra" {
+		rs.Terra = &TerraRemote{
+			Endpoint: endpoint,
+			Auth:     auth,
+			Mode:     mode,
+		}
 	} else if remoteType == "local" {
 		rs.Local = &LocalRemote{
 			BaseURL:       endpoint,
@@ -232,6 +250,8 @@ func LoadConfig() (*Config, error) {
 				subsection.Option("bucket"),
 				subsection.Option("organization"),
 				subsection.Option("storage_prefix"),
+				subsection.Option("auth"),
+				subsection.Option("mode"),
 			)
 		}
 	}
diff --git a/internal/config/remote.go b/internal/config/remote.go
index f08ae114..000e8bf9 100644
--- a/internal/config/remote.go
+++ b/internal/config/remote.go
@@ -11,6 +11,7 @@ type DRSRemote interface {
 type RemoteSelect struct {
 	Gen3  *Gen3Remote
 	Local *LocalRemote
+	Terra *TerraRemote
 }
 
 type Gen3Remote struct {
@@ -27,6 +28,18 @@ func (s Gen3Remote) GetEndpoint() string      { return s.Endpoint }
 func (s Gen3Remote) GetBucketName() string    { return s.Bucket }
 func (s Gen3Remote) GetStoragePrefix() string { return s.StoragePrefix }
 
+type TerraRemote struct {
+	Endpoint string `yaml:"endpoint"`
+	Auth     string `yaml:"auth"`
+	Mode     string `yaml:"mode"`
+}
+
+func (t TerraRemote) GetProjectId() string     { return "" }
+func (t TerraRemote) GetOrganization() string  { return "" }
+func (t TerraRemote) GetEndpoint() string      { return t.Endpoint }
+func (t TerraRemote) GetBucketName() string    { return "" }
+func (t TerraRemote) GetStoragePrefix() string { return "" }
+
 type LocalRemote struct {
 	BaseURL       string
 	ProjectID     string

From f4ce335534d01ffc32e252f2a91d5816411c6cdf Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 8 Jul 2026 16:25:21 -0700
Subject: [PATCH 04/66] Updated git drs ping for Terra

---
 cmd/ping/main.go                       | 56 +++++++++++++++++++++--
 cmd/ping/main_test.go                  | 62 ++++++++++++++++++++++++++
 docs/terra-anvil-tdd-tests.md          | 54 +++++++++++++++++++---
 internal/remoteruntime/runtime.go      | 24 ++++++++++
 internal/remoteruntime/runtime_test.go | 29 ++++++++++++
 internal/testutils/config.go           |  9 ++++
 6 files changed, 226 insertions(+), 8 deletions(-)

diff --git a/cmd/ping/main.go b/cmd/ping/main.go
index 3069018a..62a3cb9d 100644
--- a/cmd/ping/main.go
+++ b/cmd/ping/main.go
@@ -4,6 +4,8 @@ import (
 	"context"
 	"fmt"
 	"log/slog"
+	"net/http"
+	"net/url"
 	"strings"
 
 	"github.com/calypr/git-drs/internal/config"
@@ -28,6 +30,9 @@ type statusInfo struct {
 }
 
 var pingHealth = func(ctx context.Context, gc *remoteruntime.GitContext) error {
+	if gc != nil && gc.RemoteType == config.TerraServerType {
+		return pingTerraServiceInfo(ctx, gc.Endpoint)
+	}
 	return gc.Client.Health().Ping(ctx)
 }
 
@@ -127,6 +132,8 @@ func resolveStatus(args []string, logger *slog.Logger) (statusInfo, *remoterunti
 		status.RemoteType = string(config.Gen3ServerType)
 	case *config.LocalRemote:
 		status.RemoteType = string(config.LocalServerType)
+	case *config.TerraRemote:
+		status.RemoteType = string(config.TerraServerType)
 	default:
 		status.RemoteType = "unknown"
 	}
@@ -171,11 +178,10 @@ func blankIfEmpty(v string) string {
 }
 
 func checkScopeAccess(ctx context.Context, gc *remoteruntime.GitContext) (scopeAccessInfo, error) {
-	if gc == nil || gc.Client == nil {
+	info := scopeAccessInfo{}
+	if gc == nil {
 		return scopeAccessInfo{}, fmt.Errorf("DRS client unavailable")
 	}
-
-	info := scopeAccessInfo{}
 	organization := strings.TrimSpace(gc.Organization)
 	project := strings.TrimSpace(gc.ProjectId)
 	bucket := strings.TrimSpace(gc.BucketName)
@@ -183,6 +189,9 @@ func checkScopeAccess(ctx context.Context, gc *remoteruntime.GitContext) (scopeA
 	if organization == "" && project == "" && bucket == "" {
 		return info, nil
 	}
+	if gc.Client == nil {
+		return scopeAccessInfo{}, fmt.Errorf("DRS client unavailable")
+	}
 	info.Checked = true
 
 	if organization != "" && project != "" {
@@ -211,6 +220,47 @@ func checkScopeAccess(ctx context.Context, gc *remoteruntime.GitContext) (scopeA
 	return info, nil
 }
 
+func pingTerraServiceInfo(ctx context.Context, endpoint string) error {
+	if ctx == nil {
+		ctx = context.Background()
+	}
+	serviceInfoURL, err := terraServiceInfoURL(endpoint)
+	if err != nil {
+		return err
+	}
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, serviceInfoURL, nil)
+	if err != nil {
+		return err
+	}
+	resp, err := http.DefaultClient.Do(req)
+	if err != nil {
+		return err
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode < http.StatusOK || resp.StatusCode >= http.StatusMultipleChoices {
+		return fmt.Errorf("terra DRS service-info returned %s", resp.Status)
+	}
+	return nil
+}
+
+func terraServiceInfoURL(endpoint string) (string, error) {
+	endpoint = strings.TrimSpace(endpoint)
+	if endpoint == "" {
+		return "", fmt.Errorf("terra endpoint is empty")
+	}
+	parsed, err := url.Parse(endpoint)
+	if err != nil {
+		return "", err
+	}
+	if parsed.Scheme == "" || parsed.Host == "" {
+		return "", fmt.Errorf("terra endpoint must be an absolute URL: %q", endpoint)
+	}
+	parsed.Path = strings.TrimRight(parsed.Path, "/") + "/ga4gh/drs/v1/service-info"
+	parsed.RawQuery = ""
+	parsed.Fragment = ""
+	return parsed.String(), nil
+}
+
 func visibleBucketForScope(ctx context.Context, gc *remoteruntime.GitContext, organization, project string) (string, error) {
 	payload, err := gc.Client.Buckets().List(ctx)
 	if err != nil {
diff --git a/cmd/ping/main_test.go b/cmd/ping/main_test.go
index eb1c8141..81e290e4 100644
--- a/cmd/ping/main_test.go
+++ b/cmd/ping/main_test.go
@@ -5,6 +5,8 @@ import (
 	"context"
 	"errors"
 	"io"
+	"net/http"
+	"net/http/httptest"
 	"os"
 	"strings"
 	"testing"
@@ -28,6 +30,66 @@ func TestPingCmdArgs(t *testing.T) {
 	}
 }
 
+func TestAcceptancePingTerraDRSServer(t *testing.T) {
+	var serviceInfoRequests int
+	terraDRS := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.URL.Path != "/ga4gh/drs/v1/service-info" {
+			t.Fatalf("expected Terra DRS service-info ping, got %s %s", r.Method, r.URL.Path)
+		}
+		serviceInfoRequests++
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = w.Write([]byte(`{"id":"terra-drs","name":"Terra DRS","type":{"group":"org.ga4gh","artifact":"drs","version":"1.0.0"}}`))
+	}))
+	t.Cleanup(terraDRS.Close)
+
+	tmpDir := testutils.SetupTestGitRepo(t)
+	testutils.CreateTestConfig(t, tmpDir, &config.Config{
+		DefaultRemote: config.Remote("anvil"),
+		Remotes: map[config.Remote]config.RemoteSelect{
+			config.Remote("anvil"): {
+				Terra: &config.TerraRemote{
+					Endpoint: terraDRS.URL,
+					Auth:     "google-adc",
+					Mode:     "read-only",
+				},
+			},
+		},
+	})
+
+	oldStdout := os.Stdout
+	r, w, err := os.Pipe()
+	if err != nil {
+		t.Fatalf("pipe: %v", err)
+	}
+	os.Stdout = w
+	t.Cleanup(func() { os.Stdout = oldStdout })
+
+	runErr := Cmd.RunE(Cmd, []string{"anvil"})
+	_ = w.Close()
+	if runErr != nil {
+		t.Fatalf("Cmd.RunE returned error: %v", runErr)
+	}
+
+	var buf bytes.Buffer
+	if _, err := io.Copy(&buf, r); err != nil {
+		t.Fatalf("read stdout: %v", err)
+	}
+	got := buf.String()
+	for _, want := range []string{
+		"remote: anvil (default)",
+		"type: terra",
+		"endpoint: " + terraDRS.URL,
+		"health: ok",
+	} {
+		if !strings.Contains(got, want) {
+			t.Fatalf("expected output to contain %q, got %q", want, got)
+		}
+	}
+	if serviceInfoRequests != 1 {
+		t.Fatalf("expected exactly one Terra DRS service-info ping, got %d", serviceInfoRequests)
+	}
+}
+
 func TestResolveStatusLocalRemote(t *testing.T) {
 	tmpDir := testutils.SetupTestGitRepo(t)
 	testutils.CreateTestConfig(t, tmpDir, &config.Config{
diff --git a/docs/terra-anvil-tdd-tests.md b/docs/terra-anvil-tdd-tests.md
index 40655e61..899832d1 100644
--- a/docs/terra-anvil-tdd-tests.md
+++ b/docs/terra-anvil-tdd-tests.md
@@ -54,6 +54,38 @@ Current behavior:
 
 - The test fails because `add-ref` does not expose `--remote-type`.
 
+### `cmd/ping/main_test.go`
+
+Covers the Terra remote connectivity acceptance criterion for `git drs ping`.
+
+The acceptance test configures a future Terra remote named `anvil` and uses an
+`httptest` server to stand in for the Terra/AnVIL DRS endpoint:
+
+```ini
+[drs]
+  default-remote = anvil
+[drs "remote.anvil"]
+  type = terra
+  endpoint = http://127.0.0.1:<test-port>
+  auth = google-adc
+  mode = read-only
+```
+
+Expected future behavior:
+
+- `git drs ping anvil` recognizes the configured `terra` remote.
+- The command prints Terra remote status, including `type: terra` and the
+  configured endpoint.
+- The command pings the Terra/AnVIL DRS service-info route at
+  `/ga4gh/drs/v1/service-info`.
+- A successful service-info response is reported as `health: ok`.
+
+Current behavior:
+
+- The test passes once runtime construction recognizes Terra remotes and
+  `git drs ping` checks the configured DRS service-info endpoint.
+- This test should remain a regression test for Terra/AnVIL ping connectivity.
+
 ### `internal/lfs/terra_pointer_acceptance_test.go`
 
 Covers the DRS URI pointer compatibility and cache identity acceptance criteria.
@@ -82,7 +114,7 @@ Current behavior:
 From the repository root, run:
 
 ```bash
-go test -timeout 30s ./internal/lfs ./internal/config ./cmd/addref
+go test -timeout 30s ./internal/lfs ./internal/config ./cmd/addref ./cmd/ping
 ```
 
 These tests are currently expected to fail. A failure is useful because it confirms the tests are exercising missing Terra/AnVIL behavior rather than silently passing against existing Gen3/Syfon-only behavior.
@@ -103,6 +135,7 @@ The exact timing may differ, but the failures should include messages like:
 
 --- FAIL: TestAcceptanceAddRefExposesRemoteTypeForTerraReferences
     terra_addref_acceptance_test.go: expected add-ref to expose --remote-type
+
 ```
 
 ## How to run individual test groups
@@ -131,22 +164,33 @@ go test -timeout 30s ./cmd/addref -run TestAcceptanceAddRefExposesRemoteTypeForT
 
 Use this while adding CLI surface for remote-aware Terra reference creation.
 
+### Terra-aware `ping` test
+
+```bash
+go test -timeout 30s ./cmd/ping -run TestAcceptancePingTerraDRSServer
+```
+
+Use this while wiring Terra remotes into runtime construction and adding the
+Terra/AnVIL DRS service-info health probe used by `git drs ping`.
+
 ## Recommended implementation order
 
 1. Add a Terra remote model to config parsing and persistence.
 2. Add a Terra-aware resolver abstraction that can resolve DRS URIs through the configured remote.
-3. Extend `add-ref` so it can create references using a selected remote or remote type.
-4. Decide the pointer-format strategy:
+3. Add a Terra-aware ping path that checks the configured DRS service-info endpoint.
+4. Extend `add-ref` so it can create references using a selected remote or remote type.
+5. Decide the pointer-format strategy:
    - keep Git LFS-shaped `oid sha256:<derived-local-oid>` pointers with DRS URI in metadata; or
    - support `version https://calypr.github.io/spec/v1` with `oid drs://...` directly.
-5. Add deterministic DRS URI to SHA256-shaped cache-key derivation.
-6. Add manifest bootstrap/import as a batch wrapper over the reference creation primitive.
+6. Add deterministic DRS URI to SHA256-shaped cache-key derivation.
+7. Add manifest bootstrap/import as a batch wrapper over the reference creation primitive.
 
 ## When the tests should pass
 
 The focused tests should pass when `git-drs` can:
 
 - load a read-only Terra remote from Git config;
+- ping the configured Terra/AnVIL DRS service-info endpoint;
 - expose a Terra resolver selection path for `add-ref`;
 - parse DRS URI-shaped `git-drs` pointer files;
 - map DRS URI identities to deterministic SHA256-shaped cache paths.
diff --git a/internal/remoteruntime/runtime.go b/internal/remoteruntime/runtime.go
index 39410cdc..009fbda2 100644
--- a/internal/remoteruntime/runtime.go
+++ b/internal/remoteruntime/runtime.go
@@ -20,6 +20,8 @@ const credentialHelpSuffix = "Refresh credentials with `git drs remote add gen3
 
 type GitContext struct {
 	Client             *syclient.Client
+	RemoteType         config.RemoteType
+	Endpoint           string
 	Organization       string
 	ProjectId          string
 	BucketName         string
@@ -47,9 +49,27 @@ func New(cfg *config.Config, remote config.Remote, logger *slog.Logger) (*GitCon
 		}
 		return gen3Client(string(remote), *x.Gen3, logger)
 	}
+	if x.Terra != nil {
+		return terraClient(*x.Terra, logger)
+	}
 	return nil, fmt.Errorf("no valid remote configuration found for current remote: %s", remote)
 }
 
+func terraClient(remote config.TerraRemote, logger *slog.Logger) (*GitContext, error) {
+	if strings.TrimSpace(remote.Endpoint) == "" {
+		return nil, fmt.Errorf("no terra endpoint specified")
+	}
+	if _, err := url.Parse(remote.Endpoint); err != nil {
+		return nil, err
+	}
+	return &GitContext{
+		RemoteType: config.TerraServerType,
+		Endpoint:   remote.Endpoint,
+		Logger:     logger,
+		Credential: &syconf.Credential{APIEndpoint: remote.Endpoint},
+	}, nil
+}
+
 func gen3Client(remoteName string, remote config.Gen3Remote, logger *slog.Logger) (*GitContext, error) {
 	manager := calyprconf.NewConfigure(logger)
 	cred, err := manager.Load(remoteName)
@@ -106,6 +126,8 @@ func localClient(remoteName string, remote config.LocalRemote, logger *slog.Logg
 
 	return &GitContext{
 		Client:        client,
+		RemoteType:    config.LocalServerType,
+		Endpoint:      remote.BaseURL,
 		Organization:  remote.GetOrganization(),
 		ProjectId:     projectID,
 		BucketName:    bucketName,
@@ -150,6 +172,8 @@ func newGitContext(profileConfig syconf.Credential, remote config.Gen3Remote, lo
 
 	return &GitContext{
 		Client:             client,
+		RemoteType:         config.Gen3ServerType,
+		Endpoint:           profileConfig.APIEndpoint,
 		ProjectId:          projectID,
 		BucketName:         scope.Bucket,
 		Organization:       remote.GetOrganization(),
diff --git a/internal/remoteruntime/runtime_test.go b/internal/remoteruntime/runtime_test.go
index 2b4d6720..2b083439 100644
--- a/internal/remoteruntime/runtime_test.go
+++ b/internal/remoteruntime/runtime_test.go
@@ -59,6 +59,35 @@ func TestNewLocalIncludesRepoBasicAuth(t *testing.T) {
 	}
 }
 
+func TestNewTerraRemoteContext(t *testing.T) {
+	setupTestRepo(t)
+
+	cfg, err := config.UpdateRemote(config.Remote("anvil"), config.RemoteSelect{
+		Terra: &config.TerraRemote{
+			Endpoint: "https://drs.anvilproject.org",
+			Auth:     "google-adc",
+			Mode:     "read-only",
+		},
+	})
+	if err != nil {
+		t.Fatalf("UpdateRemote failed: %v", err)
+	}
+
+	gitCtx, err := New(cfg, config.Remote("anvil"), drslog.GetLogger())
+	if err != nil {
+		t.Fatalf("New failed: %v", err)
+	}
+	if gitCtx.RemoteType != config.TerraServerType {
+		t.Fatalf("RemoteType = %q, want %q", gitCtx.RemoteType, config.TerraServerType)
+	}
+	if gitCtx.Endpoint != "https://drs.anvilproject.org" {
+		t.Fatalf("Endpoint = %q, want Terra endpoint", gitCtx.Endpoint)
+	}
+	if gitCtx.Client != nil {
+		t.Fatalf("Terra runtime should not create a Syfon client, got %+v", gitCtx.Client)
+	}
+}
+
 func TestLocalClientResolvesBucketScopeMappings(t *testing.T) {
 	setupTestRepo(t)
 
diff --git a/internal/testutils/config.go b/internal/testutils/config.go
index e8ab73bc..88a66f35 100644
--- a/internal/testutils/config.go
+++ b/internal/testutils/config.go
@@ -70,6 +70,15 @@ func CreateTestConfig(t *testing.T, tmpDir string, cfg *config.Config) {
 			if remote.Gen3.Organization != "" {
 				setConfig(prefix+".organization", remote.Gen3.Organization)
 			}
+		} else if remote.Terra != nil {
+			setConfig(prefix+".type", "terra")
+			setConfig(prefix+".endpoint", remote.Terra.Endpoint)
+			if remote.Terra.Auth != "" {
+				setConfig(prefix+".auth", remote.Terra.Auth)
+			}
+			if remote.Terra.Mode != "" {
+				setConfig(prefix+".mode", remote.Terra.Mode)
+			}
 		} else if remote.Local != nil {
 			setConfig(prefix+".type", "local")
 			setConfig(prefix+".endpoint", remote.Local.BaseURL)

From 35373553e348076d88b7fdf87a38492d0fd10eeb Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 8 Jul 2026 17:37:18 -0700
Subject: [PATCH 05/66] adds terra ping

---
 cmd/ping/terra_integration_test.go            | 24 +++++++++
 docs/commands.md                              | 53 +++++++++++++++++++
 docs/terra-anvil-drs-download-gap-adr.md      | 14 ++++-
 docs/terra-anvil-tdd-tests.md                 |  2 +-
 .../config/terra_remote_acceptance_test.go    |  4 +-
 internal/remoteruntime/runtime_test.go        |  4 +-
 6 files changed, 95 insertions(+), 6 deletions(-)
 create mode 100644 cmd/ping/terra_integration_test.go

diff --git a/cmd/ping/terra_integration_test.go b/cmd/ping/terra_integration_test.go
new file mode 100644
index 00000000..df48a81c
--- /dev/null
+++ b/cmd/ping/terra_integration_test.go
@@ -0,0 +1,24 @@
+//go:build integration
+
+package ping
+
+import (
+	"context"
+	"os"
+	"testing"
+	"time"
+)
+
+func TestIntegrationPingTerraDRSServer(t *testing.T) {
+	endpoint := os.Getenv("GIT_DRS_TERRA_DRS_ENDPOINT")
+	if endpoint == "" {
+		endpoint = "https://data.terra.bio"
+	}
+
+	ctx, cancel := context.WithTimeout(context.Background(), 15*time.Second)
+	t.Cleanup(cancel)
+
+	if err := pingTerraServiceInfo(ctx, endpoint); err != nil {
+		t.Fatalf("ping Terra DRS service-info endpoint %q: %v", endpoint, err)
+	}
+}
diff --git a/docs/commands.md b/docs/commands.md
index 6fa57edd..a588a7d4 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -75,6 +75,59 @@ List configured `git-drs` remotes.
 git drs remote list
 ```
 
+### `git drs ping [remote-name]`
+
+Show the effective `git-drs` remote configuration and verify that the remote responds.
+
+```bash
+git drs ping
+git drs ping anvil
+```
+
+What it checks:
+
+- prints the selected remote, remote type, endpoint, scope, bucket, storage prefix, and auth mode
+- runs a health check against the selected remote
+- for Terra DRS remotes, pings the GA4GH DRS service-info endpoint at `<endpoint>/ga4gh/drs/v1/service-info`
+- for Terra/AnVIL TDR-hosted data in production, use `https://data.terra.bio` as the endpoint; Terra also uses DRSHub for DRS URI resolution, but DRSHub is a resolver service rather than the GA4GH DRS service-info host
+- for scoped Syfon-style remotes, verifies that the configured organization/project and bucket are visible and readable
+
+Example Terra configuration and ping:
+
+```bash
+git config drs.default-remote anvil
+git config drs.remote.anvil.type terra
+git config drs.remote.anvil.endpoint https://data.terra.bio
+git config drs.remote.anvil.auth google-adc
+git config drs.remote.anvil.mode read-only
+git drs ping anvil
+```
+
+A successful Terra ping includes:
+
+```text
+remote: anvil (default)
+type: terra
+endpoint: https://data.terra.bio
+health: ok
+```
+
+Troubleshooting:
+
+- `no remote configuration found`: run `git drs remote list` and pass an existing remote name, or configure the Terra remote with the `git config` commands above.
+- `terra endpoint is empty`: set `drs.remote.<name>.endpoint` to the Terra DRS base URL, for example `https://data.terra.bio` for the production Terra Data Repository DRS service.
+- `terra endpoint must be an absolute URL`: include the URL scheme, for example `https://data.terra.bio` instead of `data.terra.bio`.
+- `terra DRS service-info returned ...`: verify the server is up and that the base endpoint is correct. You can test the exact URL with `curl -i https://data.terra.bio/ga4gh/drs/v1/service-info`.
+- network, DNS, or TLS errors: check VPN/proxy/firewall settings and retry with `GIT_CURL_VERBOSE=1 git drs ping <remote-name>` for additional HTTP diagnostics from Git-adjacent workflows.
+
+For developers, the live Terra ping integration test is intentionally behind the `integration` build tag because it reaches the public Terra DRS service:
+
+```bash
+go test -tags=integration ./cmd/ping -run TestIntegrationPingTerraDRSServer -count=1
+```
+
+Set `GIT_DRS_TERRA_DRS_ENDPOINT` to point the test at a different Terra DRS deployment. Terra's DRSHub resolver URL follows the `https://drshub.dsde-<env>.broadinstitute.org/api/v4/drs/resolve` pattern used by `terra-notebook-utils`, but `git drs ping` needs the GA4GH DRS service base URL that exposes `/ga4gh/drs/v1/service-info`; for Terra production that service base URL is `https://data.terra.bio`.
+
 ### `git drs remote remove <remote-name>`
 
 Remove a configured `git-drs` remote.
diff --git a/docs/terra-anvil-drs-download-gap-adr.md b/docs/terra-anvil-drs-download-gap-adr.md
index aacde75d..55c84db7 100644
--- a/docs/terra-anvil-drs-download-gap-adr.md
+++ b/docs/terra-anvil-drs-download-gap-adr.md
@@ -16,10 +16,22 @@ Architecture Decision Record / feature gap analysis
 
 - [Terra/AnVIL TDD acceptance tests](./terra-anvil-tdd-tests.md)
 
+## Short answer: Terra DRS service-info endpoint
+
+Yes. Terra Data Repository exposes the GA4GH DRS service-info endpoint at:
+
+```text
+https://data.terra.bio/ga4gh/drs/v1/service-info
+```
+
+For `git-drs` Terra health checks, `https://data.terra.bio` is the Terra DRS service base URL and `git drs ping` derives `/ga4gh/drs/v1/service-info` from that base. Terra also uses DRSHub for DRS URI resolution; DRSHub URLs such as `https://drshub.dsde-<env>.broadinstitute.org/api/v4/drs/resolve` are resolver API URLs, not the GA4GH DRS service-info endpoint that `git drs ping` should use.
+
 ## Summary
 
 `git-drs` already has most of the repository and hydration machinery needed for Terra/AnVIL, so the remaining work should be scoped as an incremental provider/identity extension rather than a wholesale redesign. The most direct path is to add a `terra` remote mode, wire Terra authentication and provider resolution at remote setup time, and then close the two compatibility gaps that are currently not well-defined for Terra references: SHA256-shaped local identity and direct DRS URL pointer identity. A manifest bootstrap workflow remains useful, but it can build on the same lower-level `add-ref`/resolver work instead of being treated as a separate large subsystem.
 
+The Terra remote endpoint used for service-health checks should be the Terra DRS service base URL, for example `https://data.terra.bio` in production. That base URL supports the GA4GH DRS service-info route at `/ga4gh/drs/v1/service-info`. DRSHub remains relevant for resolving Terra DRS URIs into access information, but it is a resolver service rather than the service-info host for `git drs ping`.
+
 ## Background
 
 Gregor project users want a Git repository that stores project structure, manifests, analysis code, and `git-drs` pointer files while leaving controlled-access payload bytes on AnVIL. Users should be able to clone normal Git history, review which data objects are referenced, authenticate through AnVIL/Terra access controls, and hydrate only selected paths with commands such as:
@@ -95,7 +107,7 @@ Example target CLI:
 
 ```bash
 git drs remote add terra anvil \
-  --drs-endpoint https://drs.anvilproject.org \
+  --drs-endpoint https://data.terra.bio \
   --auth google-adc \
   --mode read-only
 ```
diff --git a/docs/terra-anvil-tdd-tests.md b/docs/terra-anvil-tdd-tests.md
index 899832d1..eb52ec7a 100644
--- a/docs/terra-anvil-tdd-tests.md
+++ b/docs/terra-anvil-tdd-tests.md
@@ -26,7 +26,7 @@ The test writes Git config entries equivalent to a future Terra remote:
   default-remote = anvil
 [drs "remote.anvil"]
   type = terra
-  endpoint = https://drs.anvilproject.org
+  endpoint = https://data.terra.bio
   auth = google-adc
   mode = read-only
 ```
diff --git a/internal/config/terra_remote_acceptance_test.go b/internal/config/terra_remote_acceptance_test.go
index 79b7d410..e5a6ea81 100644
--- a/internal/config/terra_remote_acceptance_test.go
+++ b/internal/config/terra_remote_acceptance_test.go
@@ -18,7 +18,7 @@ func TestAcceptanceLoadTerraRemoteConfig(t *testing.T) {
 
 	runGitConfig("drs.default-remote", "anvil")
 	runGitConfig("drs.remote.anvil.type", "terra")
-	runGitConfig("drs.remote.anvil.endpoint", "https://drs.anvilproject.org")
+	runGitConfig("drs.remote.anvil.endpoint", "https://data.terra.bio")
 	runGitConfig("drs.remote.anvil.auth", "google-adc")
 	runGitConfig("drs.remote.anvil.mode", "read-only")
 
@@ -30,7 +30,7 @@ func TestAcceptanceLoadTerraRemoteConfig(t *testing.T) {
 	if remote == nil {
 		t.Fatalf("expected terra remote to load as a DRS remote")
 	}
-	if got := remote.GetEndpoint(); got != "https://drs.anvilproject.org" {
+	if got := remote.GetEndpoint(); got != "https://data.terra.bio" {
 		t.Fatalf("unexpected terra endpoint: %q", got)
 	}
 }
diff --git a/internal/remoteruntime/runtime_test.go b/internal/remoteruntime/runtime_test.go
index 2b083439..db4c6644 100644
--- a/internal/remoteruntime/runtime_test.go
+++ b/internal/remoteruntime/runtime_test.go
@@ -64,7 +64,7 @@ func TestNewTerraRemoteContext(t *testing.T) {
 
 	cfg, err := config.UpdateRemote(config.Remote("anvil"), config.RemoteSelect{
 		Terra: &config.TerraRemote{
-			Endpoint: "https://drs.anvilproject.org",
+			Endpoint: "https://data.terra.bio",
 			Auth:     "google-adc",
 			Mode:     "read-only",
 		},
@@ -80,7 +80,7 @@ func TestNewTerraRemoteContext(t *testing.T) {
 	if gitCtx.RemoteType != config.TerraServerType {
 		t.Fatalf("RemoteType = %q, want %q", gitCtx.RemoteType, config.TerraServerType)
 	}
-	if gitCtx.Endpoint != "https://drs.anvilproject.org" {
+	if gitCtx.Endpoint != "https://data.terra.bio" {
 		t.Fatalf("Endpoint = %q, want Terra endpoint", gitCtx.Endpoint)
 	}
 	if gitCtx.Client != nil {

From 31ec98c5cdab0704db8303c9c9f819cd89675a9b Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 13 Jul 2026 10:35:35 -0700
Subject: [PATCH 06/66] Adds DRS uri <--> OID clarification

---
 docs/multi-drs-reference-identity-adr.md | 172 +++++++++++++++++++++++
 1 file changed, 172 insertions(+)
 create mode 100644 docs/multi-drs-reference-identity-adr.md

diff --git a/docs/multi-drs-reference-identity-adr.md b/docs/multi-drs-reference-identity-adr.md
new file mode 100644
index 00000000..5ca681c1
--- /dev/null
+++ b/docs/multi-drs-reference-identity-adr.md
@@ -0,0 +1,172 @@
+# ADR 0005: Preserve source DRS identity for reference-first workflows across mixed DRS servers
+
+## Status
+
+Proposed
+
+## Context
+
+`git-drs` supports two different classes of object tracking:
+
+1. **Normal local-file tracking**
+   - The user tracks local bytes.
+   - The clean filter calculates the content SHA256.
+   - The Git pointer uses `oid sha256:<content-sha256>`.
+   - Downstream hydration can use the default configured DRS remote to look up DRS records by SHA256.
+
+2. **Reference-first tracking** through `add-ref` and `add-url`
+   - The user references object content that already exists somewhere else.
+   - The repository may not have local payload bytes at reference creation time.
+   - The referenced object may live behind a DRS server or provider/storage URL that is not the default DRS server.
+   - Not every DRS server used by a repository can be assumed to support SHA256 lookup.
+
+Today several implementation paths still rely on a SHA256-shaped local object identity. This works for local-file tracking because content bytes are available and the default remote is expected to resolve SHA256 checksums. It is not sufficient for `add-ref` and `add-url` when the source server cannot resolve by SHA256 or when the source DRS URI is the only durable retrieval identity.
+
+The important distinction is:
+
+- **content SHA256** identifies bytes when known;
+- **local pointer/cache OID** gives `git-drs` a compact cache key and Git LFS-compatible pointer shape;
+- **source DRS URI** identifies the remote DRS record and may be the only reliable way to retrieve bytes from a non-default or non-checksum-indexed DRS server.
+
+A downstream user who clones the repository must be able to hydrate reference-first objects without relying on the default DRS server's checksum lookup when the original source server does not support it.
+
+## Decision
+
+Adopt a split identity model for all reference-first workflows:
+
+1. **Normal local-file tracking remains content-SHA256 driven.**
+   - The clean filter calculates the real content SHA256 from local bytes.
+   - Pointers for normal tracked files continue to use `oid sha256:<content-sha256>`.
+   - The default `remote` DRS server is assumed to support SHA256 lookup for these objects.
+   - Downstream users hydrate these files by checksum lookup against the default remote.
+
+2. **`add-ref` must preserve the original DRS URI as canonical source identity.**
+   - `git drs add-ref <drs-uri> <path>` must store the input DRS URI as first-class metadata.
+   - If the source DRS object provides a real SHA256, store it as content metadata.
+   - If the source DRS object does not provide SHA256, do not fabricate a content checksum.
+   - Use a SHA256-shaped local/cache OID only as local identity when needed.
+   - Downstream hydration must resolve by the stored DRS URI when checksum lookup is unavailable or not appropriate.
+
+3. **`add-url` must preserve a canonical retrievable source reference.**
+   - If the input is a DRS URI, store that DRS URI as canonical source identity.
+   - If the input is a provider URL such as `s3://...`, store that provider URL as source access metadata and preserve enough remote/provider context to retrieve it later.
+   - If a real SHA256 is supplied through `--sha256`, store it as content metadata.
+   - If SHA256 is unknown, derive only a local placeholder/cache OID; mark it as non-content-derived.
+   - Downstream hydration must use the stored source reference rather than assuming checksum lookup will work.
+
+4. **Do not use DRS-URI-derived SHA256 values as content checksums.**
+   - A hash of `drs://...` is a local/cache key, not a byte checksum.
+   - Download validation must compare against a real content SHA256 only when one is known.
+   - If only DRS URI identity is known, validation should use size and DRS/provider metadata where available, and should clearly report that content SHA256 validation was unavailable.
+
+5. **Pointer/cache compatibility remains SHA256-shaped internally.**
+   - Existing fanout paths and many pointer workflows expect 64-hex OIDs.
+   - Reference-first objects may therefore use a derived local OID such as:
+
+```text
+derived_oid = sha256("git-drs-source-ref:v1\nsource_uri=<normalized-source-uri>\nremote=<remote-name-or-type>\n")
+```
+
+   - This derived OID is only a local identifier.
+   - It must be recorded with metadata that states its origin, for example `oid_kind = "derived-source-uri"`.
+
+## Required metadata model
+
+Reference-first metadata must make the following fields explicit:
+
+```text
+local_oid          SHA256-shaped local pointer/cache identity
+local_oid_kind     content-sha256 | derived-source-uri | placeholder
+source_uri         original drs:// URI or provider URL
+source_type        drs | s3 | gs | https | other
+source_remote      configured remote name, remote type, or resolver profile
+content_sha256     real payload SHA256 when known
+size               object size when known
+access_methods     provider or DRS access metadata when available
+```
+
+The pointer may remain Git LFS-shaped for compatibility:
+
+```text
+version https://git-lfs.github.com/spec/v1
+oid sha256:<local_oid>
+size <size>
+```
+
+But the sidecar/local metadata must be committed or otherwise made available to downstream users when it is required for hydration. A SHA256-shaped pointer alone is insufficient for non-checksum DRS servers unless `<local_oid>` is a real content SHA256 and a configured DRS/index can resolve it.
+
+A git-drs-specific pointer that embeds the DRS URI remains valid as an alternate representation:
+
+```text
+version https://calypr.github.io/spec/v1
+oid drs://example/object
+size <size>
+```
+
+If this representation is used, the hydration path must preserve the OID type and resolve by DRS URI, not by checksum.
+
+## Hydration behavior
+
+Hydration should choose the retrieval strategy from metadata, in this order:
+
+1. **Source DRS URI path**
+   - If metadata contains `source_type = drs` and `source_uri`, resolve the DRS object through `source_remote` or the recorded resolver profile.
+   - Request an access URL from that source DRS server.
+   - Download to the local cache path for `local_oid`.
+   - Verify real SHA256 only if `content_sha256` is known.
+
+2. **Provider URL path**
+   - If metadata contains a provider URL and credentials/resolver context, retrieve through that provider path.
+   - Verify real SHA256 only if `content_sha256` is known.
+
+3. **Checksum lookup path**
+   - If `local_oid_kind = content-sha256` or `content_sha256` is known, lookup by checksum on the configured remote.
+   - This is the normal path for local-file tracking and remains supported for DRS servers that provide checksum lookup.
+
+4. **Failure path**
+   - If the only available identity is a derived/placeholder OID and there is no source URI/provider metadata, hydration must fail with an actionable error explaining that the repository lacks enough source identity to retrieve the object.
+
+## `add-ref` implications
+
+`add-ref` should no longer reduce a DRS reference to only a SHA256 pointer.
+
+Required behavior:
+
+1. Resolve the input DRS URI against the selected remote/resolver.
+2. Capture returned size, checksums, access methods, and DRS object ID when available.
+3. Persist the original input DRS URI as `source_uri`.
+4. Persist the selected remote or resolver as `source_remote`.
+5. Use real content SHA256 as `content_sha256` only if the DRS object reports it.
+6. Use either:
+   - `local_oid = content_sha256` when a real SHA256 is known and policy permits checksum identity; or
+   - `local_oid = sha256(namespaced normalized source_uri + remote context)` when SHA256 is missing or when the source server cannot support checksum lookup.
+7. Ensure downstream hydration resolves by `source_uri` when `source_remote` does not support SHA256 lookup.
+
+## `add-url` implications
+
+`add-url` should treat its input URL as source identity, not merely as a seed for a placeholder OID.
+
+Required behavior:
+
+1. Inspect the source object for size and metadata where possible.
+2. Preserve the input object URL as `source_uri` or provider source metadata.
+3. Preserve the selected remote/provider resolver context.
+4. Use `--sha256` as real `content_sha256` only when supplied by the user or verified from trusted provider metadata.
+5. If SHA256 is unknown, derive a local OID from namespaced source metadata and mark it as non-content-derived.
+6. Ensure downstream hydration retrieves from the stored source URI/provider metadata rather than assuming checksum lookup.
+
+## Consequences
+
+- Normal local-file tracking remains compatible with existing SHA256 lookup behavior.
+- `add-ref` and `add-url` become safe for multi-DRS repositories where some servers cannot look up by SHA256.
+- Downstream users can hydrate reference-first objects because the original source identity is preserved.
+- Cache paths remain compact and SHA256-shaped without confusing derived local IDs for payload checksums.
+- Download verification must become metadata-aware: real SHA256 validation is required when known, but a derived local OID must never be treated as a byte checksum.
+- Repository metadata must become part of the clone/hydration contract for reference-first objects.
+
+## Non-goals
+
+- Do not require every DRS server to implement SHA256 lookup.
+- Do not require downloading payload bytes during `add-ref` or `add-url` solely to compute SHA256.
+- Do not treat hashes of DRS URIs or provider URLs as real content checksums.
+- Do not remove the existing SHA256-based workflow for normal local-file tracking.

From 481c89f1a0a98e30b090cf10408acd3c6fce0175 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 13 Jul 2026 13:18:00 -0700
Subject: [PATCH 07/66] clarifies pointer file usage

---
 cmd/addref/add-ref.go         |  41 ++++++++++++-
 cmd/addref/add-ref_test.go    |  29 +++++++++-
 cmd/addurl/local_state.go     |  22 +++++--
 cmd/addurl/main_test.go       |   3 +
 cmd/addurl/run.go             |   7 ++-
 cmd/pull/main.go              |  14 ++++-
 docs/adding-s3-files.md       |   7 ++-
 docs/commands.md              |   5 +-
 docs/pointer-files.md         | 106 ++++++++++++++++++++++++++++++++++
 internal/lfs/inventory.go     |  32 ++++++++--
 internal/transfer/download.go |  33 +++++++++++
 11 files changed, 275 insertions(+), 24 deletions(-)
 create mode 100644 docs/pointer-files.md

diff --git a/cmd/addref/add-ref.go b/cmd/addref/add-ref.go
index 614f8e37..0e1a7ad0 100644
--- a/cmd/addref/add-ref.go
+++ b/cmd/addref/add-ref.go
@@ -2,14 +2,20 @@ package addref
 
 import (
 	"context"
+	"crypto/sha256"
+	"encoding/hex"
 	"fmt"
 	"os"
 	"path/filepath"
 
 	"github.com/calypr/git-drs/internal/config"
 	"github.com/calypr/git-drs/internal/drslog"
+	"github.com/calypr/git-drs/internal/drsobject"
+	"github.com/calypr/git-drs/internal/gitrepo"
 	"github.com/calypr/git-drs/internal/lfs"
 	"github.com/calypr/git-drs/internal/remoteruntime"
+	drsapi "github.com/calypr/syfon/apigen/client/drs"
+	"github.com/calypr/syfon/client/hash"
 	"github.com/spf13/cobra"
 )
 
@@ -55,8 +61,21 @@ var Cmd = &cobra.Command{
 			os.MkdirAll(dirPath, os.ModePerm)
 		}
 
-		err = lfs.CreateLfsPointer(&obj, dstPath)
-		return err
+		oid := addRefLocalOID(drsUri, remoteName, &obj)
+		if hasContentSHA256(&obj) {
+			if err := lfs.CreateLfsPointerWithOID(&obj, dstPath, oid); err != nil {
+				return err
+			}
+		} else if err := lfs.CreateDRSPointer(&obj, dstPath, drsUri); err != nil {
+			return err
+		}
+		if obj.SelfUri == "" {
+			obj.SelfUri = drsUri
+		}
+		if err := drsobject.WriteObject(gitrepo.DRSObjectsPath, &obj, oid); err != nil {
+			return fmt.Errorf("write source DRS metadata: %w", err)
+		}
+		return nil
 	},
 }
 
@@ -64,3 +83,21 @@ func init() {
 	Cmd.Flags().StringVarP(&remote, "remote", "r", "", "target remote DRS server (default: default_remote)")
 	Cmd.Flags().StringVar(&remoteType, "remote-type", "", "resolver remote type for DRS references (for example: terra)")
 }
+
+func hasContentSHA256(obj *drsapi.DrsObject) bool {
+	return obj != nil && drsobject.NormalizeChecksum(hash.ConvertDrsChecksumsToHashInfo(obj.Checksums).SHA256) != ""
+}
+
+func addRefLocalOID(sourceURI string, remoteName config.Remote, obj *drsapi.DrsObject) string {
+	if obj != nil {
+		if sha := drsobject.NormalizeChecksum(hash.ConvertDrsChecksumsToHashInfo(obj.Checksums).SHA256); sha != "" {
+			return sha
+		}
+	}
+	return derivedSourceOID(sourceURI, string(remoteName))
+}
+
+func derivedSourceOID(sourceURI, remoteName string) string {
+	sum := sha256.Sum256([]byte("git-drs-source-ref:v1\nsource_uri=" + sourceURI + "\nremote=" + remoteName + "\n"))
+	return hex.EncodeToString(sum[:])
+}
diff --git a/cmd/addref/add-ref_test.go b/cmd/addref/add-ref_test.go
index b8087f8a..4879e43b 100644
--- a/cmd/addref/add-ref_test.go
+++ b/cmd/addref/add-ref_test.go
@@ -12,7 +12,7 @@ import (
 func TestCreateLfsPointer(t *testing.T) {
 	obj := &drsapi.DrsObject{
 		Size:      10,
-		Checksums: []drsapi.Checksum{{Type: "sha256", Checksum: "abc"}},
+		Checksums: []drsapi.Checksum{{Type: "sha256", Checksum: "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"}},
 	}
 	path := filepath.Join(t.TempDir(), "pointer")
 	if err := lfs.CreateLfsPointer(obj, path); err != nil {
@@ -40,3 +40,30 @@ func TestCreateLfsPointer_NoSHA256(t *testing.T) {
 		t.Fatalf("expected error for missing sha256")
 	}
 }
+
+func TestAddRefLocalOIDUsesDerivedSourceWhenSHA256Missing(t *testing.T) {
+	obj := &drsapi.DrsObject{Checksums: []drsapi.Checksum{{Type: "md5", Checksum: "md5"}}}
+	oid := addRefLocalOID("drs://example.org/object-1", "source", obj)
+	if len(oid) != 64 {
+		t.Fatalf("expected sha256-shaped derived oid, got %q", oid)
+	}
+	if oid != derivedSourceOID("drs://example.org/object-1", "source") {
+		t.Fatalf("expected derived source oid, got %s", oid)
+	}
+}
+
+func TestCreateDRSPointerPreservesSourceURI(t *testing.T) {
+	obj := &drsapi.DrsObject{Size: 42}
+	path := filepath.Join(t.TempDir(), "pointer")
+	if err := lfs.CreateDRSPointer(obj, path, "drs://example.org/object-1"); err != nil {
+		t.Fatalf("CreateDRSPointer error: %v", err)
+	}
+	data, err := os.ReadFile(path)
+	if err != nil {
+		t.Fatalf("read pointer: %v", err)
+	}
+	expected := "version https://calypr.github.io/spec/v1\noid drs://example.org/object-1\nsize 42\n"
+	if string(data) != expected {
+		t.Fatalf("pointer mismatch: expected %q, got %q", expected, string(data))
+	}
+}
diff --git a/cmd/addurl/local_state.go b/cmd/addurl/local_state.go
index d76d3a56..982bd7ae 100644
--- a/cmd/addurl/local_state.go
+++ b/cmd/addurl/local_state.go
@@ -21,9 +21,10 @@ import (
 )
 
 type addURLDrsFile struct {
-	Name string
-	Size int64
-	Oid  string
+	Name          string
+	Size          int64
+	Oid           string
+	ContentSHA256 string
 }
 
 func drsobjectBuilder(bucket, organization, project, storagePrefix string) drsobject.Builder {
@@ -43,9 +44,18 @@ func writeAddURLDrsObject(builder drsobject.Builder, file addURLDrsFile, objectP
 		drsObj.Size = file.Size
 	} else {
 		drsID := uuid.NewSHA1(drsobject.UUIDNamespace, []byte(fmt.Sprintf("%s:%s", builder.Project, drsobject.NormalizeOid(file.Oid)))).String()
-		drsObj, err = builder.Build(file.Name, file.Oid, file.Size, drsID)
-		if err != nil {
-			return nil, fmt.Errorf("error building DRS object for oid %s: %w", file.Oid, err)
+		if file.ContentSHA256 != "" {
+			drsObj, err = builder.Build(file.Name, file.ContentSHA256, file.Size, drsID)
+			if err != nil {
+				return nil, fmt.Errorf("error building DRS object for oid %s: %w", file.Oid, err)
+			}
+		} else {
+			drsObj = &drsapi.DrsObject{
+				Id:      drsID,
+				SelfUri: objectPath,
+				Size:    file.Size,
+				Name:    &file.Name,
+			}
 		}
 	}
 
diff --git a/cmd/addurl/main_test.go b/cmd/addurl/main_test.go
index 175b85d8..0c4ebee8 100644
--- a/cmd/addurl/main_test.go
+++ b/cmd/addurl/main_test.go
@@ -143,6 +143,9 @@ func TestRunAddURL_WritesPointerAndLFSObject(t *testing.T) {
 	if got := (*drsObject.AccessMethods)[0].AccessUrl.Url; got != "s3://bucket/path/to/file.bin" {
 		t.Fatalf("unexpected access URL: %s", got)
 	}
+	if len(drsObject.Checksums) != 0 {
+		t.Fatalf("expected unknown sha256 add-url metadata not to fabricate checksums, got %+v", drsObject.Checksums)
+	}
 }
 
 func TestPlaceholderOIDForUnknownSHA(t *testing.T) {
diff --git a/cmd/addurl/run.go b/cmd/addurl/run.go
index 4c440557..572beb0c 100644
--- a/cmd/addurl/run.go
+++ b/cmd/addurl/run.go
@@ -137,9 +137,10 @@ func (s *AddURLService) Run(cmd *cobra.Command, args []string) error {
 
 	builder := drsobjectBuilder(scope.Bucket, org, project, scope.Prefix)
 	file := addURLDrsFile{
-		Name: input.path,
-		Size: objectInfo.SizeBytes,
-		Oid:  oid,
+		Name:          input.path,
+		Size:          objectInfo.SizeBytes,
+		Oid:           oid,
+		ContentSHA256: input.sha256,
 	}
 	if _, err := writeAddURLDrsObject(builder, file, input.objectURL); err != nil {
 		return fmt.Errorf("write local DRS object: %w", err)
diff --git a/cmd/pull/main.go b/cmd/pull/main.go
index 0b2a848e..660c3f97 100644
--- a/cmd/pull/main.go
+++ b/cmd/pull/main.go
@@ -183,7 +183,12 @@ var Cmd = &cobra.Command{
 						continue
 					}
 				}
-				if err := internaltransfer.DownloadToCachePath(downloadCtx, drsCtx, f.Oid, dstPath); err != nil {
+				if isDRSPointerOID(f.Oid) {
+					if err := internaltransfer.DownloadDRSURIToCachePath(downloadCtx, drsCtx, f.Oid, dstPath); err != nil {
+						debugCtx := buildPullDownloadDebugContext(ctx, drsCtx, f.Oid)
+						return fmt.Errorf("failed to download DRS URI %s to %s: %w\npull-debug: %s", f.Oid, dstPath, err, debugCtx)
+					}
+				} else if err := internaltransfer.DownloadToCachePath(downloadCtx, drsCtx, f.Oid, dstPath); err != nil {
 					debugCtx := buildPullDownloadDebugContext(ctx, drsCtx, f.Oid)
 					return fmt.Errorf("failed to download oid %s to %s: %w\npull-debug: %s", f.Oid, dstPath, err, debugCtx)
 				}
@@ -231,6 +236,11 @@ func collectPointerFiles(inventory map[string]lfs.LfsFileInfo, patterns []string
 	return files
 }
 
+func isDRSPointerOID(oid string) bool {
+	oid = strings.TrimSpace(oid)
+	return strings.HasPrefix(oid, "//") || strings.HasPrefix(strings.ToLower(oid), "drs://")
+}
+
 func progressContextForPointer(ctx context.Context, progress *internaltransfer.PullProgressRenderer, file pointerFile) context.Context {
 	ctx = sycommon.WithOid(ctx, file.Name)
 	return sycommon.WithProgress(ctx, func(ev sycommon.ProgressEvent) error {
@@ -295,7 +305,7 @@ func inspectCachedObject(path, expectedOID string, expectedSize int64) (cachedOb
 	if expectedSize <= 0 && info.Size() <= 0 {
 		return state, nil
 	}
-	if strings.TrimSpace(expectedOID) == "" {
+	if strings.TrimSpace(expectedOID) == "" || strings.HasPrefix(strings.TrimSpace(expectedOID), "//") || strings.HasPrefix(strings.ToLower(strings.TrimSpace(expectedOID)), "drs://") {
 		state.complete = true
 		return state, nil
 	}
diff --git a/docs/adding-s3-files.md b/docs/adding-s3-files.md
index 0151d57a..0bf1d8d2 100644
--- a/docs/adding-s3-files.md
+++ b/docs/adding-s3-files.md
@@ -74,9 +74,10 @@ If SHA256 is unknown, omit `--sha256`.
 Behavior:
 
 1. `add-url` performs object metadata lookup (HEAD/attributes).
-2. A deterministic placeholder OID is derived from remote object metadata.
-3. A pointer file and local DRS metadata are written.
-4. `git drs push` performs metadata registration.
+2. A deterministic placeholder/local OID is derived from remote object metadata.
+3. A pointer file and local DRS metadata are written; the placeholder is not recorded as a content checksum.
+4. The provider URL/source metadata remains the retrieval identity until content is downloaded.
+5. `git drs push` performs metadata registration.
 
 ```bash
 git drs track "data/*.bin"
diff --git a/docs/commands.md b/docs/commands.md
index a588a7d4..3f4d35dd 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -241,6 +241,8 @@ Notes:
 
 ## Provider/Object Reference Workflows
 
+For details on pointer file formats and lifecycle state, see [Pointer Files and Reference State](pointer-files.md).
+
 ### `git drs add-url <object-url-or-key> [path]`
 
 Create a pointer plus local DRS metadata for an object that already exists in provider storage.
@@ -256,11 +258,12 @@ Notes:
 - object-key mode resolves against the configured bucket scope
 - explicit provider URL mode remains supported
 - `--scheme` is required for object-key mode
+- when `--sha256` is omitted, the pointer uses a derived local/cache OID and source URL metadata remains the retrieval identity
 - registration happens later on `git drs push`
 
 ### `git drs add-ref <drs-id> <path>`
 
-Add a local pointer file for an existing DRS object.
+Add a local pointer file for an existing DRS object. If the source DRS object has a SHA256 checksum, the pointer can use that checksum; otherwise the pointer preserves the source `drs://...` URI directly so hydration can resolve by DRS identity instead of checksum lookup.
 
 ```bash
 git drs add-ref drs://example/object-id data/object.bin
diff --git a/docs/pointer-files.md b/docs/pointer-files.md
new file mode 100644
index 00000000..5783fe9a
--- /dev/null
+++ b/docs/pointer-files.md
@@ -0,0 +1,106 @@
+# Pointer Files and Reference State
+
+`git-drs` keeps large payload bytes out of Git history by committing small pointer files. A pointer records enough identity to let `git-drs` find or rebuild the payload later, while the payload itself lives in local cache, provider storage, or behind a DRS server.
+
+This page documents the pointer shapes used by reference-first workflows and how state changes as commands create references, download content, and obtain temporary access URLs (the resolved "real" download URLs used for the transfer).
+
+## Pointer file shapes
+
+### Content SHA256 pointer
+
+When the real payload SHA256 is known, `git-drs` uses a Git LFS-compatible pointer:
+
+```text
+version https://git-lfs.github.com/spec/v1
+oid sha256:<content-sha256-or-local-oid>
+size <bytes>
+```
+
+For normal tracked-file workflows, `<content-sha256-or-local-oid>` is the real content SHA256. For metadata-first workflows, it may be a SHA256-shaped local/cache OID only when separate metadata preserves the retrievable source identity.
+
+### DRS URI pointer
+
+When `add-ref` resolves a DRS object that does not provide a real SHA256, `git-drs` preserves the source identity directly in a git-drs pointer:
+
+```text
+version https://calypr.github.io/spec/v1
+oid drs://<drs-host-or-resolver>/<object-id>
+size <bytes>
+```
+
+The DRS URI is the retrieval identity. It is not a content checksum. Cache paths can still use a deterministic SHA256-shaped key derived from the DRS URI, but validation must not compare downloaded bytes against that derived key as if it were a content SHA256.
+
+## State model
+
+The same path can move through these states:
+
+| State | Worktree file | Local cache | Source metadata | Retrieval behavior |
+|---|---|---|---|---|
+| Pointer only | Pointer text is present at the tracked path | Payload may be absent | DRS URI, provider URL, or checksum metadata identifies the source | `git drs pull` can hydrate the path later |
+| Cached payload | Pointer text remains in Git/index history, and payload bytes exist in `.git/lfs/objects/...` | Payload bytes are present | Same source metadata remains available | checkout/smudge can replace pointer text with payload bytes |
+| Hydrated worktree | The tracked path contains payload bytes | Payload bytes are present | Source metadata remains the retrieval contract | Future clean/filter operations can write the pointer back to Git |
+
+A DRS/provider access URL is usually not stable source identity. It is a temporary, resolved "real" download URL created from the stable DRS URI or provider reference when content is downloaded.
+
+## Command-created state changes
+
+### `git drs add-ref <drs-uri> <path>`
+
+`add-ref` creates a reference to an existing DRS object without downloading payload bytes solely to compute a checksum.
+
+1. The command resolves the input DRS URI through the selected remote/resolver.
+2. If the DRS object reports a real SHA256, `git-drs` writes a SHA256 pointer whose OID is that content checksum.
+3. If the DRS object does not report a real SHA256, `git-drs` writes a DRS URI pointer whose OID preserves the original `drs://...` source reference.
+4. The fetched DRS metadata is stored locally under a deterministic local/cache OID.
+5. The worktree path is in the **pointer only** state until content is hydrated.
+
+Example pointer when SHA256 is unavailable:
+
+```text
+version https://calypr.github.io/spec/v1
+oid drs://example.org/object-1
+size 123456
+```
+
+### `git drs add-url <object-url-or-key> [path]`
+
+`add-url` creates a reference to an object that already exists in provider storage.
+
+1. The command inspects the provider object through the configured remote.
+2. The input provider URL or resolved provider URL is preserved as source access metadata.
+3. If `--sha256 <hex>` is supplied or a trusted SHA256 is discovered, that value is stored as content metadata and used as the pointer/cache OID.
+4. If SHA256 is unknown, `git-drs` derives a placeholder/local OID from source metadata and writes a pointer with that SHA256-shaped local OID; it does **not** record the placeholder as a content checksum.
+5. The worktree path is in the **pointer only** state until content is hydrated.
+
+Example pointer when SHA256 is unknown:
+
+```text
+version https://git-lfs.github.com/spec/v1
+oid sha256:<derived-local-oid>
+size 123456
+```
+
+In that case, `<derived-local-oid>` is a local/cache identifier, not a payload checksum.
+
+### `git drs pull`
+
+`pull` changes pointer-only paths into hydrated content when payload bytes are missing locally.
+
+1. The command scans tracked pointer files in the current checkout.
+2. For a content SHA256 pointer, it can look up a scoped DRS record by checksum and request a temporary access URL from that DRS record.
+3. For a DRS URI pointer, it resolves the stored `drs://...` source URI, requests a temporary access URL for that DRS object, and downloads through the resolved URL.
+4. For provider-backed references, it uses the stored provider/source metadata to retrieve content when available.
+5. Downloaded bytes are written to the local cache path.
+6. If a real content SHA256 is known, the downloaded bytes are validated against it. If only a DRS URI or derived local OID is known, validation is limited to size and available DRS/provider metadata.
+7. The worktree file is checked out from the cache, moving it to the **hydrated worktree** state.
+
+The temporary access URL (the resolved "real" URL) created during this process is a download mechanism, not the durable identity committed in Git. The durable identity remains the pointer plus source metadata: content SHA256 when known, DRS URI for DRS references, or provider URL/source metadata for provider references.
+
+## Practical review guidance
+
+When reviewing pointer changes:
+
+- `oid sha256:<64-hex>` means either a real content SHA256 or a SHA256-shaped local OID; check source metadata when the object came from `add-url` without `--sha256`.
+- `oid drs://...` means the pointer itself preserves the source DRS URI and hydration should resolve by DRS URI, not by checksum lookup.
+- A hash derived from a DRS URI or provider URL must not be used as a content checksum.
+- Temporary access URLs may be created during hydration, but they should not replace the durable source identity in committed pointer state.
diff --git a/internal/lfs/inventory.go b/internal/lfs/inventory.go
index bf136913..a197f78d 100644
--- a/internal/lfs/inventory.go
+++ b/internal/lfs/inventory.go
@@ -560,17 +560,37 @@ func CreateLfsPointer(drsObj *drsapi.DrsObject, dst string) error {
 	if shaSum == "" {
 		return fmt.Errorf("no sha256 checksum found for DRS object")
 	}
+	return CreateLfsPointerWithOID(drsObj, dst, shaSum)
+}
 
-	// create pointer file content
+// CreateLfsPointerWithOID writes a Git LFS pointer using an explicit local/cache
+// oid. The oid may be a real content SHA256 or a derived source-identity key.
+func CreateLfsPointerWithOID(drsObj *drsapi.DrsObject, dst string, oid string) error {
+	oid = strings.TrimPrefix(strings.TrimSpace(oid), "sha256:")
+	if !sha256OIDRe.MatchString(oid) {
+		return fmt.Errorf("oid %q is not a valid sha256-shaped value", oid)
+	}
 	pointerContent := "version https://git-lfs.github.com/spec/v1\n"
-	pointerContent += fmt.Sprintf("oid sha256:%s\n", shaSum)
+	pointerContent += fmt.Sprintf("oid sha256:%s\n", strings.ToLower(oid))
 	pointerContent += fmt.Sprintf("size %d\n", drsObj.Size)
-
-	// write to file
-	err := os.WriteFile(dst, []byte(pointerContent), 0644)
-	if err != nil {
+	if err := os.WriteFile(dst, []byte(pointerContent), 0644); err != nil {
 		return fmt.Errorf("failed to write LFS pointer file: %w", err)
 	}
+	return nil
+}
 
+// CreateDRSPointer writes a git-drs pointer that preserves the retrievable DRS URI.
+func CreateDRSPointer(drsObj *drsapi.DrsObject, dst string, drsURI string) error {
+	drsURI = strings.TrimSpace(drsURI)
+	if !strings.HasPrefix(strings.ToLower(drsURI), "drs://") {
+		return fmt.Errorf("DRS URI %q must start with drs://", drsURI)
+	}
+	pointerOID := "//" + drsURI[len("drs://"):]
+	pointerContent := "version https://calypr.github.io/spec/v1\n"
+	pointerContent += fmt.Sprintf("oid drs:%s\n", pointerOID)
+	pointerContent += fmt.Sprintf("size %d\n", drsObj.Size)
+	if err := os.WriteFile(dst, []byte(pointerContent), 0644); err != nil {
+		return fmt.Errorf("failed to write DRS pointer file: %w", err)
+	}
 	return nil
 }
diff --git a/internal/transfer/download.go b/internal/transfer/download.go
index 70928b5c..33407a16 100644
--- a/internal/transfer/download.go
+++ b/internal/transfer/download.go
@@ -42,6 +42,39 @@ func AccessURLForHashScope(ctx context.Context, drsCtx *remoteruntime.GitContext
 	return &accessURL, &match, nil
 }
 
+func AccessURLForDRSURI(ctx context.Context, drsCtx *remoteruntime.GitContext, drsURI string) (*drsapi.AccessURL, *drsapi.DrsObject, error) {
+	if strings.HasPrefix(drsURI, "//") {
+		drsURI = "drs:" + drsURI
+	}
+	obj, err := drsCtx.Client.DRS().GetObject(ctx, drsURI)
+	if err != nil {
+		return nil, nil, err
+	}
+	if obj.AccessMethods == nil || len(*obj.AccessMethods) == 0 {
+		return nil, nil, fmt.Errorf("no access methods available for DRS object %s", obj.Id)
+	}
+	accessType := (*obj.AccessMethods)[0].Type
+	if accessType == "" {
+		return nil, nil, fmt.Errorf("no access type found in access method for DRS object %s", obj.Id)
+	}
+	accessURL, err := drsCtx.Client.DRS().GetAccessURL(ctx, obj.Id, string(accessType))
+	if err != nil {
+		return nil, nil, err
+	}
+	return &accessURL, &obj, nil
+}
+
+func DownloadDRSURIToCachePath(ctx context.Context, drsCtx *remoteruntime.GitContext, drsURI, cachePath string) error {
+	if err := os.MkdirAll(filepath.Dir(cachePath), 0o755); err != nil {
+		return fmt.Errorf("mkdir for cache path: %w", err)
+	}
+	accessURL, obj, err := AccessURLForDRSURI(ctx, drsCtx, drsURI)
+	if err != nil {
+		return err
+	}
+	return downloadResolved(ctx, drsCtx, drsURI, cachePath, obj, accessURL)
+}
+
 func DownloadToCachePath(ctx context.Context, drsCtx *remoteruntime.GitContext, oid, cachePath string) error {
 	if err := os.MkdirAll(filepath.Dir(cachePath), 0o755); err != nil {
 		return fmt.Errorf("mkdir for cache path: %w", err)

From bc81881cdcbc4758bb14bd9328c5b668d2388a8c Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 13 Jul 2026 14:06:13 -0700
Subject: [PATCH 08/66] adds sequence diagram

---
 docs/pointer-files.md | 133 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 133 insertions(+)

diff --git a/docs/pointer-files.md b/docs/pointer-files.md
index 5783fe9a..00c77076 100644
--- a/docs/pointer-files.md
+++ b/docs/pointer-files.md
@@ -96,6 +96,139 @@ In that case, `<derived-local-oid>` is a local/cache identifier, not a payload c
 
 The temporary access URL (the resolved "real" URL) created during this process is a download mechanism, not the durable identity committed in Git. The durable identity remains the pointer plus source metadata: content SHA256 when known, DRS URI for DRS references, or provider URL/source metadata for provider references.
 
+## Primary remote DRS server state
+
+The **primary remote DRS server** is the configured `drs.default-remote` or the remote passed to a command. For reference-first flows, distinguish three places where state can exist:
+
+- **Git state:** committed pointer text at the repository path.
+- **Local git-drs state:** sidecar DRS object JSON under the repo's local DRS metadata directory, plus optional local LFS cache bytes.
+- **Primary remote DRS server state:** Syfon/Gen3 DRS records, scoped to the configured organization/project, and any remote storage object those records point at.
+
+`add-ref` and `add-url` are intentionally metadata-first commands. They create Git and local git-drs state first; they do not necessarily create or mutate the primary remote DRS server until a later `git drs push` or an explicit server-side copy/register operation.
+
+### Sequence: pointer and DRS server state for `add-ref` / `add-url`
+
+The following sequence diagram shows the expected pointer-file changes, local
+metadata/cache changes, and primary remote DRS server changes for the
+reference-first `add-ref`/`add-url` flows. If a caller says `add-reg` in this
+context, treat it as the registration side of the same reference-first flow:
+the server-side record is created or refined only when metadata is pushed or
+explicitly registered, not when the local pointer is first written.
+
+```mermaid
+sequenceDiagram
+    autonumber
+    actor User
+    participant Git as Git worktree/index
+    participant Local as Local git-drs metadata/cache
+    participant Remote as Primary remote DRS server
+    participant Source as Source DRS/provider object
+
+    rect rgb(238, 248, 255)
+        note over User,Source: add-ref: reference an existing DRS URI
+        User->>Remote: git drs add-ref drs://source/object data/file
+        Remote->>Source: Resolve DRS URI / fetch DRS object metadata
+        Source-->>Remote: DRS object metadata, size, access methods, optional sha256
+        Remote-->>User: Resolved DRS object metadata
+        alt Resolved object includes real sha256
+            User->>Git: Write pointer oid sha256:<real-content-sha256>
+            User->>Local: Store DRS metadata keyed by real sha256
+        else Resolved object does not include real sha256
+            User->>Git: Write git-drs pointer oid drs://source/object
+            User->>Local: Store DRS metadata keyed by derived DRS/local cache key
+        end
+        note over Remote: No new scoped DRS record is required merely because add-ref wrote a local pointer.
+    end
+
+    rect rgb(248, 255, 238)
+        note over User,Source: add-url: reference an existing provider object
+        User->>Remote: git drs add-url s3://bucket/key data/file [--sha256]
+        Remote->>Source: Inspect provider object using remote bucket credentials/scope
+        Source-->>Remote: Provider URL, size, ETag/metadata, optional trusted sha256
+        Remote-->>User: Inspected object metadata
+        alt Real sha256 supplied or trusted
+            User->>Git: Write pointer oid sha256:<real-content-sha256>
+            User->>Local: Store local DRS metadata with checksum sha256=<real-content-sha256>
+        else Real sha256 unknown
+            User->>Local: Calculate placeholder/local OID from provider metadata
+            User->>Git: Write pointer oid sha256:<placeholder-local-oid>
+            User->>Local: Store provider access URL and size without checksum=<placeholder-local-oid>
+        end
+        note over Remote: Inspection does not itself create the durable DRS record for this repo scope.
+    end
+
+    rect rgb(255, 248, 238)
+        note over User,Remote: Push/register metadata with primary remote
+        User->>Remote: git drs push / register metadata for reachable pointers
+        alt Pointer/local metadata has real sha256
+            Remote->>Remote: Upsert scoped DRS record with sha256, size, and access method
+        else Only DRS URI/provider source identity is known
+            Remote->>Remote: Upsert metadata preserving source URI/provider access, size, and no fake sha256
+        end
+    end
+
+    rect rgb(255, 238, 248)
+        note over User,Source: Later hydration discovers real content sha256
+        User->>Remote: git drs pull resolves DRS URI or source metadata
+        Remote->>Source: Request temporary access URL / download bytes
+        Source-->>Local: Store downloaded payload bytes in cache/worktree
+        Local->>Local: Calculate real sha256 over downloaded bytes
+        Local->>Local: Store/refine local checksum metadata sha256=<real-content-sha256>
+        opt User intentionally rewrites pointer metadata
+            User->>Git: Replace DRS/placeholder pointer with oid sha256:<real-content-sha256>
+        end
+        opt User pushes refined metadata
+            User->>Remote: git drs push / register refined checksum metadata
+            Remote->>Remote: Store real sha256 as checksum; keep DRS/provider retrieval identity
+            Remote->>Remote: Ensure placeholder or derived local OID is not advertised as checksum
+        end
+    end
+```
+
+### After `git drs add-ref <drs-uri> <path>`
+
+Expected state immediately after `add-ref` succeeds:
+
+| Location | Expected state |
+|---|---|
+| Git/worktree | A pointer file exists at `<path>`. If the resolved DRS object has a real SHA256 checksum, the pointer uses `oid sha256:<content-sha256>`; otherwise it uses a git-drs DRS URI pointer that preserves the input DRS URI. |
+| Local git-drs metadata | The resolved DRS object returned by the selected remote/resolver is stored locally under the local OID used for the pointer/cache lookup. If the DRS object omitted `self_uri`, the input DRS URI is retained as `self_uri`. |
+| Local payload cache | No payload download is required just to create the reference. The cache may still be empty for this object. |
+| Primary remote DRS server | No new record is required merely because `add-ref` ran. The primary remote must be able to resolve the source DRS URI for future hydration, but `add-ref` should be treated as creating a local reference to an existing DRS record, not as copying or registering that record into a new project scope. |
+
+If the input DRS URI points at another DRS authority or resolver, the primary remote's durable state after `add-ref` is still unchanged unless the server itself implements and is asked to persist a proxy/copy record. The committed reference remains valid because the pointer/local metadata preserve the source DRS URI.
+
+### After `git drs add-url <object-url-or-key> [path]`
+
+Expected state immediately after `add-url` succeeds:
+
+| Location | Expected state |
+|---|---|
+| Git/worktree | A Git LFS-shaped pointer file exists at `[path]`. With `--sha256`, its OID is the real content SHA256. Without `--sha256`, its OID is a deterministic SHA256-shaped placeholder/local OID derived from inspected provider metadata. |
+| Local git-drs metadata | A local DRS object is written with the resolved provider URL as an access method. When `--sha256` is provided, the local DRS object includes a `sha256` checksum. When SHA256 is unknown, the placeholder/local OID is **not** written as a checksum. |
+| Local payload cache | No payload upload or download is required. The object bytes are expected to already exist at the provider URL inspected by the remote. |
+| Primary remote DRS server | No DRS record is required immediately. On a later `git drs push`, git-drs can bulk-register metadata for the pointer into the primary remote scope. For known-SHA objects, the remote record should include the real SHA256 and size. For unknown-SHA objects, the remote record must preserve the provider access URL and size, and must not claim that the placeholder/local OID is a real content checksum. |
+
+A primary remote may already know about the provider object because of its bucket credential/scope configuration. That inspection ability is not the same thing as a durable DRS record for the repository object; durable registration is a push-time concern.
+
+### After a DRS URI is downloaded and a real SHA256 is calculated
+
+Downloading through a DRS URI has two separate effects:
+
+1. It hydrates local state by resolving the stable DRS URI to a temporary access URL and writing payload bytes into the local cache/worktree.
+2. It may reveal the real content SHA256 if the downloaded bytes are hashed locally.
+
+Expected state after the real SHA256 is known:
+
+| Location | Expected state |
+|---|---|
+| Git/worktree | Existing committed pointer identity should not silently change during download. A DRS URI pointer remains a DRS URI pointer until the user/tool intentionally rewrites and commits it as a content-SHA pointer. |
+| Local payload cache | The downloaded bytes exist in the local cache. If a previous cache key was derived from a DRS URI or placeholder, that key remains a local retrieval/cache key, not proof of content identity. Implementations may also add an alias/cache entry keyed by the real SHA256, but should avoid losing the source DRS URI mapping. |
+| Local git-drs metadata | The real SHA256 can be added as checksum metadata alongside the preserved DRS URI/provider source identity. The DRS URI/provider URL remains the durable retrieval contract unless and until a remote record with the real checksum is registered. |
+| Primary remote DRS server | Merely downloading and hashing bytes locally should not mutate the primary remote. If the repository later pushes an updated metadata record, the primary remote should have a scoped DRS record whose `sha256` is the real content checksum, whose `size` matches the downloaded payload, and whose access methods still resolve to the original DRS/provider source or to a managed copied object. The remote should not retain a placeholder/local OID as a checksum once the real SHA256 is known. |
+
+When a placeholder or DRS-derived local OID is replaced in metadata by a real SHA256, treat it as a metadata refinement, not as evidence that the original source identity was wrong. The safe final server state is: **real content SHA256 for checksum-based lookup, stable DRS URI/provider access metadata for retrieval, and no placeholder/local OID advertised as a content checksum.**
+
 ## Practical review guidance
 
 When reviewing pointer changes:

From 10d7c2c31b20ada3feb3b6c02dddfdfb5e368ffa Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 14 Jul 2026 12:26:19 -0700
Subject: [PATCH 09/66] typo

---
 docs/pointer-files.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/pointer-files.md b/docs/pointer-files.md
index 00c77076..099eb48b 100644
--- a/docs/pointer-files.md
+++ b/docs/pointer-files.md
@@ -179,7 +179,7 @@ sequenceDiagram
         end
         opt User pushes refined metadata
             User->>Remote: git drs push / register refined checksum metadata
-            Remote->>Remote: Store real sha256 as checksum; keep DRS/provider retrieval identity
+            Remote->>Remote: Store real sha256 as checksum, keep DRS/provider retrieval identity
             Remote->>Remote: Ensure placeholder or derived local OID is not advertised as checksum
         end
     end

From 23c9b9613af0abc38fcb2b84b63641fb329dc030 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 15 Jul 2026 12:17:06 -0700
Subject: [PATCH 10/66] add-ref contacts the configured source authority

---
 cmd/addref/add-ref.go      | 88 +++++++++++++++++++++++++++++++++++++-
 cmd/addref/add-ref_test.go | 57 ++++++++++++++++++++++++
 docs/pointer-files.md      | 31 ++++++++------
 3 files changed, 162 insertions(+), 14 deletions(-)

diff --git a/cmd/addref/add-ref.go b/cmd/addref/add-ref.go
index 0e1a7ad0..5fb0eecb 100644
--- a/cmd/addref/add-ref.go
+++ b/cmd/addref/add-ref.go
@@ -5,8 +5,10 @@ import (
 	"crypto/sha256"
 	"encoding/hex"
 	"fmt"
+	"net/url"
 	"os"
 	"path/filepath"
+	"strings"
 
 	"github.com/calypr/git-drs/internal/config"
 	"github.com/calypr/git-drs/internal/drslog"
@@ -15,6 +17,7 @@ import (
 	"github.com/calypr/git-drs/internal/lfs"
 	"github.com/calypr/git-drs/internal/remoteruntime"
 	drsapi "github.com/calypr/syfon/apigen/client/drs"
+	syclient "github.com/calypr/syfon/client"
 	"github.com/calypr/syfon/client/hash"
 	"github.com/spf13/cobra"
 )
@@ -50,7 +53,7 @@ var Cmd = &cobra.Command{
 			return err
 		}
 
-		obj, err := client.Client.DRS().GetObject(context.Background(), drsUri)
+		obj, err := resolveAddRefObject(context.Background(), cfg, remoteName, client, drsUri)
 		if err != nil {
 			return err
 		}
@@ -101,3 +104,86 @@ func derivedSourceOID(sourceURI, remoteName string) string {
 	sum := sha256.Sum256([]byte("git-drs-source-ref:v1\nsource_uri=" + sourceURI + "\nremote=" + remoteName + "\n"))
 	return hex.EncodeToString(sum[:])
 }
+
+type drsObjectGetter interface {
+	GetObject(context.Context, string) (drsapi.DrsObject, error)
+}
+
+func resolveAddRefObject(ctx context.Context, cfg *config.Config, primaryRemote config.Remote, primary *remoteruntime.GitContext, drsURI string) (drsapi.DrsObject, error) {
+	objectID, sourceRemote, ok := sourceRemoteForDRSURI(cfg, primaryRemote, drsURI)
+	if !ok {
+		return primary.Client.DRS().GetObject(ctx, drsURI)
+	}
+	if sourceRemote == primaryRemote {
+		if sourceEndpoint, sourceOK := sourceEndpointForDRSURI(drsURI); sourceOK && !endpointMatchesDRSURI(primary.Endpoint, drsURI) {
+			getter, err := newAnonymousSourceDRSGetter(sourceEndpoint)
+			if err != nil {
+				return drsapi.DrsObject{}, err
+			}
+			return getter.GetObject(ctx, objectID)
+		}
+		return primary.Client.DRS().GetObject(ctx, objectID)
+	}
+	client, err := remoteruntime.New(cfg, sourceRemote, primary.Logger)
+	if err != nil {
+		return drsapi.DrsObject{}, err
+	}
+	return client.Client.DRS().GetObject(ctx, objectID)
+}
+
+func sourceRemoteForDRSURI(cfg *config.Config, primaryRemote config.Remote, drsURI string) (objectID string, remoteName config.Remote, ok bool) {
+	u, err := url.Parse(strings.TrimSpace(drsURI))
+	if err != nil || !strings.EqualFold(u.Scheme, "drs") || strings.TrimSpace(u.Host) == "" {
+		return drsURI, primaryRemote, false
+	}
+	objectID = strings.TrimPrefix(u.EscapedPath(), "/")
+	if objectID == "" {
+		return drsURI, primaryRemote, false
+	}
+	for name, selected := range cfg.Remotes {
+		remote := config.Config{Remotes: map[config.Remote]config.RemoteSelect{name: selected}}.GetRemote(name)
+		if remote == nil {
+			continue
+		}
+		endpoint, err := url.Parse(remote.GetEndpoint())
+		if err != nil {
+			continue
+		}
+		if strings.EqualFold(endpoint.Host, u.Host) {
+			return objectID, name, true
+		}
+	}
+	return objectID, primaryRemote, true
+}
+
+func sourceEndpointForDRSURI(drsURI string) (string, bool) {
+	u, err := url.Parse(strings.TrimSpace(drsURI))
+	if err != nil || !strings.EqualFold(u.Scheme, "drs") || strings.TrimSpace(u.Host) == "" {
+		return "", false
+	}
+	return "https://" + u.Host, true
+}
+
+func endpointMatchesDRSURI(endpoint string, drsURI string) bool {
+	u, err := url.Parse(strings.TrimSpace(drsURI))
+	if err != nil || !strings.EqualFold(u.Scheme, "drs") || strings.TrimSpace(u.Host) == "" {
+		return false
+	}
+	endpointURL, err := url.Parse(strings.TrimSpace(endpoint))
+	if err != nil {
+		return false
+	}
+	return strings.EqualFold(endpointURL.Host, u.Host)
+}
+
+func newAnonymousSourceDRSGetter(endpoint string) (drsObjectGetter, error) {
+	raw, err := syclient.New(endpoint)
+	if err != nil {
+		return nil, err
+	}
+	client, ok := raw.(*syclient.Client)
+	if !ok {
+		return nil, fmt.Errorf("unexpected syfon client type %T", raw)
+	}
+	return client.DRS(), nil
+}
diff --git a/cmd/addref/add-ref_test.go b/cmd/addref/add-ref_test.go
index 4879e43b..94a684b6 100644
--- a/cmd/addref/add-ref_test.go
+++ b/cmd/addref/add-ref_test.go
@@ -1,11 +1,18 @@
 package addref
 
 import (
+	"context"
+	"net/http"
+	"net/http/httptest"
 	"os"
 	"path/filepath"
+	"strings"
 	"testing"
 
+	"github.com/calypr/git-drs/internal/config"
+	"github.com/calypr/git-drs/internal/drslog"
 	"github.com/calypr/git-drs/internal/lfs"
+	"github.com/calypr/git-drs/internal/remoteruntime"
 	drsapi "github.com/calypr/syfon/apigen/client/drs"
 )
 
@@ -67,3 +74,53 @@ func TestCreateDRSPointerPreservesSourceURI(t *testing.T) {
 		t.Fatalf("pointer mismatch: expected %q, got %q", expected, string(data))
 	}
 }
+
+func TestResolveAddRefObjectUsesSourceAuthorityRemoteCredentials(t *testing.T) {
+	var primaryRequests int
+	primary := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		primaryRequests++
+		http.Error(w, "primary remote must not resolve source DRS URI", http.StatusTeapot)
+	}))
+	defer primary.Close()
+
+	var sourceRequests int
+	source := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		sourceRequests++
+		if r.URL.Path != "/ga4gh/drs/v1/objects/object-1" {
+			t.Fatalf("unexpected source path: %s", r.URL.Path)
+		}
+		user, pass, ok := r.BasicAuth()
+		if !ok || user != "source-user" || pass != "source-pass" {
+			t.Fatalf("expected source basic auth credentials, got ok=%v user=%q pass=%q", ok, user, pass)
+		}
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = w.Write([]byte(`{"id":"object-1","self_uri":"drs://` + r.Host + `/object-1","size":42}`))
+	}))
+	defer source.Close()
+
+	cfg := &config.Config{
+		DefaultRemote: "primary",
+		Remotes: map[config.Remote]config.RemoteSelect{
+			"primary": {Local: &config.LocalRemote{BaseURL: primary.URL}},
+			"source":  {Local: &config.LocalRemote{BaseURL: source.URL, BasicUsername: "source-user", BasicPassword: "source-pass"}},
+		},
+	}
+	primaryCtx, err := remoteruntime.New(cfg, "primary", drslog.NewNoOpLogger())
+	if err != nil {
+		t.Fatalf("create primary runtime: %v", err)
+	}
+
+	obj, err := resolveAddRefObject(context.Background(), cfg, "primary", primaryCtx, "drs://"+strings.TrimPrefix(source.URL, "http://")+"/object-1")
+	if err != nil {
+		t.Fatalf("resolveAddRefObject: %v", err)
+	}
+	if obj.Id != "object-1" || obj.Size != 42 {
+		t.Fatalf("unexpected object: %+v", obj)
+	}
+	if sourceRequests != 1 {
+		t.Fatalf("expected one source request, got %d", sourceRequests)
+	}
+	if primaryRequests != 0 {
+		t.Fatalf("expected primary not to be contacted, got %d requests", primaryRequests)
+	}
+}
diff --git a/docs/pointer-files.md b/docs/pointer-files.md
index 099eb48b..c6b2c2f5 100644
--- a/docs/pointer-files.md
+++ b/docs/pointer-files.md
@@ -48,7 +48,7 @@ A DRS/provider access URL is usually not stable source identity. It is a tempora
 
 `add-ref` creates a reference to an existing DRS object without downloading payload bytes solely to compute a checksum.
 
-1. The command resolves the input DRS URI through the selected remote/resolver.
+1. The client resolves the input DRS URI against the source authority/resolver named by the `drs://...` URI, using credentials appropriate for that source. A primary remote is only used for this metadata fetch when it is explicitly configured as the source resolver/proxy.
 2. If the DRS object reports a real SHA256, `git-drs` writes a SHA256 pointer whose OID is that content checksum.
 3. If the DRS object does not report a real SHA256, `git-drs` writes a DRS URI pointer whose OID preserves the original `drs://...` source reference.
 4. The fetched DRS metadata is stored locally under a deterministic local/cache OID.
@@ -121,15 +121,21 @@ sequenceDiagram
     actor User
     participant Git as Git worktree/index
     participant Local as Local git-drs metadata/cache
+    participant Source as Source DRS authority/resolver
     participant Remote as Primary remote DRS server
-    participant Source as Source DRS/provider object
+    participant Provider as Provider object
 
     rect rgb(238, 248, 255)
         note over User,Source: add-ref: reference an existing DRS URI
-        User->>Remote: git drs add-ref drs://source/object data/file
-        Remote->>Source: Resolve DRS URI / fetch DRS object metadata
-        Source-->>Remote: DRS object metadata, size, access methods, optional sha256
-        Remote-->>User: Resolved DRS object metadata
+        User->>Source: git drs add-ref drs://source/object data/file
+        Source-->>User: DRS object metadata, size, access methods, optional sha256
+        note over User,Source: Client resolves drs://source/object against the source authority/resolver using source credentials.
+        opt Primary remote is explicitly configured as source resolver/proxy
+            User->>Remote: Resolve drs://source/object through configured proxy
+            Remote->>Source: Fetch DRS object metadata using configured/delegated source credentials
+            Source-->>Remote: DRS object metadata
+            Remote-->>User: Resolved DRS object metadata
+        end
         alt Resolved object includes real sha256
             User->>Git: Write pointer oid sha256:<real-content-sha256>
             User->>Local: Store DRS metadata keyed by real sha256
@@ -141,10 +147,10 @@ sequenceDiagram
     end
 
     rect rgb(248, 255, 238)
-        note over User,Source: add-url: reference an existing provider object
+        note over User,Provider: add-url: reference an existing provider object
         User->>Remote: git drs add-url s3://bucket/key data/file [--sha256]
-        Remote->>Source: Inspect provider object using remote bucket credentials/scope
-        Source-->>Remote: Provider URL, size, ETag/metadata, optional trusted sha256
+        Remote->>Provider: Inspect provider object using remote bucket credentials/scope
+        Provider-->>Remote: Provider URL, size, ETag/metadata, optional trusted sha256
         Remote-->>User: Inspected object metadata
         alt Real sha256 supplied or trusted
             User->>Git: Write pointer oid sha256:<real-content-sha256>
@@ -169,9 +175,8 @@ sequenceDiagram
 
     rect rgb(255, 238, 248)
         note over User,Source: Later hydration discovers real content sha256
-        User->>Remote: git drs pull resolves DRS URI or source metadata
-        Remote->>Source: Request temporary access URL / download bytes
-        Source-->>Local: Store downloaded payload bytes in cache/worktree
+        User->>Source: git drs pull resolves DRS URI or source metadata
+        Source-->>Local: Temporary access URL / downloaded payload bytes in cache/worktree
         Local->>Local: Calculate real sha256 over downloaded bytes
         Local->>Local: Store/refine local checksum metadata sha256=<real-content-sha256>
         opt User intentionally rewrites pointer metadata
@@ -194,7 +199,7 @@ Expected state immediately after `add-ref` succeeds:
 | Git/worktree | A pointer file exists at `<path>`. If the resolved DRS object has a real SHA256 checksum, the pointer uses `oid sha256:<content-sha256>`; otherwise it uses a git-drs DRS URI pointer that preserves the input DRS URI. |
 | Local git-drs metadata | The resolved DRS object returned by the selected remote/resolver is stored locally under the local OID used for the pointer/cache lookup. If the DRS object omitted `self_uri`, the input DRS URI is retained as `self_uri`. |
 | Local payload cache | No payload download is required just to create the reference. The cache may still be empty for this object. |
-| Primary remote DRS server | No new record is required merely because `add-ref` ran. The primary remote must be able to resolve the source DRS URI for future hydration, but `add-ref` should be treated as creating a local reference to an existing DRS record, not as copying or registering that record into a new project scope. |
+| Primary remote DRS server | No new record is required merely because `add-ref` ran. The client should resolve the source DRS URI through the source authority/resolver using source credentials for future hydration. The primary remote only needs to resolve that URI when it is explicitly configured as the source resolver/proxy; otherwise, `add-ref` should be treated as creating a local reference to an existing DRS record, not as copying or registering that record into a new project scope. |
 
 If the input DRS URI points at another DRS authority or resolver, the primary remote's durable state after `add-ref` is still unchanged unless the server itself implements and is asked to persist a proxy/copy record. The committed reference remains valid because the pointer/local metadata preserve the source DRS URI.
 

From b535e9d58bd3534189c49398b9e9be6ad83ebedd Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 15 Jul 2026 12:49:16 -0700
Subject: [PATCH 11/66] Document multi-remote add-ref resolution

---
 cmd/addref/add-ref.go      |  60 +++++++++------------
 cmd/addref/add-ref_test.go | 106 +++++++++++++++++++++++++++++++++++++
 docs/commands.md           |   8 +++
 docs/pointer-files.md      |  12 ++---
 4 files changed, 142 insertions(+), 44 deletions(-)

diff --git a/cmd/addref/add-ref.go b/cmd/addref/add-ref.go
index 5fb0eecb..0a1e0a40 100644
--- a/cmd/addref/add-ref.go
+++ b/cmd/addref/add-ref.go
@@ -110,35 +110,43 @@ type drsObjectGetter interface {
 }
 
 func resolveAddRefObject(ctx context.Context, cfg *config.Config, primaryRemote config.Remote, primary *remoteruntime.GitContext, drsURI string) (drsapi.DrsObject, error) {
-	objectID, sourceRemote, ok := sourceRemoteForDRSURI(cfg, primaryRemote, drsURI)
+	objectID, sourceEndpoint, ok := parseDRSURIForSource(drsURI)
 	if !ok {
 		return primary.Client.DRS().GetObject(ctx, drsURI)
 	}
-	if sourceRemote == primaryRemote {
-		if sourceEndpoint, sourceOK := sourceEndpointForDRSURI(drsURI); sourceOK && !endpointMatchesDRSURI(primary.Endpoint, drsURI) {
-			getter, err := newAnonymousSourceDRSGetter(sourceEndpoint)
-			if err != nil {
-				return drsapi.DrsObject{}, err
-			}
-			return getter.GetObject(ctx, objectID)
+	if sourceRemote, found := configuredRemoteForDRSURIHost(cfg, drsURI); found {
+		if sourceRemote == primaryRemote {
+			return primary.Client.DRS().GetObject(ctx, objectID)
+		}
+		client, err := remoteruntime.New(cfg, sourceRemote, primary.Logger)
+		if err != nil {
+			return drsapi.DrsObject{}, err
 		}
-		return primary.Client.DRS().GetObject(ctx, objectID)
+		return client.Client.DRS().GetObject(ctx, objectID)
 	}
-	client, err := remoteruntime.New(cfg, sourceRemote, primary.Logger)
+	getter, err := newSourceDRSGetter(sourceEndpoint)
 	if err != nil {
 		return drsapi.DrsObject{}, err
 	}
-	return client.Client.DRS().GetObject(ctx, objectID)
+	return getter.GetObject(ctx, objectID)
 }
 
-func sourceRemoteForDRSURI(cfg *config.Config, primaryRemote config.Remote, drsURI string) (objectID string, remoteName config.Remote, ok bool) {
+func parseDRSURIForSource(drsURI string) (objectID string, endpoint string, ok bool) {
 	u, err := url.Parse(strings.TrimSpace(drsURI))
 	if err != nil || !strings.EqualFold(u.Scheme, "drs") || strings.TrimSpace(u.Host) == "" {
-		return drsURI, primaryRemote, false
+		return "", "", false
 	}
 	objectID = strings.TrimPrefix(u.EscapedPath(), "/")
 	if objectID == "" {
-		return drsURI, primaryRemote, false
+		return "", "", false
+	}
+	return objectID, "https://" + u.Host, true
+}
+
+func configuredRemoteForDRSURIHost(cfg *config.Config, drsURI string) (config.Remote, bool) {
+	u, err := url.Parse(strings.TrimSpace(drsURI))
+	if err != nil || !strings.EqualFold(u.Scheme, "drs") || strings.TrimSpace(u.Host) == "" {
+		return "", false
 	}
 	for name, selected := range cfg.Remotes {
 		remote := config.Config{Remotes: map[config.Remote]config.RemoteSelect{name: selected}}.GetRemote(name)
@@ -150,31 +158,13 @@ func sourceRemoteForDRSURI(cfg *config.Config, primaryRemote config.Remote, drsU
 			continue
 		}
 		if strings.EqualFold(endpoint.Host, u.Host) {
-			return objectID, name, true
+			return name, true
 		}
 	}
-	return objectID, primaryRemote, true
+	return "", false
 }
 
-func sourceEndpointForDRSURI(drsURI string) (string, bool) {
-	u, err := url.Parse(strings.TrimSpace(drsURI))
-	if err != nil || !strings.EqualFold(u.Scheme, "drs") || strings.TrimSpace(u.Host) == "" {
-		return "", false
-	}
-	return "https://" + u.Host, true
-}
-
-func endpointMatchesDRSURI(endpoint string, drsURI string) bool {
-	u, err := url.Parse(strings.TrimSpace(drsURI))
-	if err != nil || !strings.EqualFold(u.Scheme, "drs") || strings.TrimSpace(u.Host) == "" {
-		return false
-	}
-	endpointURL, err := url.Parse(strings.TrimSpace(endpoint))
-	if err != nil {
-		return false
-	}
-	return strings.EqualFold(endpointURL.Host, u.Host)
-}
+var newSourceDRSGetter = newAnonymousSourceDRSGetter
 
 func newAnonymousSourceDRSGetter(endpoint string) (drsObjectGetter, error) {
 	raw, err := syclient.New(endpoint)
diff --git a/cmd/addref/add-ref_test.go b/cmd/addref/add-ref_test.go
index 94a684b6..6f7cf772 100644
--- a/cmd/addref/add-ref_test.go
+++ b/cmd/addref/add-ref_test.go
@@ -124,3 +124,109 @@ func TestResolveAddRefObjectUsesSourceAuthorityRemoteCredentials(t *testing.T) {
 		t.Fatalf("expected primary not to be contacted, got %d requests", primaryRequests)
 	}
 }
+
+func TestResolveAddRefObjectIgnoresPrimaryEvenWhenPrimaryCanResolve(t *testing.T) {
+	var primaryRequests int
+	primary := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		primaryRequests++
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = w.Write([]byte(`{"id":"primary-object","self_uri":"drs://primary/object-1","size":99}`))
+	}))
+	defer primary.Close()
+
+	var sourceRequests int
+	source := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		sourceRequests++
+		if r.URL.Path != "/ga4gh/drs/v1/objects/object-1" {
+			t.Fatalf("unexpected source path: %s", r.URL.Path)
+		}
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = w.Write([]byte(`{"id":"source-object","self_uri":"drs://` + r.Host + `/object-1","size":42}`))
+	}))
+	defer source.Close()
+
+	cfg := &config.Config{
+		DefaultRemote: "primary",
+		Remotes: map[config.Remote]config.RemoteSelect{
+			"primary": {Local: &config.LocalRemote{BaseURL: primary.URL}},
+			"source":  {Local: &config.LocalRemote{BaseURL: source.URL}},
+		},
+	}
+	primaryCtx, err := remoteruntime.New(cfg, "primary", drslog.NewNoOpLogger())
+	if err != nil {
+		t.Fatalf("create primary runtime: %v", err)
+	}
+
+	obj, err := resolveAddRefObject(context.Background(), cfg, "primary", primaryCtx, "drs://"+strings.TrimPrefix(source.URL, "http://")+"/object-1")
+	if err != nil {
+		t.Fatalf("resolveAddRefObject: %v", err)
+	}
+	if obj.Id != "source-object" || obj.Size != 42 {
+		t.Fatalf("expected object from source DRS authority/resolver, got %+v", obj)
+	}
+	if sourceRequests != 1 {
+		t.Fatalf("expected one source request, got %d", sourceRequests)
+	}
+	if primaryRequests != 0 {
+		t.Fatalf("expected primary not to be contacted, got %d requests", primaryRequests)
+	}
+}
+
+type fakeDRSObjectGetter struct {
+	gotObjectID *string
+	obj         drsapi.DrsObject
+}
+
+func (g fakeDRSObjectGetter) GetObject(_ context.Context, objectID string) (drsapi.DrsObject, error) {
+	*g.gotObjectID = objectID
+	return g.obj, nil
+}
+
+func TestResolveAddRefObjectUsesSourceAuthorityWhenNoRemoteMatches(t *testing.T) {
+	var primaryRequests int
+	primary := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		primaryRequests++
+		http.Error(w, "primary remote must not resolve source DRS URI", http.StatusTeapot)
+	}))
+	defer primary.Close()
+
+	cfg := &config.Config{
+		DefaultRemote: "primary",
+		Remotes: map[config.Remote]config.RemoteSelect{
+			"primary": {Local: &config.LocalRemote{BaseURL: primary.URL}},
+		},
+	}
+	primaryCtx, err := remoteruntime.New(cfg, "primary", drslog.NewNoOpLogger())
+	if err != nil {
+		t.Fatalf("create primary runtime: %v", err)
+	}
+
+	var gotEndpoint string
+	var gotObjectID string
+	oldGetter := newSourceDRSGetter
+	newSourceDRSGetter = func(endpoint string) (drsObjectGetter, error) {
+		gotEndpoint = endpoint
+		return fakeDRSObjectGetter{
+			gotObjectID: &gotObjectID,
+			obj:         drsapi.DrsObject{Id: "source-object", Size: 42},
+		}, nil
+	}
+	defer func() { newSourceDRSGetter = oldGetter }()
+
+	obj, err := resolveAddRefObject(context.Background(), cfg, "primary", primaryCtx, "drs://source.example.org/object-1")
+	if err != nil {
+		t.Fatalf("resolveAddRefObject: %v", err)
+	}
+	if obj.Id != "source-object" || obj.Size != 42 {
+		t.Fatalf("expected object from source DRS authority/resolver, got %+v", obj)
+	}
+	if gotEndpoint != "https://source.example.org" {
+		t.Fatalf("expected source endpoint, got %q", gotEndpoint)
+	}
+	if gotObjectID != "object-1" {
+		t.Fatalf("expected source object ID, got %q", gotObjectID)
+	}
+	if primaryRequests != 0 {
+		t.Fatalf("expected primary not to be contacted, got %d requests", primaryRequests)
+	}
+}
diff --git a/docs/commands.md b/docs/commands.md
index 3ab73799..6b68646c 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -147,6 +147,14 @@ Set the default `git-drs` remote.
 git drs remote set production
 ```
 
+### Remote roles: primary and source authorities
+
+A repository can have multiple `git-drs` remotes. The configured default remote, `drs.default-remote`, or an explicit command-level remote is the **primary remote** for repository-scoped operations such as push, registration, checksum lookup, and provider inspection.
+
+A **source DRS authority/resolver** is the DRS service named by a `drs://...` URI or by source metadata recorded for a reference-first object. For `git drs add-ref`, the client resolves the input `drs://...` URI against that source authority/resolver using source credentials. The primary remote does not act as a proxy for other source DRS servers.
+
+When the source authority is also configured as one of the repository remotes, `git-drs` can use that remote's endpoint and credentials for the source request. When the source authority is not configured as a named remote, the source URI itself remains the retrieval identity; adding the reference still does not create or mutate a primary-remote DRS record.
+
 ## Tracking and Local Inventory
 
 ### `git drs track <pattern>`
diff --git a/docs/pointer-files.md b/docs/pointer-files.md
index c6b2c2f5..43e8d0bd 100644
--- a/docs/pointer-files.md
+++ b/docs/pointer-files.md
@@ -48,7 +48,7 @@ A DRS/provider access URL is usually not stable source identity. It is a tempora
 
 `add-ref` creates a reference to an existing DRS object without downloading payload bytes solely to compute a checksum.
 
-1. The client resolves the input DRS URI against the source authority/resolver named by the `drs://...` URI, using credentials appropriate for that source. A primary remote is only used for this metadata fetch when it is explicitly configured as the source resolver/proxy.
+1. The client resolves the input DRS URI against the source authority/resolver named by the `drs://...` URI, using credentials appropriate for that source.
 2. If the DRS object reports a real SHA256, `git-drs` writes a SHA256 pointer whose OID is that content checksum.
 3. If the DRS object does not report a real SHA256, `git-drs` writes a DRS URI pointer whose OID preserves the original `drs://...` source reference.
 4. The fetched DRS metadata is stored locally under a deterministic local/cache OID.
@@ -130,12 +130,6 @@ sequenceDiagram
         User->>Source: git drs add-ref drs://source/object data/file
         Source-->>User: DRS object metadata, size, access methods, optional sha256
         note over User,Source: Client resolves drs://source/object against the source authority/resolver using source credentials.
-        opt Primary remote is explicitly configured as source resolver/proxy
-            User->>Remote: Resolve drs://source/object through configured proxy
-            Remote->>Source: Fetch DRS object metadata using configured/delegated source credentials
-            Source-->>Remote: DRS object metadata
-            Remote-->>User: Resolved DRS object metadata
-        end
         alt Resolved object includes real sha256
             User->>Git: Write pointer oid sha256:<real-content-sha256>
             User->>Local: Store DRS metadata keyed by real sha256
@@ -199,9 +193,9 @@ Expected state immediately after `add-ref` succeeds:
 | Git/worktree | A pointer file exists at `<path>`. If the resolved DRS object has a real SHA256 checksum, the pointer uses `oid sha256:<content-sha256>`; otherwise it uses a git-drs DRS URI pointer that preserves the input DRS URI. |
 | Local git-drs metadata | The resolved DRS object returned by the selected remote/resolver is stored locally under the local OID used for the pointer/cache lookup. If the DRS object omitted `self_uri`, the input DRS URI is retained as `self_uri`. |
 | Local payload cache | No payload download is required just to create the reference. The cache may still be empty for this object. |
-| Primary remote DRS server | No new record is required merely because `add-ref` ran. The client should resolve the source DRS URI through the source authority/resolver using source credentials for future hydration. The primary remote only needs to resolve that URI when it is explicitly configured as the source resolver/proxy; otherwise, `add-ref` should be treated as creating a local reference to an existing DRS record, not as copying or registering that record into a new project scope. |
+| Primary remote DRS server | No new record is required merely because `add-ref` ran. The client should resolve the source DRS URI through the source authority/resolver using source credentials for future hydration. `add-ref` should be treated as creating a local reference to an existing DRS record, not as copying or registering that record into a new project scope. |
 
-If the input DRS URI points at another DRS authority or resolver, the primary remote's durable state after `add-ref` is still unchanged unless the server itself implements and is asked to persist a proxy/copy record. The committed reference remains valid because the pointer/local metadata preserve the source DRS URI.
+If the input DRS URI points at another DRS authority or resolver, the primary remote's durable state after `add-ref` is still unchanged. The committed reference remains valid because the pointer/local metadata preserve the source DRS URI and hydration uses that source identity directly.
 
 ### After `git drs add-url <object-url-or-key> [path]`
 

From e6bf3e9c9b790df67b49152e81df6ddaf1ce12e7 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 15 Jul 2026 13:10:47 -0700
Subject: [PATCH 12/66] documents Terra creds

---
 docs/commands.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docs/commands.md b/docs/commands.md
index 6b68646c..e2cba9fe 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -103,6 +103,14 @@ git config drs.remote.anvil.mode read-only
 git drs ping anvil
 ```
 
+Terra credential configuration:
+
+- `drs.remote.<name>.auth` records the credential source that the Terra resolver should use. The currently documented mode is `google-adc`, which means Application Default Credentials from the local Google Cloud environment.
+- Do not store Google access tokens, refresh tokens, service-account JSON, or other secrets in repo-local `git config`. The Terra remote stores only the endpoint, credential-source name, and mode.
+- Configure ADC outside `git-drs`, for example with `gcloud auth application-default login` for an interactive user credential or by setting `GOOGLE_APPLICATION_CREDENTIALS` to a service-account key path in automation.
+- At runtime, `git-drs` loads the Terra remote from `drs.remote.<name>.*`, records the Terra endpoint in the remote context, and Terra-aware resolution/download code should obtain Google credentials from the configured source and attach them to outbound Terra/DRSHub/DRS requests as bearer tokens. The credential material is therefore passed through the process environment or ADC provider chain, not through committed repository files.
+- `git drs ping` validates the Terra DRS service-info endpoint and prints `auth: none` today because service-info is checked without creating a Syfon bearer/basic credential. Future Terra resolver operations should still honor `drs.remote.<name>.auth` when making authenticated object-resolution or access-url requests.
+
 A successful Terra ping includes:
 
 ```text

From 5fd8c6f57898012445039b1c6153da8d9df8f301 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 15 Jul 2026 13:26:39 -0700
Subject: [PATCH 13/66] adds loadGitConfigOverrides

---
 internal/config/config.go | 63 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 63 insertions(+)

diff --git a/internal/config/config.go b/internal/config/config.go
index 7c9dfe22..1589308f 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -3,6 +3,7 @@ package config
 import (
 	"errors"
 	"fmt"
+	"os/exec"
 	"path/filepath"
 	"sort"
 	"strings"
@@ -209,6 +210,64 @@ func parseAndAddRemote(cfg *Config, subsectionName string, remoteType string, en
 	cfg.Remotes[remoteName] = rs
 }
 
+func loadGitConfigOverrides(cfg *Config) error {
+	cmd := exec.Command("git", "config", "--get-regexp", `^drs\.`)
+	out, err := cmd.Output()
+	if err != nil {
+		// git config exits non-zero when no matching keys exist. In that case,
+		// the go-git result above is still the complete repository-local config.
+		return nil
+	}
+
+	remoteOptions := make(map[Remote]map[string]string)
+	for _, line := range strings.Split(strings.TrimSpace(string(out)), "\n") {
+		line = strings.TrimSpace(line)
+		if line == "" {
+			continue
+		}
+		key, value, ok := strings.Cut(line, " ")
+		if !ok {
+			continue
+		}
+		value = strings.TrimSpace(value)
+		if key == "drs.default-remote" {
+			cfg.DefaultRemote = Remote(value)
+			continue
+		}
+		const prefix = "drs.remote."
+		if !strings.HasPrefix(key, prefix) {
+			continue
+		}
+		rest := strings.TrimPrefix(key, prefix)
+		idx := strings.LastIndex(rest, ".")
+		if idx <= 0 || idx == len(rest)-1 {
+			continue
+		}
+		name := Remote(rest[:idx])
+		option := rest[idx+1:]
+		if remoteOptions[name] == nil {
+			remoteOptions[name] = make(map[string]string)
+		}
+		remoteOptions[name][option] = value
+	}
+
+	for name, opts := range remoteOptions {
+		parseAndAddRemote(
+			cfg,
+			remoteSubsectionPrefix+string(name),
+			opts["type"],
+			opts["endpoint"],
+			opts["project"],
+			opts["bucket"],
+			opts["organization"],
+			opts["storage_prefix"],
+			opts["auth"],
+			opts["mode"],
+		)
+	}
+	return nil
+}
+
 // LoadConfig loads configuration using go-git
 func LoadConfig() (*Config, error) {
 	repo, err := getRepo()
@@ -256,6 +315,10 @@ func LoadConfig() (*Config, error) {
 		}
 	}
 
+	if err := loadGitConfigOverrides(cfg); err != nil {
+		return nil, err
+	}
+
 	return cfg, nil
 }
 

From b1478d8419c315bc208fdf3daf644a5b7c3b7f6e Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 15 Jul 2026 13:37:32 -0700
Subject: [PATCH 14/66] adds service-info to ping

---
 cmd/ping/main.go                   | 34 ++++++++++++------
 cmd/ping/main_test.go              | 55 ++++++++++++++++++++++++++++--
 cmd/ping/terra_integration_test.go |  2 +-
 3 files changed, 77 insertions(+), 14 deletions(-)

diff --git a/cmd/ping/main.go b/cmd/ping/main.go
index 62a3cb9d..72625975 100644
--- a/cmd/ping/main.go
+++ b/cmd/ping/main.go
@@ -3,6 +3,7 @@ package ping
 import (
 	"context"
 	"fmt"
+	"io"
 	"log/slog"
 	"net/http"
 	"net/url"
@@ -29,11 +30,16 @@ type statusInfo struct {
 	AuthMode      string
 }
 
-var pingHealth = func(ctx context.Context, gc *remoteruntime.GitContext) error {
+type healthInfo struct {
+	ServiceInfo string
+}
+
+var pingHealth = func(ctx context.Context, gc *remoteruntime.GitContext) (healthInfo, error) {
 	if gc != nil && gc.RemoteType == config.TerraServerType {
-		return pingTerraServiceInfo(ctx, gc.Endpoint)
+		serviceInfo, err := pingTerraServiceInfo(ctx, gc.Endpoint)
+		return healthInfo{ServiceInfo: serviceInfo}, err
 	}
-	return gc.Client.Health().Ping(ctx)
+	return healthInfo{}, gc.Client.Health().Ping(ctx)
 }
 
 var pingScopeAccess = func(ctx context.Context, gc *remoteruntime.GitContext) (scopeAccessInfo, error) {
@@ -64,10 +70,14 @@ var Cmd = &cobra.Command{
 		}
 		printStatus(status)
 
-		if err := pingHealth(cmd.Context(), gc); err != nil {
+		health, err := pingHealth(cmd.Context(), gc)
+		if err != nil {
 			return fmt.Errorf("remote health check failed for %q (%s): %w", status.Remote, status.Endpoint, err)
 		}
 		fmt.Println("health: ok")
+		if strings.TrimSpace(health.ServiceInfo) != "" {
+			fmt.Printf("service-info: %s\n", health.ServiceInfo)
+		}
 
 		scopeInfo, err := pingScopeAccess(cmd.Context(), gc)
 		if err != nil {
@@ -220,27 +230,31 @@ func checkScopeAccess(ctx context.Context, gc *remoteruntime.GitContext) (scopeA
 	return info, nil
 }
 
-func pingTerraServiceInfo(ctx context.Context, endpoint string) error {
+func pingTerraServiceInfo(ctx context.Context, endpoint string) (string, error) {
 	if ctx == nil {
 		ctx = context.Background()
 	}
 	serviceInfoURL, err := terraServiceInfoURL(endpoint)
 	if err != nil {
-		return err
+		return "", err
 	}
 	req, err := http.NewRequestWithContext(ctx, http.MethodGet, serviceInfoURL, nil)
 	if err != nil {
-		return err
+		return "", err
 	}
 	resp, err := http.DefaultClient.Do(req)
 	if err != nil {
-		return err
+		return "", err
 	}
 	defer resp.Body.Close()
+	serviceInfo, readErr := io.ReadAll(io.LimitReader(resp.Body, 1<<20))
 	if resp.StatusCode < http.StatusOK || resp.StatusCode >= http.StatusMultipleChoices {
-		return fmt.Errorf("terra DRS service-info returned %s", resp.Status)
+		return "", fmt.Errorf("terra DRS service-info returned %s", resp.Status)
+	}
+	if readErr != nil {
+		return "", readErr
 	}
-	return nil
+	return strings.TrimSpace(string(serviceInfo)), nil
 }
 
 func terraServiceInfoURL(endpoint string) (string, error) {
diff --git a/cmd/ping/main_test.go b/cmd/ping/main_test.go
index 81e290e4..19bd8f8a 100644
--- a/cmd/ping/main_test.go
+++ b/cmd/ping/main_test.go
@@ -80,6 +80,7 @@ func TestAcceptancePingTerraDRSServer(t *testing.T) {
 		"type: terra",
 		"endpoint: " + terraDRS.URL,
 		"health: ok",
+		`service-info: {"id":"terra-drs","name":"Terra DRS","type":{"group":"org.ga4gh","artifact":"drs","version":"1.0.0"}}`,
 	} {
 		if !strings.Contains(got, want) {
 			t.Fatalf("expected output to contain %q, got %q", want, got)
@@ -152,11 +153,11 @@ func TestPingRunEPrintsStatusAndHealth(t *testing.T) {
 	}
 
 	oldHealth := pingHealth
-	pingHealth = func(ctx context.Context, gc *remoteruntime.GitContext) error {
+	pingHealth = func(ctx context.Context, gc *remoteruntime.GitContext) (healthInfo, error) {
 		if gc == nil || gc.ProjectId != "end_to_end_test" {
 			t.Fatalf("unexpected git context: %+v", gc)
 		}
-		return nil
+		return healthInfo{}, nil
 	}
 	t.Cleanup(func() { pingHealth = oldHealth })
 
@@ -211,6 +212,54 @@ func TestPingRunEPrintsStatusAndHealth(t *testing.T) {
 	}
 }
 
+func TestPingRunEPrintsServiceInfo(t *testing.T) {
+	tmpDir := testutils.SetupTestGitRepo(t)
+	testutils.CreateTestConfig(t, tmpDir, &config.Config{
+		DefaultRemote: config.Remote(config.ORIGIN),
+		Remotes: map[config.Remote]config.RemoteSelect{
+			config.Remote(config.ORIGIN): {
+				Local: &config.LocalRemote{
+					BaseURL: "http://127.0.0.1:8080",
+				},
+			},
+		},
+	})
+
+	oldHealth := pingHealth
+	pingHealth = func(ctx context.Context, gc *remoteruntime.GitContext) (healthInfo, error) {
+		return healthInfo{ServiceInfo: `{"id":"terra-drs","name":"Terra DRS"}`}, nil
+	}
+	t.Cleanup(func() { pingHealth = oldHealth })
+
+	oldScopeAccess := pingScopeAccess
+	pingScopeAccess = func(ctx context.Context, gc *remoteruntime.GitContext) (scopeAccessInfo, error) {
+		return scopeAccessInfo{}, nil
+	}
+	t.Cleanup(func() { pingScopeAccess = oldScopeAccess })
+
+	oldStdout := os.Stdout
+	r, w, err := os.Pipe()
+	if err != nil {
+		t.Fatalf("pipe: %v", err)
+	}
+	os.Stdout = w
+	t.Cleanup(func() { os.Stdout = oldStdout })
+
+	runErr := Cmd.RunE(Cmd, nil)
+	_ = w.Close()
+	if runErr != nil {
+		t.Fatalf("Cmd.RunE returned error: %v", runErr)
+	}
+
+	var buf bytes.Buffer
+	if _, err := io.Copy(&buf, r); err != nil {
+		t.Fatalf("read stdout: %v", err)
+	}
+	if got, want := buf.String(), `service-info: {"id":"terra-drs","name":"Terra DRS"}`; !strings.Contains(got, want) {
+		t.Fatalf("expected output to contain %q, got %q", want, got)
+	}
+}
+
 func TestPingRunEReturnsReadableScopeError(t *testing.T) {
 	tmpDir := testutils.SetupTestGitRepo(t)
 	testutils.CreateTestConfig(t, tmpDir, &config.Config{
@@ -231,7 +280,7 @@ func TestPingRunEReturnsReadableScopeError(t *testing.T) {
 	}
 
 	oldHealth := pingHealth
-	pingHealth = func(ctx context.Context, gc *remoteruntime.GitContext) error { return nil }
+	pingHealth = func(ctx context.Context, gc *remoteruntime.GitContext) (healthInfo, error) { return healthInfo{}, nil }
 	t.Cleanup(func() { pingHealth = oldHealth })
 
 	oldScopeAccess := pingScopeAccess
diff --git a/cmd/ping/terra_integration_test.go b/cmd/ping/terra_integration_test.go
index df48a81c..6321dded 100644
--- a/cmd/ping/terra_integration_test.go
+++ b/cmd/ping/terra_integration_test.go
@@ -18,7 +18,7 @@ func TestIntegrationPingTerraDRSServer(t *testing.T) {
 	ctx, cancel := context.WithTimeout(context.Background(), 15*time.Second)
 	t.Cleanup(cancel)
 
-	if err := pingTerraServiceInfo(ctx, endpoint); err != nil {
+	if _, err := pingTerraServiceInfo(ctx, endpoint); err != nil {
 		t.Fatalf("ping Terra DRS service-info endpoint %q: %v", endpoint, err)
 	}
 }

From e109fe8b94a0aebe52f6c16715de279290192eb4 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 20 Jul 2026 10:44:16 -0700
Subject: [PATCH 15/66] adds anvil poc

---
 docs/anvil-terra-poc.md | 582 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 582 insertions(+)
 create mode 100644 docs/anvil-terra-poc.md

diff --git a/docs/anvil-terra-poc.md b/docs/anvil-terra-poc.md
new file mode 100644
index 00000000..2de8e546
--- /dev/null
+++ b/docs/anvil-terra-poc.md
@@ -0,0 +1,582 @@
+# AnVIL/Terra DRS Reference Proof of Concept
+
+## Purpose
+
+This document defines a focused proof of concept (POC) for using `git-drs` with the AnVIL/Terra DRS ecosystem. The POC is a **reference-only workflow**: data already exists behind AnVIL DRS records, and Git stores portable references to that data rather than uploading or copying payload bytes.
+
+The intended end-to-end flow is:
+
+1. An authorized user adds several AnVIL DRS references to a Git repository.
+2. The user commits the generated pointer files and pushes the Git repository with ordinary `git push`.
+3. A second authorized user clones the repository.
+4. The second user authenticates with their own Terra/AnVIL identity and runs `git drs pull` to hydrate the referenced files.
+
+## Scope
+
+The POC includes:
+
+- a read-only Terra remote;
+- Google Application Default Credentials (ADC) authentication;
+- resolution of AnVIL DRS URIs to authorized access URLs;
+- single-reference and manifest-driven batch `add-ref` workflows;
+- portable pointer files containing canonical DRS URIs;
+- non-secret, repository-level remote configuration;
+- selective and complete hydration after a fresh clone;
+- size and checksum verification where metadata is available.
+
+The POC does not include:
+
+- uploading payload bytes to AnVIL;
+- creating, editing, or deleting AnVIL DRS records;
+- copying AnVIL records into Syfon or Gen3;
+- destructive remote garbage collection;
+- automatic Terra workspace-table synchronization;
+- support for every DRS provider or Google authentication mode.
+
+## User Stories
+
+### Data reference author
+
+As an authorized AnVIL user, I want to add one or more existing DRS objects to a Git repository so that I can publish a reviewable, versioned dataset layout without downloading or committing the payload bytes.
+
+Acceptance criteria:
+
+- I can add one reference by DRS URI and destination path.
+- I can add many references from a manifest.
+- The command validates every DRS URI using my identity.
+- Generated pointers contain no payload data, access token, signed URL, or other secret.
+- The references can be committed and published with ordinary Git commands.
+
+### Data consumer
+
+As a second authorized AnVIL user, I want to clone the Git repository and hydrate its referenced files using my own identity so that I can reproduce the repository's data layout without receiving the author's credentials or clone-local state.
+
+Acceptance criteria:
+
+- A fresh clone contains portable pointer files.
+- The repository supplies non-secret Terra remote configuration.
+- I authenticate independently using Google ADC.
+- `git drs pull` hydrates all authorized references.
+- `git drs pull -I <pattern>` hydrates only selected references.
+- Downloaded content is checked against its expected size and checksum when available.
+
+### Unauthorized repository reader
+
+As a person who can read the Git repository but lacks AnVIL data authorization, I may inspect paths and DRS references, but I must not be able to download controlled-access payloads.
+
+Acceptance criteria:
+
+- Cloning Git does not grant data access.
+- Pull reports a clear authorization error.
+- No committed file or log exposes another user's credential or signed download URL.
+
+### Repository maintainer
+
+As a repository maintainer, I want deterministic pointers, actionable diagnostics, and repeatable tests so that reference changes are reviewable and failures can be distinguished from authorization problems.
+
+## User Experience
+
+### Prerequisites
+
+Both users need:
+
+- Git and `git-drs`;
+- access to the Git repository;
+- a Google identity authorized for the referenced AnVIL data;
+- working Google ADC, initially established with the supported Google authentication tooling.
+
+The repository contains a non-secret `.git-drs/config.yaml` file:
+
+```yaml
+version: 1
+default_remote: anvil
+remotes:
+  anvil:
+    type: terra
+    endpoint: https://data.terra.bio
+    auth: google-adc
+    mode: read-only
+```
+
+Local Git configuration may override repository configuration, but secrets are never permitted in `.git-drs/config.yaml`.
+
+### First user: add and publish references
+
+For individual objects:
+
+```bash
+git clone <git-repository>
+cd <git-repository>
+
+gcloud auth application-default login
+
+git drs add-ref --remote anvil \
+  drs://<authority>/<object-id-1> data/sample-1.cram
+git drs add-ref --remote anvil \
+  drs://<authority>/<object-id-2> data/sample-2.cram
+
+git add .git-drs/config.yaml .gitattributes data/
+git commit -m "Add AnVIL data references"
+git push
+```
+
+For multiple objects, the preferred POC workflow is a manifest:
+
+```bash
+git drs add-ref --remote anvil --manifest references.tsv
+git add .git-drs/config.yaml .gitattributes data/
+git commit -m "Add AnVIL data references"
+git push
+```
+
+The minimum manifest schema is:
+
+```text
+drs_uri\tpath
+drs://<authority>/<object-id-1>\tdata/sample-1.cram
+drs://<authority>/<object-id-2>\tdata/sample-2.cram
+```
+
+Optional `size` and `sha256` columns can avoid redundant metadata work, but the command must validate supplied values against authoritative DRS metadata before writing pointers.
+
+### Second user: clone and hydrate
+
+```bash
+gcloud auth application-default login
+
+git clone <git-repository>
+cd <repository>
+git drs pull
+```
+
+Selective hydration remains available:
+
+```bash
+git drs pull -I "data/*.cram"
+```
+
+The second user does not need the first user's `.git/drs` directory, local Git configuration, cached objects, access tokens, or signed URLs.
+
+## Actual Blockers
+
+### 1. Terra runtime does not construct an authenticated data resolver
+
+Terra configuration and runtime selection exist, but the Terra runtime currently creates a context without the Syfon client used by the existing `add-ref` and pull implementations. Terra can therefore be configured and health-checked, but its object-resolution and download path is incomplete.
+
+The POC needs a real AnVIL resolver that authenticates with Google ADC and can retrieve object metadata and authorized access information.
+
+### 2. Data operations are coupled to the Syfon client
+
+Current reference and download paths call `GitContext.Client.DRS()` directly. This assumes every provider can be represented by the Syfon client and fails for the current Terra context. Provider-neutral resolution must replace direct Syfon coupling in `add-ref` and pull.
+
+### 3. `--remote-type` is exposed but does not select behavior
+
+`add-ref` exposes `--remote-type`, but resolver behavior should be selected from the configured remote. The normal interface should be `--remote anvil`; the command loads that remote, observes `type: terra`, and uses the AnVIL resolver automatically.
+
+If `--remote-type` remains temporarily, it must be hidden or deprecated and must be rejected when it conflicts with the selected remote.
+
+### 4. SHA256-bearing references can lose their DRS identity
+
+Current `add-ref` behavior writes a Git LFS-style SHA256 pointer when DRS metadata includes SHA256, while it writes a DRS URI pointer only when SHA256 is unavailable. It stores supplementary metadata under `.git/drs`, which is clone-local and is not transferred by Git.
+
+As a result, a fresh clone may receive a SHA256 and size but not the canonical AnVIL DRS URI needed to resolve the original record. The POC cannot depend on checksum search or the first user's `.git/drs` metadata.
+
+### 5. Pointer identity, cache identity, and content identity are conflated
+
+The current implementation often treats a pointer OID as both a cache key and content SHA256. AnVIL references require three explicit concepts:
+
+- canonical remote identity: the normalized DRS URI;
+- local cache identity: a deterministic, filesystem-safe hash derived from the DRS URI;
+- content identity: SHA256 or another durable checksum supplied by DRS metadata.
+
+### 6. Current DRS URI resolution is not AnVIL-aware
+
+Deriving `https://<DRS-authority>` and constructing an anonymous generic client is insufficient for authenticated AnVIL resolution. The configured Terra resolver must own authority routing, authentication, object lookup, and access URL retrieval.
+
+### 7. Repository-level remote configuration is missing
+
+Git-local remote configuration is not cloned. Without committed public configuration, every consumer must manually reconstruct the same endpoint, authentication mode, and resolver type. The POC needs a tracked, non-secret configuration format with safe local overrides.
+
+### 8. There is no complete two-user AnVIL acceptance test
+
+Existing focused tests cover pieces of Terra configuration, pointer parsing, and ping behavior. A functional POC requires a clean-clone test using independent user state and real or contract-faithful AnVIL resolution.
+
+## Required Prototype Decision: Commit the Canonical DRS URI
+
+Every Terra/AnVIL reference **must commit the canonical DRS URI in the pointer file**, including when the DRS record supplies a SHA256 checksum.
+
+This is required because:
+
+- `.git/drs` metadata is local and is not pushed or cloned;
+- a checksum is content metadata, not necessarily a resolvable AnVIL record identifier;
+- the second user must be able to resolve the same record from Git state alone;
+- signed access URLs are temporary and must never be committed.
+
+The initial pointer format is:
+
+```text
+version https://calypr.github.io/spec/v1
+oid drs://<authority>/<object-id>
+size <bytes>
+sha256 <checksum-if-present>
+```
+
+If the pointer parser cannot initially support the optional checksum line, the minimum viable pointer is:
+
+```text
+version https://calypr.github.io/spec/v1
+oid drs://<authority>/<object-id>
+size <bytes>
+```
+
+Pull may retrieve the checksum from DRS metadata before download. Under no circumstances may the presence of SHA256 cause Terra `add-ref` to omit the DRS URI from committed state.
+
+For local storage, derive a cache key without replacing canonical identity:
+
+```text
+cache_oid = sha256("git-drs-anvil-ref:v1\n" + normalized_drs_uri)
+```
+
+## Implementation Plan
+
+### Phase 1: Define a provider-neutral resolver
+
+Introduce a provider-neutral interface used by both `add-ref` and pull:
+
+```go
+type Resolver interface {
+    GetObject(ctx context.Context, drsURI string) (*ResolvedObject, error)
+    GetAccess(ctx context.Context, drsURI, accessID string) (*ResolvedAccess, error)
+}
+
+type ResolvedObject struct {
+    DRSURI       string
+    ID           string
+    Name         string
+    Size         int64
+    Checksums    map[string]string
+    AccessMethods []AccessMethod
+}
+
+type ResolvedAccess struct {
+    URL       string
+    Headers   map[string]string
+    ExpiresAt *time.Time
+}
+```
+
+Implement a resolver factory selected by configured remote type:
+
+- `SyfonResolver` for existing Gen3/local behavior;
+- `AnVILResolver` for Terra/AnVIL behavior.
+
+Resolver results must not be serialized to tracked files when they contain signed URLs, credentials, or authorization headers.
+
+### Phase 2: Implement AnVIL authentication
+
+Support only `auth: google-adc` for the POC.
+
+The implementation must:
+
+1. Obtain credentials from the current user's ADC environment.
+2. Request the scopes required by the supported AnVIL resolver.
+3. attach bearer tokens only to trusted resolver endpoints;
+4. refresh tokens automatically;
+5. redact authorization headers and signed URLs from logs and errors;
+6. return distinct errors for absent credentials, expired credentials, and denied authorization.
+
+Tokens, refresh credentials, signed URLs, and request headers must never be written to Git configuration or repository files.
+
+### Phase 3: Implement AnVIL DRS URI resolution
+
+The AnVIL resolver must:
+
+1. Parse and validate `drs://<authority>/<object-id>`.
+2. Normalize and preserve the original URI as canonical identity.
+3. Route the reference through the configured AnVIL/Terra resolver contract.
+4. Retrieve object size, durable checksums, and supported access methods.
+5. Resolve an authorized access URL only when a download begins.
+6. distinguish not-found, unauthorized, resolver-unavailable, and unsupported-access-method failures.
+
+Authority routing must be implemented inside `AnVILResolver`; it must not assume every URI authority is itself an HTTPS GA4GH DRS endpoint. Exact production endpoints, OAuth scopes, resolver requests, and response contracts must be validated against current authoritative AnVIL/Terra documentation before implementation is considered complete.
+
+### Phase 4: Make Terra pointer files self-contained
+
+Change Terra `add-ref` to always write a DRS pointer, regardless of checksum availability.
+
+The command must:
+
+- preserve the normalized DRS URI;
+- store expected size;
+- store SHA256 when available;
+- avoid writing signed access information;
+- write pointers deterministically;
+- reject destination paths outside the repository;
+- avoid depending on clone-local `.git/drs` metadata for later resolution.
+
+Update parsing, inventory, clean/smudge handling, and status output to preserve the distinction between a DRS URI and a SHA256-shaped OID.
+
+### Phase 5: Separate remote, cache, and content identity
+
+Introduce an explicit identity value:
+
+```go
+type ObjectIdentity struct {
+    DRSURI        string
+    CacheOID      string
+    ContentSHA256 string
+}
+```
+
+Use:
+
+- `DRSURI` for object and access resolution;
+- `CacheOID` for local cache fanout paths;
+- `ContentSHA256` for integrity validation when available.
+
+Normalize DRS URIs before deriving `CacheOID`, version the derivation scheme, and add golden tests so future normalization changes do not silently orphan cached content.
+
+### Phase 6: Hydrate through the AnVIL resolver
+
+For each DRS pointer, pull must:
+
+1. Parse its canonical DRS URI, expected size, and optional checksum.
+2. Derive its local cache OID.
+3. reuse an existing cache entry only after validating it;
+4. resolve current object metadata with the selected AnVIL remote;
+5. request a fresh authorized access URL;
+6. download to a temporary file with cancellation and bounded retry;
+7. validate size and SHA256 when available;
+8. atomically promote verified content into the cache;
+9. hydrate the destination path;
+10. leave the pointer and cache uncorrupted on failure.
+
+Expired signed URLs must be handled by resolving a new URL rather than persisting or reusing stale access information.
+
+### Phase 7: Add manifest-driven batch `add-ref`
+
+Add:
+
+```bash
+git drs add-ref --remote anvil --manifest references.tsv
+```
+
+The implementation must:
+
+1. Support required `drs_uri` and `path` columns.
+2. Optionally accept `size` and `sha256` as asserted metadata.
+3. Validate the entire manifest before modifying the worktree.
+4. Reject malformed URIs, absolute paths, repository escapes, duplicate paths, and conflicting entries.
+5. Resolve metadata with a small bounded worker pool.
+6. compare asserted size/checksum values with authoritative DRS metadata;
+7. report all validation failures together where practical;
+8. write deterministic pointers after successful validation;
+9. support `--dry-run`;
+10. print a deterministic result summary.
+
+The batch operation is a wrapper over the same single-reference primitive, not an independent resolution system.
+
+### Phase 8: Commit non-secret repository configuration
+
+Adopt Option B: commit `.git-drs/config.yaml` so a clone carries the public information required to select the correct resolver.
+
+Initial schema:
+
+```yaml
+version: 1
+default_remote: anvil
+remotes:
+  anvil:
+    type: terra
+    endpoint: https://data.terra.bio
+    auth: google-adc
+    mode: read-only
+```
+
+Configuration rules:
+
+- only an allowlisted schema may be loaded from tracked configuration;
+- credentials, tokens, arbitrary headers, signed URLs, and local paths are forbidden;
+- local Git configuration may override public endpoint or remote selection;
+- secret-bearing configuration remains local and takes precedence;
+- commands must identify whether an effective setting came from repository or local configuration;
+- invalid or secret-like tracked fields must fail closed with an actionable error.
+
+With this configuration committed, the second user's desired flow is reduced to authentication, clone, and pull.
+
+## Git Push Semantics for This Prototype
+
+AnVIL data already exists and the configured Terra remote is read-only. Publishing references therefore uses ordinary Git:
+
+```bash
+git add .git-drs/config.yaml .gitattributes data/
+git commit -m "Add AnVIL data references"
+git push
+```
+
+`git push` publishes only:
+
+- pointer files;
+- repository paths and Git history;
+- `.gitattributes` rules;
+- non-secret `.git-drs/config.yaml`;
+- an optional reference manifest when the repository chooses to track it.
+
+It does not:
+
+- upload payload bytes;
+- create or update AnVIL DRS records;
+- copy records into another DRS service;
+- transfer user credentials;
+- persist signed download URLs.
+
+`git drs push` against a read-only Terra remote must fail before performing work with an actionable message such as:
+
+```text
+remote "anvil" is read-only; publish AnVIL references with ordinary git push
+```
+
+Plain `git push` must not attempt to contact AnVIL. Data authorization is evaluated later, independently for each user, when `git drs pull` resolves and downloads the committed references.
+
+## Prototype Acceptance Tests
+
+### 1. Single-reference two-user flow
+
+1. User A authenticates with ADC.
+2. User A adds a stable AnVIL DRS reference.
+3. The generated file is a pointer containing the canonical DRS URI.
+4. User A commits and pushes with ordinary Git.
+5. User B clones into a clean environment.
+6. The cloned file remains a pointer.
+7. User B authenticates independently.
+8. User B runs `git drs pull -I <path>`.
+9. The file is hydrated and matches expected size and checksum.
+
+### 2. Multiple-reference manifest flow
+
+Import at least ten references, including:
+
+- small and multipart-sized objects;
+- nested destination paths;
+- records with SHA256;
+- a record without SHA256, if the target test data provides one.
+
+Verify deterministic pointers, full pull, selective pull, and an accurate summary.
+
+### 3. Fresh-clone portability
+
+Before User B clones, ensure no User A state is copied, including:
+
+- `.git/drs`;
+- `.git/lfs/objects`;
+- local Git configuration;
+- environment tokens;
+- ADC files.
+
+Successful User B hydration proves that committed pointers and repository configuration are sufficient.
+
+### 4. Authorization isolation
+
+A user who can clone Git but cannot access the AnVIL objects must receive a clear authorization error. Confirm that no token, authorization header, or signed URL appears in Git history, pointer content, standard output, standard error, or logs.
+
+### 5. Missing and malformed references
+
+Verify actionable, distinct failures for:
+
+- malformed DRS URI;
+- unknown record;
+- unsupported authority;
+- record without a supported access method;
+- duplicate or escaping destination path.
+
+Batch validation should avoid partial worktree modification unless partial behavior is explicitly requested.
+
+### 6. Expired access URL
+
+Simulate or wait for access URL expiry. Pull must resolve a fresh URL and continue without relying on stored access information.
+
+### 7. Integrity failure
+
+Inject incorrect bytes or metadata. Pull must fail verification, delete temporary/corrupt cache content, and leave the worktree pointer intact.
+
+### 8. Interrupted download and retry
+
+Interrupt a download and retry it. The retry must either resume safely or restart cleanly, never treating partial bytes as a valid cache entry.
+
+### 9. Idempotency and cache reuse
+
+After successful hydration, repeated `git drs pull` must not redownload verified content. Two paths referencing the same canonical URI should reuse the same cache entry.
+
+### 10. Read-only push behavior
+
+Verify that:
+
+- ordinary `git push` succeeds without contacting AnVIL;
+- `git drs push` against the Terra remote fails clearly and performs no registration, upload, or deletion.
+
+### 11. Repository configuration safety
+
+Verify that tracked configuration:
+
+- loads after a fresh clone;
+- can be safely overridden locally;
+- rejects secret-bearing or unknown sensitive fields;
+- never shadows explicit local credentials with repository-controlled secrets.
+
+## Backlog in Priority Order
+
+### P0: required for the two-user POC
+
+1. Introduce the provider-neutral resolver abstraction.
+2. Confirm the authoritative AnVIL resolver endpoint, request contract, OAuth scopes, and supported access methods.
+3. Implement Google ADC authentication and token refresh.
+4. Implement AnVIL object metadata and access resolution.
+5. Make Terra `add-ref` always commit the canonical DRS URI.
+6. Add explicit DRS URI, cache OID, and content checksum identities.
+7. Refactor pull to use `AnVILResolver` rather than a Syfon client.
+8. Validate size and SHA256 and atomically manage cache content.
+9. Implement and safely load `.git-drs/config.yaml`.
+10. Reject `git drs push` for read-only Terra remotes.
+11. Add a real or contract-faithful two-user clone-and-pull acceptance test.
+
+### P1: required for a usable prototype
+
+1. Add manifest-driven batch `add-ref` and `--dry-run`.
+2. Add bounded parallel metadata resolution and download.
+3. Add safe retry, cancellation, and expired-URL re-resolution.
+4. Add `git drs doctor` checks for ADC, configuration, endpoint health, resolution, authorization, and pointer validity.
+5. Improve errors for absent credentials, denied access, missing records, invalid manifests, and integrity failures.
+6. Add CI coverage for clean-clone portability, authorization isolation, and repository configuration safety.
+7. Publish versioned binaries and a compatibility matrix for the tested AnVIL contract.
+
+### P2: explicitly deferred
+
+1. Uploading payloads to AnVIL.
+2. Creating, editing, or deleting AnVIL DRS records.
+3. Copying records to Syfon or Gen3.
+4. Destructive delete and remote garbage collection.
+5. Automatic Terra workspace-table synchronization.
+6. Additional Google authentication modes.
+7. Generalized support for every DRS authority or provider.
+8. A broad multi-provider pointer-format redesign beyond what portable AnVIL references require.
+
+## Definition of Done
+
+The AnVIL/Terra reference POC is functional when:
+
+- User A can add at least ten AnVIL DRS references in one manifest command.
+- Each generated pointer commits the normalized canonical DRS URI.
+- Pointers also preserve expected size and SHA256 when available.
+- The Git repository contains no payload bytes, credentials, authorization headers, or signed URLs.
+- The repository commits a validated, non-secret `.git-drs/config.yaml` selecting the read-only AnVIL remote.
+- Ordinary `git push` publishes the references without contacting AnVIL.
+- `git drs push` refuses to operate on the read-only Terra remote.
+- User B can clone without receiving any User A clone-local metadata, cache, or credentials.
+- User B can authenticate with their own Google ADC identity and run `git drs pull` successfully.
+- Full and selective hydration both work.
+- An unauthorized user can clone pointers but cannot hydrate controlled-access data.
+- Every download is size-verified and SHA256-verified when a checksum is available.
+- Interrupted, expired-URL, and integrity-failure paths do not poison the cache or overwrite pointers with invalid content.
+- Repeated pulls are idempotent and reuse verified cache entries.
+- The complete two-user flow runs as a documented acceptance test in a clean environment.
+

From 0392d64ca8edd2c8fb9860f440d5b22b399262f9 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 20 Jul 2026 11:56:25 -0700
Subject: [PATCH 16/66] Implement AnVIL/Terra reference workflow

---
 cmd/addref/add-ref.go                         | 220 +++++++++++++++-
 cmd/pull/main.go                              |  81 +++++-
 cmd/push/main.go                              |   3 +
 docs/anvil.md                                 |  99 ++++++++
 internal/config/config.go                     |  73 +++++-
 internal/config/repository_config_test.go     |  51 ++++
 internal/gitrepo/paths.go                     |   1 +
 internal/lfs/inventory.go                     |  17 ++
 internal/lfs/object_path.go                   |   2 +-
 internal/lfs/terra_pointer_acceptance_test.go |  11 +
 internal/resolver/resolver.go                 | 237 ++++++++++++++++++
 internal/resolver/resolver_test.go            |  51 ++++
 12 files changed, 831 insertions(+), 15 deletions(-)
 create mode 100644 docs/anvil.md
 create mode 100644 internal/config/repository_config_test.go
 create mode 100644 internal/resolver/resolver.go
 create mode 100644 internal/resolver/resolver_test.go

diff --git a/cmd/addref/add-ref.go b/cmd/addref/add-ref.go
index 0a1e0a40..09545e9d 100644
--- a/cmd/addref/add-ref.go
+++ b/cmd/addref/add-ref.go
@@ -3,11 +3,14 @@ package addref
 import (
 	"context"
 	"crypto/sha256"
+	"encoding/csv"
 	"encoding/hex"
 	"fmt"
 	"net/url"
 	"os"
 	"path/filepath"
+	"sort"
+	"strconv"
 	"strings"
 
 	"github.com/calypr/git-drs/internal/config"
@@ -16,6 +19,7 @@ import (
 	"github.com/calypr/git-drs/internal/gitrepo"
 	"github.com/calypr/git-drs/internal/lfs"
 	"github.com/calypr/git-drs/internal/remoteruntime"
+	"github.com/calypr/git-drs/internal/resolver"
 	drsapi "github.com/calypr/syfon/apigen/client/drs"
 	syclient "github.com/calypr/syfon/client"
 	"github.com/calypr/syfon/client/hash"
@@ -24,12 +28,25 @@ import (
 
 var remote string
 var remoteType string
+var manifestPath string
+var dryRun bool
 var Cmd = &cobra.Command{
-	Use:   "add-ref <drs_uri> <dst path>",
+	Use:   "add-ref <drs_uri> <dst path> | --manifest <references.tsv>",
 	Short: "Add a reference to an existing DRS object via URI",
 	Long:  "Add a reference to an existing DRS object via URI. Requires that the sha256 of the file is already in the cache",
-	Args:  cobra.ExactArgs(2),
+	Args: func(cmd *cobra.Command, args []string) error {
+		if manifestPath != "" && len(args) == 0 {
+			return nil
+		}
+		if manifestPath != "" {
+			return fmt.Errorf("positional arguments cannot be combined with --manifest")
+		}
+		return cobra.ExactArgs(2)(cmd, args)
+	},
 	RunE: func(cmd *cobra.Command, args []string) error {
+		if manifestPath != "" {
+			return runManifest(cmd, manifestPath)
+		}
 		drsUri := args[0]
 		dstPath := args[1]
 
@@ -47,6 +64,25 @@ var Cmd = &cobra.Command{
 			logger.Error(fmt.Sprintf("Error getting remote: %v", err))
 			return err
 		}
+		selected := cfg.GetRemote(remoteName)
+		if selected == nil {
+			return fmt.Errorf("remote %q is not configured", remoteName)
+		}
+		if remoteType != "" {
+			actual := "gen3"
+			if _, ok := cfg.Remotes[remoteName]; ok && cfg.Remotes[remoteName].Terra != nil {
+				actual = "terra"
+			} else if cfg.Remotes[remoteName].Local != nil {
+				actual = "local"
+			}
+			if remoteType != actual {
+				return fmt.Errorf("--remote-type %q conflicts with configured remote %q type %q", remoteType, remoteName, actual)
+			}
+		}
+		dstPath, err = safeDestination(dstPath)
+		if err != nil {
+			return err
+		}
 
 		client, err := remoteruntime.New(cfg, remoteName, logger)
 		if err != nil {
@@ -57,6 +93,10 @@ var Cmd = &cobra.Command{
 		if err != nil {
 			return err
 		}
+		if dryRun {
+			_, err := fmt.Fprintf(cmd.OutOrStdout(), "%s\t%s\t%d\n1 reference(s) validated\n", drsUri, args[1], obj.Size)
+			return err
+		}
 		dirPath := filepath.Dir(dstPath)
 		_, err = os.Stat(dirPath)
 		if os.IsNotExist(err) {
@@ -65,7 +105,11 @@ var Cmd = &cobra.Command{
 		}
 
 		oid := addRefLocalOID(drsUri, remoteName, &obj)
-		if hasContentSHA256(&obj) {
+		if client.RemoteType == config.TerraServerType {
+			if err := lfs.CreateDRSPointer(&obj, dstPath, drsUri); err != nil {
+				return err
+			}
+		} else if hasContentSHA256(&obj) {
 			if err := lfs.CreateLfsPointerWithOID(&obj, dstPath, oid); err != nil {
 				return err
 			}
@@ -82,9 +126,156 @@ var Cmd = &cobra.Command{
 	},
 }
 
+func safeDestination(dst string) (string, error) {
+	if filepath.IsAbs(dst) {
+		return "", fmt.Errorf("destination path must be relative to the repository: %s", dst)
+	}
+	clean := filepath.Clean(dst)
+	if clean == "." || clean == ".." || strings.HasPrefix(clean, ".."+string(filepath.Separator)) {
+		return "", fmt.Errorf("destination path escapes the repository: %s", dst)
+	}
+	root, err := gitrepo.GitTopLevel()
+	if err != nil {
+		return "", err
+	}
+	return filepath.Join(root, clean), nil
+}
+
 func init() {
 	Cmd.Flags().StringVarP(&remote, "remote", "r", "", "target remote DRS server (default: default_remote)")
 	Cmd.Flags().StringVar(&remoteType, "remote-type", "", "resolver remote type for DRS references (for example: terra)")
+	Cmd.Flags().StringVar(&manifestPath, "manifest", "", "add references from a tab-separated manifest")
+	Cmd.Flags().BoolVar(&dryRun, "dry-run", false, "validate and report references without writing pointers")
+	_ = Cmd.Flags().MarkHidden("remote-type")
+	_ = Cmd.Flags().MarkDeprecated("remote-type", "remote behavior is selected by --remote configuration")
+}
+
+type manifestEntry struct {
+	uri, path, sha256 string
+	size              *int64
+	object            drsapi.DrsObject
+	destination       string
+}
+
+func runManifest(cmd *cobra.Command, filename string) error {
+	f, err := os.Open(filename)
+	if err != nil {
+		return fmt.Errorf("open manifest: %w", err)
+	}
+	defer f.Close()
+	r := csv.NewReader(f)
+	r.Comma = '\t'
+	r.FieldsPerRecord = -1
+	r.TrimLeadingSpace = true
+	rows, err := r.ReadAll()
+	if err != nil {
+		return fmt.Errorf("parse manifest: %w", err)
+	}
+	if len(rows) < 2 {
+		return fmt.Errorf("manifest must contain a header and at least one reference")
+	}
+	columns := map[string]int{}
+	for i, name := range rows[0] {
+		columns[strings.ToLower(strings.TrimSpace(name))] = i
+	}
+	for _, required := range []string{"drs_uri", "path"} {
+		if _, ok := columns[required]; !ok {
+			return fmt.Errorf("manifest is missing required %q column", required)
+		}
+	}
+	value := func(row []string, name string) string {
+		i, ok := columns[name]
+		if !ok || i >= len(row) {
+			return ""
+		}
+		return strings.TrimSpace(row[i])
+	}
+	entries := make([]manifestEntry, 0, len(rows)-1)
+	seen := map[string]int{}
+	var problems []string
+	for i, row := range rows[1:] {
+		e := manifestEntry{uri: value(row, "drs_uri"), path: value(row, "path"), sha256: strings.ToLower(strings.TrimPrefix(value(row, "sha256"), "sha256:"))}
+		if _, _, err := resolver.NormalizeDRSURI(e.uri); err != nil {
+			problems = append(problems, fmt.Sprintf("row %d: %v", i+2, err))
+		}
+		clean := filepath.Clean(e.path)
+		if prior, ok := seen[clean]; ok {
+			problems = append(problems, fmt.Sprintf("row %d: duplicate path %q (also row %d)", i+2, e.path, prior))
+		} else {
+			seen[clean] = i + 2
+		}
+		e.destination, err = safeDestination(e.path)
+		if err != nil {
+			problems = append(problems, fmt.Sprintf("row %d: %v", i+2, err))
+		}
+		if raw := value(row, "size"); raw != "" {
+			n, parseErr := strconv.ParseInt(raw, 10, 64)
+			if parseErr != nil || n < 0 {
+				problems = append(problems, fmt.Sprintf("row %d: invalid size %q", i+2, raw))
+			} else {
+				e.size = &n
+			}
+		}
+		if e.sha256 != "" && (len(e.sha256) != 64 || strings.Trim(e.sha256, "0123456789abcdef") != "") {
+			problems = append(problems, fmt.Sprintf("row %d: invalid sha256", i+2))
+		}
+		entries = append(entries, e)
+	}
+	if len(problems) > 0 {
+		return fmt.Errorf("manifest validation failed:\n- %s", strings.Join(problems, "\n- "))
+	}
+	cfg, err := config.LoadConfig()
+	if err != nil {
+		return err
+	}
+	remoteName, err := cfg.GetRemoteOrDefault(remote)
+	if err != nil {
+		return err
+	}
+	runtime, err := remoteruntime.New(cfg, remoteName, drslog.GetLogger())
+	if err != nil {
+		return err
+	}
+	for i := range entries {
+		obj, resolveErr := resolveAddRefObject(cmd.Context(), cfg, remoteName, runtime, entries[i].uri)
+		if resolveErr != nil {
+			problems = append(problems, fmt.Sprintf("row %d: %v", i+2, resolveErr))
+			continue
+		}
+		entries[i].object = obj
+		if entries[i].size != nil && *entries[i].size != obj.Size {
+			problems = append(problems, fmt.Sprintf("row %d: asserted size %d does not match authoritative size %d", i+2, *entries[i].size, obj.Size))
+		}
+		authSHA := drsobject.NormalizeChecksum(hash.ConvertDrsChecksumsToHashInfo(obj.Checksums).SHA256)
+		if entries[i].sha256 != "" && !strings.EqualFold(entries[i].sha256, authSHA) {
+			problems = append(problems, fmt.Sprintf("row %d: asserted sha256 does not match authoritative checksum", i+2))
+		}
+	}
+	if len(problems) > 0 {
+		return fmt.Errorf("manifest validation failed:\n- %s", strings.Join(problems, "\n- "))
+	}
+	sort.Slice(entries, func(i, j int) bool { return entries[i].path < entries[j].path })
+	for _, e := range entries {
+		if dryRun {
+			fmt.Fprintf(cmd.OutOrStdout(), "%s\t%s\t%d\n", e.uri, e.path, e.object.Size)
+			continue
+		}
+		if err := os.MkdirAll(filepath.Dir(e.destination), 0o755); err != nil {
+			return err
+		}
+		if runtime.RemoteType == config.TerraServerType {
+			err = lfs.CreateDRSPointer(&e.object, e.destination, e.uri)
+		} else if hasContentSHA256(&e.object) {
+			err = lfs.CreateLfsPointerWithOID(&e.object, e.destination, addRefLocalOID(e.uri, remoteName, &e.object))
+		} else {
+			err = lfs.CreateDRSPointer(&e.object, e.destination, e.uri)
+		}
+		if err != nil {
+			return err
+		}
+	}
+	fmt.Fprintf(cmd.OutOrStdout(), "%d reference(s) %s\n", len(entries), map[bool]string{true: "validated", false: "added"}[dryRun])
+	return nil
 }
 
 func hasContentSHA256(obj *drsapi.DrsObject) bool {
@@ -110,6 +301,25 @@ type drsObjectGetter interface {
 }
 
 func resolveAddRefObject(ctx context.Context, cfg *config.Config, primaryRemote config.Remote, primary *remoteruntime.GitContext, drsURI string) (drsapi.DrsObject, error) {
+	if primary != nil && primary.RemoteType == config.TerraServerType {
+		anvil, err := newAnVILResolver(ctx, primary.Endpoint)
+		if err != nil {
+			return drsapi.DrsObject{}, err
+		}
+		resolved, err := anvil.GetObject(ctx, drsURI)
+		if err != nil {
+			return drsapi.DrsObject{}, err
+		}
+		checksums := make([]drsapi.Checksum, 0, len(resolved.Checksums))
+		for _, checksum := range resolved.Checksums {
+			checksums = append(checksums, drsapi.Checksum{Type: checksum.Type, Checksum: checksum.Checksum})
+		}
+		var name *string
+		if resolved.Name != "" {
+			name = &resolved.Name
+		}
+		return drsapi.DrsObject{Id: resolved.ID, Name: name, Size: resolved.Size, SelfUri: resolved.DRSURI, Checksums: checksums}, nil
+	}
 	objectID, sourceEndpoint, ok := parseDRSURIForSource(drsURI)
 	if !ok {
 		return primary.Client.DRS().GetObject(ctx, drsURI)
@@ -131,6 +341,10 @@ func resolveAddRefObject(ctx context.Context, cfg *config.Config, primaryRemote
 	return getter.GetObject(ctx, objectID)
 }
 
+var newAnVILResolver = func(ctx context.Context, endpoint string) (resolver.Resolver, error) {
+	return resolver.NewAnVIL(ctx, endpoint)
+}
+
 func parseDRSURIForSource(drsURI string) (objectID string, endpoint string, ok bool) {
 	u, err := url.Parse(strings.TrimSpace(drsURI))
 	if err != nil || !strings.EqualFold(u.Scheme, "drs") || strings.TrimSpace(u.Host) == "" {
diff --git a/cmd/pull/main.go b/cmd/pull/main.go
index 660c3f97..27efa844 100644
--- a/cmd/pull/main.go
+++ b/cmd/pull/main.go
@@ -21,6 +21,7 @@ import (
 	"github.com/calypr/git-drs/internal/lfs"
 	"github.com/calypr/git-drs/internal/lookup"
 	"github.com/calypr/git-drs/internal/remoteruntime"
+	"github.com/calypr/git-drs/internal/resolver"
 	internaltransfer "github.com/calypr/git-drs/internal/transfer"
 	drsapi "github.com/calypr/syfon/apigen/client/drs"
 	sycommon "github.com/calypr/syfon/client/common"
@@ -93,6 +94,13 @@ var Cmd = &cobra.Command{
 			logg.Error(fmt.Sprintf("error creating DRS client: %s", err))
 			return err
 		}
+		var anvil resolver.Resolver
+		if drsCtx.RemoteType == config.TerraServerType {
+			anvil, err = resolver.NewAnVIL(cmd.Context(), drsCtx.Endpoint)
+			if err != nil {
+				return err
+			}
+		}
 
 		progress := internaltransfer.NewPullProgressRenderer(os.Stderr)
 		progress.OnPlan(toPullFiles(pointers))
@@ -110,7 +118,7 @@ var Cmd = &cobra.Command{
 			if err != nil {
 				return fmt.Errorf("failed to resolve LFS object path for %s: %w", f.Oid, err)
 			}
-			state, err := inspectCachedObject(cachePath, f.Oid, f.Size)
+			state, err := inspectCachedPointer(cachePath, f)
 			if err == nil && state.complete {
 				continue
 			} else if err != nil {
@@ -126,6 +134,9 @@ var Cmd = &cobra.Command{
 		if len(missingOIDs) > 0 {
 			prefetched := make(map[string]drsapi.DrsObject, len(missingOIDs))
 			for _, oid := range missingOIDs {
+				if isDRSPointerOID(oid) {
+					continue
+				}
 				recs, err := lookup.ObjectsByHashForScope(ctx, drsCtx, oid)
 				if err != nil || len(recs) == 0 {
 					continue
@@ -156,7 +167,7 @@ var Cmd = &cobra.Command{
 				if err != nil {
 					return fmt.Errorf("failed to resolve LFS object path for %s: %w", f.Oid, err)
 				}
-				state, err := inspectCachedObject(dstPath, f.Oid, f.Size)
+				state, err := inspectCachedPointer(dstPath, f)
 				if err == nil && state.complete {
 					continue
 				} else if err != nil {
@@ -184,15 +195,21 @@ var Cmd = &cobra.Command{
 					}
 				}
 				if isDRSPointerOID(f.Oid) {
-					if err := internaltransfer.DownloadDRSURIToCachePath(downloadCtx, drsCtx, f.Oid, dstPath); err != nil {
+					var downloadErr error
+					if anvil != nil {
+						downloadErr = resolver.DownloadToCache(downloadCtx, anvil, normalizeDRSPointerOID(f.Oid), dstPath)
+					} else {
+						downloadErr = internaltransfer.DownloadDRSURIToCachePath(downloadCtx, drsCtx, f.Oid, dstPath)
+					}
+					if downloadErr != nil {
 						debugCtx := buildPullDownloadDebugContext(ctx, drsCtx, f.Oid)
-						return fmt.Errorf("failed to download DRS URI %s to %s: %w\npull-debug: %s", f.Oid, dstPath, err, debugCtx)
+						return fmt.Errorf("failed to download DRS URI %s to %s: %w\npull-debug: %s", f.Oid, dstPath, downloadErr, debugCtx)
 					}
 				} else if err := internaltransfer.DownloadToCachePath(downloadCtx, drsCtx, f.Oid, dstPath); err != nil {
 					debugCtx := buildPullDownloadDebugContext(ctx, drsCtx, f.Oid)
 					return fmt.Errorf("failed to download oid %s to %s: %w\npull-debug: %s", f.Oid, dstPath, err, debugCtx)
 				}
-				if err := verifyObjectAtPath(dstPath, f.Oid, f.Size); err != nil {
+				if err := verifyPointerAtPath(dstPath, f); err != nil {
 					_ = os.Remove(dstPath)
 					return fmt.Errorf("downloaded invalid cached object for oid %s: %w", f.Oid, err)
 				}
@@ -212,10 +229,18 @@ var Cmd = &cobra.Command{
 	},
 }
 
+func normalizeDRSPointerOID(oid string) string {
+	if strings.HasPrefix(oid, "//") {
+		return "drs:" + oid
+	}
+	return oid
+}
+
 type pointerFile struct {
-	Name string
-	Oid  string
-	Size int64
+	Name   string
+	Oid    string
+	Size   int64
+	SHA256 string
 }
 
 func collectPointerFiles(inventory map[string]lfs.LfsFileInfo, patterns []string) []pointerFile {
@@ -231,11 +256,41 @@ func collectPointerFiles(inventory map[string]lfs.LfsFileInfo, patterns []string
 	files := make([]pointerFile, 0, len(keys))
 	for _, path := range keys {
 		info := inventory[path]
-		files = append(files, pointerFile{Name: path, Oid: info.Oid, Size: info.Size})
+		files = append(files, pointerFile{Name: path, Oid: info.Oid, Size: info.Size, SHA256: info.SHA256})
 	}
 	return files
 }
 
+func inspectCachedPointer(path string, file pointerFile) (cachedObjectState, error) {
+	state, err := inspectCachedObject(path, file.Oid, file.Size)
+	if err != nil || !state.complete || file.SHA256 == "" {
+		return state, err
+	}
+	actual, err := calculateFileSHA256(path)
+	if err != nil {
+		return state, err
+	}
+	state.complete = strings.EqualFold(actual, file.SHA256)
+	return state, nil
+}
+
+func verifyPointerAtPath(path string, file pointerFile) error {
+	if err := verifyObjectAtPath(path, file.Oid, file.Size); err != nil {
+		return err
+	}
+	if file.SHA256 == "" {
+		return nil
+	}
+	actual, err := calculateFileSHA256(path)
+	if err != nil {
+		return err
+	}
+	if !strings.EqualFold(actual, file.SHA256) {
+		return fmt.Errorf("sha256 mismatch: expected %s, got %s", file.SHA256, actual)
+	}
+	return nil
+}
+
 func isDRSPointerOID(oid string) bool {
 	oid = strings.TrimSpace(oid)
 	return strings.HasPrefix(oid, "//") || strings.HasPrefix(strings.ToLower(oid), "drs://")
@@ -471,6 +526,12 @@ func refreshGitIndexForHydratedFiles(files []pointerFile) error {
 }
 
 func buildPullDownloadDebugContext(ctx context.Context, drsCtx *remoteruntime.GitContext, oid string) string {
+	if drsCtx == nil {
+		return fmt.Sprintf("oid=%s resolver=unavailable", oid)
+	}
+	if drsCtx.Client == nil {
+		return fmt.Sprintf("oid=%s resolver=%s", oid, drsCtx.RemoteType)
+	}
 	recs, err := lookup.ObjectsByHashForScope(ctx, drsCtx, oid)
 	if err != nil {
 		return fmt.Sprintf("oid=%s query_error=%v", oid, err)
@@ -499,7 +560,7 @@ func buildPullDownloadDebugContext(ctx context.Context, drsCtx *remoteruntime.Gi
 			if am.AccessId != nil {
 				accessID = strings.TrimSpace(*am.AccessId)
 			}
-			methods = append(methods, fmt.Sprintf("{type=%s access_id=%s url_scheme=%s url=%s}", am.Type, accessID, scheme, rawURL))
+			methods = append(methods, fmt.Sprintf("{type=%s access_id=%s url_scheme=%s}", am.Type, accessID, scheme))
 		}
 	}
 	return fmt.Sprintf("oid=%s did=%s size=%d access_methods=%s", oid, strings.TrimSpace(match.Id), match.Size, strings.Join(methods, ", "))
diff --git a/cmd/push/main.go b/cmd/push/main.go
index a1758d09..950a3090 100644
--- a/cmd/push/main.go
+++ b/cmd/push/main.go
@@ -58,6 +58,9 @@ var Cmd = &cobra.Command{
 				return err
 			}
 		}
+		if selected, ok := cfg.Remotes[remote]; ok && selected.Terra != nil {
+			return fmt.Errorf("remote %q is read-only; publish AnVIL references with ordinary git push", remote)
+		}
 
 		drsClient, err := remoteruntime.New(cfg, remote, myLogger)
 		if err != nil {
diff --git a/docs/anvil.md b/docs/anvil.md
new file mode 100644
index 00000000..2c142ad7
--- /dev/null
+++ b/docs/anvil.md
@@ -0,0 +1,99 @@
+# Use AnVIL data references with git-drs
+
+This guide is for AnVIL users who want to version a dataset layout in Git
+without copying controlled-access data into Git. A Git commit contains stable
+DRS references and public resolver settings only. Each person downloads data
+with their own Google identity and AnVIL authorization.
+
+## Before you begin
+
+Install Git, `git-drs`, the Google Cloud CLI, and obtain access to both the Git
+repository and the referenced AnVIL data. Establish Application Default
+Credentials (ADC) for your user:
+
+```bash
+gcloud auth application-default login
+```
+
+ADC is local user state. Never copy the ADC JSON file into the repository.
+
+## Configure an AnVIL repository
+
+Create and commit `.git-drs/config.yaml`:
+
+```yaml
+version: 1
+default_remote: anvil
+remotes:
+  anvil:
+    type: terra
+    endpoint: https://data.terra.bio
+    auth: google-adc
+    mode: read-only
+```
+
+The tracked schema intentionally permits only the public Terra endpoint,
+Google ADC authentication selection, and read-only mode. Tokens, arbitrary
+headers, credential paths, signed URLs, unknown fields, non-HTTPS endpoints,
+and embedded URL credentials are rejected. Clone-local Git configuration can
+override public settings when an organization uses another trusted resolver.
+
+## Publish one reference
+
+Use the configured remote and choose the path that the data should occupy:
+
+```bash
+git drs add-ref --remote anvil \
+  drs://<authority>/<object-id> data/sample.cram
+git add .git-drs/config.yaml .gitattributes data/sample.cram
+git commit -m "Reference AnVIL sample"
+git push
+```
+
+For a Terra remote, `add-ref` authenticates with your ADC, validates metadata,
+and writes a small pointer. The pointer retains the canonical DRS URI even when
+the record has a SHA256 checksum. It never contains an access token or signed
+download URL. Destination paths must stay inside the Git repository.
+
+AnVIL remotes are read-only: publish pointers with ordinary `git push`.
+`git drs push` refuses a Terra remote because that command uploads payloads to
+writable DRS providers.
+
+## Clone and hydrate as another user
+
+The consumer authenticates independently and then hydrates all pointers:
+
+```bash
+gcloud auth application-default login
+git clone <git-repository>
+cd <repository>
+git drs pull
+```
+
+Hydrate only selected paths with an include pattern:
+
+```bash
+git drs pull -I "data/*.cram"
+```
+
+Cloning the Git repository does **not** grant AnVIL data access. A user without
+permission can inspect reference paths and DRS URIs but receives an
+authorization error when hydration resolves the object.
+
+## Security and troubleshooting
+
+* `google application default credentials are unavailable`: run
+  `gcloud auth application-default login` as the current user and retry.
+* `not authorized to access AnVIL DRS object`: confirm that the ADC identity has
+  access to the controlled dataset. Do not ask another user to share ADC files.
+* `AnVIL DRS object not found`: verify the committed URI and that the configured
+  resolver supports its authority.
+* Repository configuration errors are intentionally strict. Remove secret or
+  unknown fields from `.git-drs/config.yaml`; place supported local overrides
+  in Git configuration instead.
+* Do not commit `.git/drs`, `.git/lfs`, Google credential files, bearer tokens,
+  request headers, or resolved access URLs. Access URLs are temporary and are
+  resolved again at download time.
+
+For pointer details, see [Pointer files](pointer-files.md). For the prototype
+design and acceptance criteria, see [AnVIL/Terra POC](anvil-terra-poc.md).
diff --git a/internal/config/config.go b/internal/config/config.go
index 1589308f..ff7da793 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -3,6 +3,9 @@ package config
 import (
 	"errors"
 	"fmt"
+	"io"
+	"net/url"
+	"os"
 	"os/exec"
 	"path/filepath"
 	"sort"
@@ -10,6 +13,7 @@ import (
 
 	"github.com/calypr/git-drs/internal/gitrepo"
 	"github.com/go-git/go-git/v5"
+	"gopkg.in/yaml.v3"
 )
 
 // RemoteType represents the type of server being initialized
@@ -283,6 +287,9 @@ func LoadConfig() (*Config, error) {
 	cfg := &Config{
 		Remotes: make(map[Remote]RemoteSelect),
 	}
+	if err := loadRepositoryConfig(cfg); err != nil {
+		return nil, err
+	}
 
 	// Iterate over all sections to find 'drs' and its subsections
 	for _, section := range conf.Raw.Sections {
@@ -415,6 +422,70 @@ func getConfigPath() (string, error) {
 		return "", err
 	}
 
-	configPath := filepath.Join(topLevel, gitrepo.DRSDir, gitrepo.ConfigYAML)
+	configPath := filepath.Join(topLevel, gitrepo.RepoDRSDir, gitrepo.ConfigYAML)
 	return configPath, nil
 }
+
+type repositoryConfig struct {
+	Version       int                               `yaml:"version"`
+	DefaultRemote string                            `yaml:"default_remote"`
+	Remotes       map[string]repositoryRemoteConfig `yaml:"remotes"`
+}
+
+type repositoryRemoteConfig struct {
+	Type     string `yaml:"type"`
+	Endpoint string `yaml:"endpoint"`
+	Auth     string `yaml:"auth"`
+	Mode     string `yaml:"mode"`
+}
+
+// loadRepositoryConfig loads only the public, allowlisted clone-portable
+// configuration. KnownFields deliberately fails closed for tokens, headers,
+// credential paths, and future fields until they receive a security review.
+func loadRepositoryConfig(cfg *Config) error {
+	path, err := getConfigPath()
+	if err != nil {
+		return err
+	}
+	f, err := os.Open(path)
+	if os.IsNotExist(err) {
+		return nil
+	}
+	if err != nil {
+		return fmt.Errorf("open repository git-drs config: %w", err)
+	}
+	defer f.Close()
+	var raw repositoryConfig
+	dec := yaml.NewDecoder(io.LimitReader(f, 1<<20))
+	dec.KnownFields(true)
+	if err := dec.Decode(&raw); err != nil {
+		return fmt.Errorf("invalid repository config %s: %w", path, err)
+	}
+	if raw.Version != 1 {
+		return fmt.Errorf("invalid repository config %s: unsupported version %d", path, raw.Version)
+	}
+	if strings.TrimSpace(raw.DefaultRemote) != "" {
+		cfg.DefaultRemote = Remote(strings.TrimSpace(raw.DefaultRemote))
+	}
+	for name, r := range raw.Remotes {
+		name = strings.TrimSpace(name)
+		if name == "" {
+			return fmt.Errorf("invalid repository config %s: remote name cannot be empty", path)
+		}
+		if r.Type != "terra" {
+			return fmt.Errorf("invalid repository config %s: remote %q type must be terra", path, name)
+		}
+		if r.Auth != "google-adc" {
+			return fmt.Errorf("invalid repository config %s: remote %q auth must be google-adc", path, name)
+		}
+		if r.Mode != "read-only" {
+			return fmt.Errorf("invalid repository config %s: remote %q mode must be read-only", path, name)
+		}
+		u, err := url.ParseRequestURI(strings.TrimSpace(r.Endpoint))
+		if err != nil || u.Scheme != "https" || u.Host == "" || u.User != nil {
+			return fmt.Errorf("invalid repository config %s: remote %q endpoint must be an HTTPS URL without credentials", path, name)
+		}
+		cfg.Remotes[Remote(name)] = RemoteSelect{Terra: &TerraRemote{Endpoint: u.String(), Auth: r.Auth, Mode: r.Mode}}
+	}
+	return nil
+}
diff --git a/internal/config/repository_config_test.go b/internal/config/repository_config_test.go
new file mode 100644
index 00000000..212dc46e
--- /dev/null
+++ b/internal/config/repository_config_test.go
@@ -0,0 +1,51 @@
+package config
+
+import (
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+)
+
+func TestRepositoryConfigLoadsAndLocalGitOverrides(t *testing.T) {
+	repo := setupTestRepo(t)
+	dir := filepath.Join(repo, ".git-drs")
+	if err := os.Mkdir(dir, 0o755); err != nil {
+		t.Fatal(err)
+	}
+	data := "version: 1\ndefault_remote: anvil\nremotes:\n  anvil:\n    type: terra\n    endpoint: https://data.terra.bio\n    auth: google-adc\n    mode: read-only\n"
+	if err := os.WriteFile(filepath.Join(dir, "config.yaml"), []byte(data), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(repo, ".git/config"), append(mustRead(t, filepath.Join(repo, ".git/config")), []byte("\n[drs]\n\tdefault-remote = local-choice\n")...), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	cfg, err := LoadConfig()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if cfg.GetRemote("anvil") == nil || cfg.DefaultRemote != "local-choice" {
+		t.Fatalf("repository remote or local override missing: %+v", cfg)
+	}
+}
+
+func TestRepositoryConfigRejectsSecretFields(t *testing.T) {
+	repo := setupTestRepo(t)
+	dir := filepath.Join(repo, ".git-drs")
+	_ = os.Mkdir(dir, 0o755)
+	data := "version: 1\nremotes:\n  anvil:\n    type: terra\n    endpoint: https://data.terra.bio\n    auth: google-adc\n    mode: read-only\n    token: do-not-load\n"
+	_ = os.WriteFile(filepath.Join(dir, "config.yaml"), []byte(data), 0o644)
+	_, err := LoadConfig()
+	if err == nil || !strings.Contains(err.Error(), "field token not found") {
+		t.Fatalf("expected fail-closed secret rejection, got %v", err)
+	}
+}
+
+func mustRead(t *testing.T, path string) []byte {
+	t.Helper()
+	b, err := os.ReadFile(path)
+	if err != nil {
+		t.Fatal(err)
+	}
+	return b
+}
diff --git a/internal/gitrepo/paths.go b/internal/gitrepo/paths.go
index ab2669e2..0eeac868 100644
--- a/internal/gitrepo/paths.go
+++ b/internal/gitrepo/paths.go
@@ -4,6 +4,7 @@ const (
 	LFSObjectsPath = ".git/lfs/objects"
 	DRSObjectsPath = ".git/drs/lfs/objects"
 	ConfigYAML     = "config.yaml"
+	RepoDRSDir     = ".git-drs"
 	DRSLogFile     = ".git/drs/git-drs.log"
 	DRSDir         = ".git/drs"
 )
diff --git a/internal/lfs/inventory.go b/internal/lfs/inventory.go
index a197f78d..fcf89ca5 100644
--- a/internal/lfs/inventory.go
+++ b/internal/lfs/inventory.go
@@ -13,6 +13,7 @@ import (
 	"strconv"
 	"strings"
 
+	"github.com/calypr/git-drs/internal/drsobject"
 	drsapi "github.com/calypr/syfon/apigen/client/drs"
 	"github.com/calypr/syfon/client/hash"
 )
@@ -27,6 +28,7 @@ type LfsFileInfo struct {
 	OidType    string `json:"oid_type"`
 	Oid        string `json:"oid"`
 	Version    string `json:"version"`
+	SHA256     string `json:"sha256,omitempty"`
 }
 
 func IsLFSTracked(path string) (bool, error) {
@@ -144,6 +146,7 @@ func GetWorktreeLfsFiles(logger *slog.Logger) (map[string]LfsFileInfo, error) {
 			OidType:   pointer.OidType,
 			Oid:       pointer.Oid,
 			Version:   pointer.Version,
+			SHA256:    pointer.SHA256,
 		}
 	}
 	return files, nil
@@ -213,6 +216,7 @@ func addFilesFromPaths(ctx context.Context, repoDir, ref string, paths []string,
 			OidType:   pointer.OidType,
 			Oid:       pointer.Oid,
 			Version:   pointer.Version,
+			SHA256:    pointer.SHA256,
 		}
 	}
 
@@ -409,6 +413,7 @@ func readWorktreePointerInfo(repoDir, path string) (LfsFileInfo, bool) {
 		OidType:   pointer.OidType,
 		Oid:       pointer.Oid,
 		Version:   pointer.Version,
+		SHA256:    pointer.SHA256,
 	}, true
 }
 
@@ -428,6 +433,7 @@ func readIndexPointerInfo(ctx context.Context, repoDir, path string) (LfsFileInf
 		OidType:   pointer.OidType,
 		Oid:       pointer.Oid,
 		Version:   pointer.Version,
+		SHA256:    pointer.SHA256,
 	}, true
 }
 
@@ -488,6 +494,7 @@ type lfsPointer struct {
 	OidType string
 	Oid     string
 	Size    int64
+	SHA256  string
 }
 
 func parseLFSPointer(content string) (lfsPointer, bool) {
@@ -518,6 +525,13 @@ func parseLFSPointer(content string) (lfsPointer, bool) {
 				return lfsPointer{}, false
 			}
 			p.Size = sz
+			continue
+		}
+		if strings.HasPrefix(line, "sha256 ") {
+			p.SHA256 = strings.ToLower(strings.TrimSpace(strings.TrimPrefix(line, "sha256 ")))
+			if !sha256OIDRe.MatchString(p.SHA256) {
+				return lfsPointer{}, false
+			}
 		}
 	}
 
@@ -589,6 +603,9 @@ func CreateDRSPointer(drsObj *drsapi.DrsObject, dst string, drsURI string) error
 	pointerContent := "version https://calypr.github.io/spec/v1\n"
 	pointerContent += fmt.Sprintf("oid drs:%s\n", pointerOID)
 	pointerContent += fmt.Sprintf("size %d\n", drsObj.Size)
+	if checksum := drsobject.NormalizeChecksum(hash.ConvertDrsChecksumsToHashInfo(drsObj.Checksums).SHA256); checksum != "" {
+		pointerContent += fmt.Sprintf("sha256 %s\n", strings.ToLower(checksum))
+	}
 	if err := os.WriteFile(dst, []byte(pointerContent), 0644); err != nil {
 		return fmt.Errorf("failed to write DRS pointer file: %w", err)
 	}
diff --git a/internal/lfs/object_path.go b/internal/lfs/object_path.go
index 1f25ac05..b7b1ba13 100644
--- a/internal/lfs/object_path.go
+++ b/internal/lfs/object_path.go
@@ -34,7 +34,7 @@ func cacheKeyForOID(oid string) (string, error) {
 	}
 
 	if isDRSURI(oid) {
-		sum := sha256.Sum256([]byte(normalizeDRSURI(oid)))
+		sum := sha256.Sum256([]byte("git-drs-anvil-ref:v1\n" + normalizeDRSURI(oid)))
 		return hex.EncodeToString(sum[:]), nil
 	}
 
diff --git a/internal/lfs/terra_pointer_acceptance_test.go b/internal/lfs/terra_pointer_acceptance_test.go
index 7112c866..b9b72473 100644
--- a/internal/lfs/terra_pointer_acceptance_test.go
+++ b/internal/lfs/terra_pointer_acceptance_test.go
@@ -23,6 +23,17 @@ size 11305017366
 	}
 }
 
+func TestAnVILCacheIdentityGolden(t *testing.T) {
+	got, err := cacheKeyForOID("DRS://example.org/object-1")
+	if err != nil {
+		t.Fatal(err)
+	}
+	const want = "d644000bac79ca85d486629f9271ebf2da9884b7bca0d8ad1ee514f9241cbc74"
+	if got != want {
+		t.Fatalf("cache identity changed: got %s, want %s", got, want)
+	}
+}
+
 func TestAcceptanceTerraDRSURIoidPointerHasDeterministicSHA256CacheKey(t *testing.T) {
 	const drsURI = "drs://cgc-ga4gh-api.sbgenomics.com/4c33ae65e4b08832ce3d94e9c"
 
diff --git a/internal/resolver/resolver.go b/internal/resolver/resolver.go
new file mode 100644
index 00000000..2511ba70
--- /dev/null
+++ b/internal/resolver/resolver.go
@@ -0,0 +1,237 @@
+// Package resolver provides provider-neutral DRS metadata and access resolution.
+package resolver
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"net/http"
+	"net/url"
+	"os"
+	"path"
+	"path/filepath"
+	"strings"
+
+	"golang.org/x/oauth2"
+	"golang.org/x/oauth2/google"
+)
+
+var (
+	ErrCredentials  = errors.New("google application default credentials are unavailable")
+	ErrUnauthorized = errors.New("not authorized to access AnVIL DRS object")
+	ErrNotFound     = errors.New("AnVIL DRS object not found")
+)
+
+type Resolver interface {
+	GetObject(context.Context, string) (*ResolvedObject, error)
+	GetAccess(context.Context, string, string) (*ResolvedAccess, error)
+}
+
+// DownloadToCache resolves a fresh access URL, streams into a temporary file,
+// and atomically promotes it. Neither the URL nor its headers are persisted.
+func DownloadToCache(ctx context.Context, r Resolver, drsURI, destination string) error {
+	obj, err := r.GetObject(ctx, drsURI)
+	if err != nil {
+		return err
+	}
+	if len(obj.AccessMethods) == 0 || obj.AccessMethods[0].AccessID == "" {
+		return fmt.Errorf("AnVIL DRS object has no supported access method")
+	}
+	access, err := r.GetAccess(ctx, drsURI, obj.AccessMethods[0].AccessID)
+	if err != nil {
+		return err
+	}
+	if err := os.MkdirAll(filepath.Dir(destination), 0o755); err != nil {
+		return err
+	}
+	tmp, err := os.CreateTemp(filepath.Dir(destination), ".git-drs-download-*")
+	if err != nil {
+		return err
+	}
+	tmpName := tmp.Name()
+	defer os.Remove(tmpName)
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, access.URL, nil)
+	if err != nil {
+		tmp.Close()
+		return err
+	}
+	for key, value := range access.Headers {
+		req.Header.Set(key, value)
+	}
+	resp, err := http.DefaultClient.Do(req)
+	if err != nil {
+		tmp.Close()
+		return fmt.Errorf("AnVIL data download failed")
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode < 200 || resp.StatusCode >= 300 {
+		tmp.Close()
+		return fmt.Errorf("AnVIL data download returned HTTP %d", resp.StatusCode)
+	}
+	_, copyErr := io.Copy(tmp, resp.Body)
+	closeErr := tmp.Close()
+	if copyErr != nil {
+		return fmt.Errorf("AnVIL data download interrupted: %w", copyErr)
+	}
+	if closeErr != nil {
+		return closeErr
+	}
+	if obj.Size >= 0 {
+		info, statErr := os.Stat(tmpName)
+		if statErr != nil {
+			return statErr
+		}
+		if info.Size() != obj.Size {
+			return fmt.Errorf("AnVIL data size mismatch: expected %d, got %d", obj.Size, info.Size())
+		}
+	}
+	return os.Rename(tmpName, destination)
+}
+
+type AccessMethod struct {
+	Type     string `json:"type"`
+	AccessID string `json:"access_id"`
+}
+
+type ResolvedObject struct {
+	DRSURI        string
+	ID            string         `json:"id"`
+	Name          string         `json:"name"`
+	Size          int64          `json:"size"`
+	Checksums     []Checksum     `json:"checksums"`
+	AccessMethods []AccessMethod `json:"access_methods"`
+}
+
+type Checksum struct {
+	Type     string `json:"type"`
+	Checksum string `json:"checksum"`
+}
+
+type ResolvedAccess struct {
+	URL     string            `json:"url"`
+	Headers map[string]string `json:"headers"`
+}
+
+// AnVILResolver routes every DRS authority through the configured trusted
+// Terra/AnVIL resolver endpoint. Authorization is attached only by the HTTP
+// client created for that endpoint; access URLs are returned ephemerally.
+type AnVILResolver struct {
+	endpoint *url.URL
+	client   *http.Client
+}
+
+func NewAnVIL(ctx context.Context, endpoint string) (*AnVILResolver, error) {
+	u, err := trustedEndpoint(endpoint)
+	if err != nil {
+		return nil, err
+	}
+	creds, err := google.FindDefaultCredentials(ctx, "https://www.googleapis.com/auth/cloud-platform")
+	if err != nil {
+		return nil, fmt.Errorf("%w: run `gcloud auth application-default login`: %v", ErrCredentials, err)
+	}
+	return &AnVILResolver{endpoint: u, client: &http.Client{Transport: &oauth2.Transport{Base: http.DefaultTransport, Source: creds.TokenSource}}}, nil
+}
+
+// NewAnVILWithClient supports contract tests and callers that already own an
+// authenticated, refreshing client.
+func NewAnVILWithClient(endpoint string, client *http.Client) (*AnVILResolver, error) {
+	u, err := trustedEndpoint(endpoint)
+	if err != nil {
+		return nil, err
+	}
+	if client == nil {
+		return nil, fmt.Errorf("HTTP client is required")
+	}
+	return &AnVILResolver{endpoint: u, client: client}, nil
+}
+
+func trustedEndpoint(endpoint string) (*url.URL, error) {
+	u, err := url.Parse(strings.TrimSpace(endpoint))
+	if err != nil || u.Host == "" || (u.Scheme != "https" && u.Scheme != "http") || u.User != nil {
+		return nil, fmt.Errorf("invalid AnVIL resolver endpoint")
+	}
+	return u, nil
+}
+
+func NormalizeDRSURI(raw string) (string, string, error) {
+	u, err := url.Parse(strings.TrimSpace(raw))
+	if err != nil || !strings.EqualFold(u.Scheme, "drs") || u.Host == "" || u.RawQuery != "" || u.Fragment != "" {
+		return "", "", fmt.Errorf("invalid DRS URI %q", raw)
+	}
+	id, err := url.PathUnescape(strings.TrimPrefix(u.EscapedPath(), "/"))
+	if err != nil || strings.TrimSpace(id) == "" {
+		return "", "", fmt.Errorf("invalid DRS URI %q: object ID is required", raw)
+	}
+	u.Scheme = "drs"
+	u.Host = strings.ToLower(u.Host)
+	return u.String(), id, nil
+}
+
+func (r *AnVILResolver) GetObject(ctx context.Context, drsURI string) (*ResolvedObject, error) {
+	canonical, id, err := NormalizeDRSURI(drsURI)
+	if err != nil {
+		return nil, err
+	}
+	var obj ResolvedObject
+	if err := r.getJSON(ctx, r.apiURL("objects", id), &obj); err != nil {
+		return nil, err
+	}
+	obj.DRSURI = canonical
+	if obj.ID == "" {
+		obj.ID = id
+	}
+	return &obj, nil
+}
+
+func (r *AnVILResolver) GetAccess(ctx context.Context, drsURI, accessID string) (*ResolvedAccess, error) {
+	_, id, err := NormalizeDRSURI(drsURI)
+	if err != nil {
+		return nil, err
+	}
+	if strings.TrimSpace(accessID) == "" {
+		return nil, fmt.Errorf("access ID is required")
+	}
+	var access ResolvedAccess
+	if err := r.getJSON(ctx, r.apiURL("objects", id, "access", accessID), &access); err != nil {
+		return nil, err
+	}
+	if strings.TrimSpace(access.URL) == "" {
+		return nil, fmt.Errorf("AnVIL resolver returned an empty access URL")
+	}
+	return &access, nil
+}
+
+func (r *AnVILResolver) apiURL(parts ...string) string {
+	u := *r.endpoint
+	segments := append([]string{u.Path, "ga4gh", "drs", "v1"}, parts...)
+	u.Path = path.Join(segments...)
+	return u.String()
+}
+
+func (r *AnVILResolver) getJSON(ctx context.Context, endpoint string, dst any) error {
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, endpoint, nil)
+	if err != nil {
+		return err
+	}
+	resp, err := r.client.Do(req)
+	if err != nil {
+		return fmt.Errorf("AnVIL resolver unavailable: %w", err)
+	}
+	defer resp.Body.Close()
+	switch resp.StatusCode {
+	case http.StatusUnauthorized, http.StatusForbidden:
+		return ErrUnauthorized
+	case http.StatusNotFound:
+		return ErrNotFound
+	}
+	if resp.StatusCode < 200 || resp.StatusCode >= 300 {
+		_, _ = io.Copy(io.Discard, io.LimitReader(resp.Body, 4096))
+		return fmt.Errorf("AnVIL resolver returned HTTP %d", resp.StatusCode)
+	}
+	if err := json.NewDecoder(io.LimitReader(resp.Body, 4<<20)).Decode(dst); err != nil {
+		return fmt.Errorf("decode AnVIL resolver response: %w", err)
+	}
+	return nil
+}
diff --git a/internal/resolver/resolver_test.go b/internal/resolver/resolver_test.go
new file mode 100644
index 00000000..1f3a429a
--- /dev/null
+++ b/internal/resolver/resolver_test.go
@@ -0,0 +1,51 @@
+package resolver
+
+import (
+	"context"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+)
+
+func TestAnVILResolverContract(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		switch r.URL.Path {
+		case "/ga4gh/drs/v1/objects/object-1":
+			_, _ = w.Write([]byte(`{"id":"object-1","size":4,"checksums":[{"type":"sha256","checksum":"abcd"}],"access_methods":[{"type":"https","access_id":"a1"}]}`))
+		case "/ga4gh/drs/v1/objects/object-1/access/a1":
+			_, _ = w.Write([]byte(`{"url":"https://storage.example/signed"}`))
+		default:
+			http.NotFound(w, r)
+		}
+	}))
+	defer server.Close()
+	r, err := NewAnVILWithClient(server.URL, server.Client())
+	if err != nil {
+		t.Fatal(err)
+	}
+	obj, err := r.GetObject(context.Background(), "DRS://AUTHORITY.EXAMPLE/object-1")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if obj.DRSURI != "drs://authority.example/object-1" || obj.Size != 4 || obj.AccessMethods[0].AccessID != "a1" {
+		t.Fatalf("unexpected object: %+v", obj)
+	}
+	access, err := r.GetAccess(context.Background(), obj.DRSURI, "a1")
+	if err != nil || access.URL != "https://storage.example/signed" {
+		t.Fatalf("unexpected access result: %+v, %v", access, err)
+	}
+}
+
+func TestAnVILResolverRedactsErrorBodiesAndClassifiesAuthorization(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		http.Error(w, "Bearer secret signed=https://secret", http.StatusForbidden)
+	}))
+	defer server.Close()
+	r, _ := NewAnVILWithClient(server.URL, server.Client())
+	_, err := r.GetObject(context.Background(), "drs://example.org/object")
+	if !errors.Is(err, ErrUnauthorized) || strings.Contains(err.Error(), "secret") {
+		t.Fatalf("expected redacted authorization error, got %v", err)
+	}
+}

From 1d833f85748a17ba13cbbb209a10d8fcec1f6bae Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 20 Jul 2026 14:35:06 -0700
Subject: [PATCH 17/66] Fix unknown flag error in git drs command

---
 cmd/remote/add/init.go       |  8 +++++
 cmd/remote/add/terra.go      | 58 ++++++++++++++++++++++++++++++++++++
 cmd/remote/add/terra_test.go | 58 ++++++++++++++++++++++++++++++++++++
 3 files changed, 124 insertions(+)
 create mode 100644 cmd/remote/add/terra.go
 create mode 100644 cmd/remote/add/terra_test.go

diff --git a/cmd/remote/add/init.go b/cmd/remote/add/init.go
index 4248b546..514a01e7 100644
--- a/cmd/remote/add/init.go
+++ b/cmd/remote/add/init.go
@@ -9,6 +9,9 @@ var (
 	localPassword  string
 	localUsername  string
 	noSkipSmudge   bool
+	terraEndpoint  string
+	terraAuth      string
+	terraMode      string
 )
 
 // Cmd line declaration
@@ -29,4 +32,9 @@ func init() {
 	LocalCmd.Flags().StringVar(&localPassword, "password", "", "Password for local DRS HTTP basic auth")
 	LocalCmd.Flags().BoolVar(&noSkipSmudge, "no-skip-smudge", false, "Disable skipping smudge filter (force downloading file contents during checkout)")
 	Cmd.AddCommand(LocalCmd)
+
+	TerraCmd.Flags().StringVar(&terraEndpoint, "drs-endpoint", "", "Terra DRS service base URL")
+	TerraCmd.Flags().StringVar(&terraAuth, "auth", "", "Terra authentication method (google-adc)")
+	TerraCmd.Flags().StringVar(&terraMode, "mode", "", "Terra remote mode (read-only)")
+	Cmd.AddCommand(TerraCmd)
 }
diff --git a/cmd/remote/add/terra.go b/cmd/remote/add/terra.go
new file mode 100644
index 00000000..c3da6892
--- /dev/null
+++ b/cmd/remote/add/terra.go
@@ -0,0 +1,58 @@
+package add
+
+import (
+	"fmt"
+	"net/url"
+	"strings"
+
+	"github.com/calypr/git-drs/cmd/initialize"
+	"github.com/calypr/git-drs/internal/config"
+	"github.com/calypr/git-drs/internal/drslog"
+	"github.com/spf13/cobra"
+)
+
+var TerraCmd = &cobra.Command{
+	Use:   "terra <remote-name>",
+	Short: "Add a read-only Terra DRS remote",
+	Args:  cobra.ExactArgs(1),
+	RunE: func(cmd *cobra.Command, args []string) error {
+		remoteName := strings.TrimSpace(args[0])
+		if remoteName == "" {
+			return fmt.Errorf("remote name is required")
+		}
+		endpoint, err := validateTerraOptions(terraEndpoint, terraAuth, terraMode)
+		if err != nil {
+			return err
+		}
+		if err := initialize.EnsureInitialized(drslog.GetLogger()); err != nil {
+			return fmt.Errorf("failed to initialize repository: %w", err)
+		}
+
+		newConfig, err := config.UpdateRemote(config.Remote(remoteName), config.RemoteSelect{
+			Terra: &config.TerraRemote{Endpoint: endpoint, Auth: terraAuth, Mode: terraMode},
+		})
+		if err != nil {
+			return fmt.Errorf("failed to update remote config: %w", err)
+		}
+		fmt.Printf("Added remote '%s'. Config: %v\n", remoteName, newConfig.GetRemote(config.Remote(remoteName)))
+		return nil
+	},
+}
+
+func validateTerraOptions(endpoint, auth, mode string) (string, error) {
+	endpoint = strings.TrimSpace(endpoint)
+	if endpoint == "" {
+		return "", fmt.Errorf("--drs-endpoint is required")
+	}
+	u, err := url.ParseRequestURI(endpoint)
+	if err != nil || u.Scheme != "https" || u.Host == "" || u.User != nil {
+		return "", fmt.Errorf("--drs-endpoint must be an HTTPS URL without credentials")
+	}
+	if auth != "google-adc" {
+		return "", fmt.Errorf("--auth must be google-adc")
+	}
+	if mode != "read-only" {
+		return "", fmt.Errorf("--mode must be read-only")
+	}
+	return u.String(), nil
+}
diff --git a/cmd/remote/add/terra_test.go b/cmd/remote/add/terra_test.go
new file mode 100644
index 00000000..c203a6e8
--- /dev/null
+++ b/cmd/remote/add/terra_test.go
@@ -0,0 +1,58 @@
+package add
+
+import (
+	"testing"
+
+	"github.com/calypr/git-drs/internal/config"
+	"github.com/calypr/git-drs/internal/testutils"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestAddTerraRemoteCommand(t *testing.T) {
+	assert.Equal(t, "terra <remote-name>", TerraCmd.Use)
+	assert.NotNil(t, TerraCmd.Flag("drs-endpoint"))
+	assert.NotNil(t, TerraCmd.Flag("auth"))
+	assert.NotNil(t, TerraCmd.Flag("mode"))
+}
+
+func TestValidateTerraOptions(t *testing.T) {
+	endpoint, err := validateTerraOptions("https://data.terra.bio", "google-adc", "read-only")
+	require.NoError(t, err)
+	assert.Equal(t, "https://data.terra.bio", endpoint)
+
+	for name, options := range map[string][3]string{
+		"missing endpoint": {"", "google-adc", "read-only"},
+		"HTTP endpoint":    {"http://data.terra.bio", "google-adc", "read-only"},
+		"URL credentials":  {"https://user:pass@data.terra.bio", "google-adc", "read-only"},
+		"unsupported auth": {"https://data.terra.bio", "token", "read-only"},
+		"writable mode":    {"https://data.terra.bio", "google-adc", "write"},
+	} {
+		t.Run(name, func(t *testing.T) {
+			_, err := validateTerraOptions(options[0], options[1], options[2])
+			assert.Error(t, err)
+		})
+	}
+}
+
+func TestTerraRemoteAddPersistsConfig(t *testing.T) {
+	testutils.SetupTestGitRepo(t)
+	terraEndpoint = "https://data.terra.bio"
+	terraAuth = "google-adc"
+	terraMode = "read-only"
+	t.Cleanup(func() {
+		terraEndpoint = ""
+		terraAuth = ""
+		terraMode = ""
+	})
+
+	require.NoError(t, TerraCmd.RunE(TerraCmd, []string{"anvil"}))
+	cfg, err := config.LoadConfig()
+	require.NoError(t, err)
+	remote := cfg.Remotes[config.Remote("anvil")].Terra
+	require.NotNil(t, remote)
+	assert.Equal(t, "https://data.terra.bio", remote.Endpoint)
+	assert.Equal(t, "google-adc", remote.Auth)
+	assert.Equal(t, "read-only", remote.Mode)
+	assert.Equal(t, config.Remote("anvil"), cfg.DefaultRemote)
+}

From c3fe7f3db3863a500837ab70ea699c8f934777db Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 20 Jul 2026 15:51:01 -0700
Subject: [PATCH 18/66] fix drs uri validation

---
 internal/resolver/resolver.go      | 23 ++++++++++++++++++++++-
 internal/resolver/resolver_test.go | 23 +++++++++++++++++++++++
 2 files changed, 45 insertions(+), 1 deletion(-)

diff --git a/internal/resolver/resolver.go b/internal/resolver/resolver.go
index 2511ba70..f06e6afc 100644
--- a/internal/resolver/resolver.go
+++ b/internal/resolver/resolver.go
@@ -156,7 +156,28 @@ func trustedEndpoint(endpoint string) (*url.URL, error) {
 }
 
 func NormalizeDRSURI(raw string) (string, string, error) {
-	u, err := url.Parse(strings.TrimSpace(raw))
+	trimmed := strings.TrimSpace(raw)
+	// DRS compact identifiers use a colon between the authority and object ID
+	// (for example, drs://drs.anv0:v2_...). net/url interprets that colon as
+	// the beginning of a port and rejects the URI before we can extract the ID.
+	if len(trimmed) >= len("drs://") && strings.EqualFold(trimmed[:len("drs://")], "drs://") {
+		remainder := trimmed[len("drs://"):]
+		if separator := strings.IndexByte(remainder, ':'); separator >= 0 && !strings.Contains(remainder[:separator], "/") {
+			authority, escapedID := remainder[:separator], remainder[separator+1:]
+			authorityURL, authorityErr := url.Parse("https://" + authority)
+			id, idErr := url.PathUnescape(escapedID)
+			if authorityErr != nil || authorityURL.Host != authority || authorityURL.Hostname() == "" || authorityURL.User != nil ||
+				strings.ContainsAny(escapedID, "?#/") {
+				return "", "", fmt.Errorf("invalid DRS URI %q", raw)
+			}
+			if idErr != nil || strings.TrimSpace(id) == "" {
+				return "", "", fmt.Errorf("invalid DRS URI %q: object ID is required", raw)
+			}
+			return "drs://" + strings.ToLower(authority) + ":" + escapedID, id, nil
+		}
+	}
+
+	u, err := url.Parse(trimmed)
 	if err != nil || !strings.EqualFold(u.Scheme, "drs") || u.Host == "" || u.RawQuery != "" || u.Fragment != "" {
 		return "", "", fmt.Errorf("invalid DRS URI %q", raw)
 	}
diff --git a/internal/resolver/resolver_test.go b/internal/resolver/resolver_test.go
index 1f3a429a..11eb3b73 100644
--- a/internal/resolver/resolver_test.go
+++ b/internal/resolver/resolver_test.go
@@ -38,6 +38,29 @@ func TestAnVILResolverContract(t *testing.T) {
 	}
 }
 
+func TestAnVILResolverAcceptsCompactDRSURI(t *testing.T) {
+	const compactURI = "drs://drs.anv0:v2_e68887be-c583-375a-a773-48771192c8fa"
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.URL.Path != "/ga4gh/drs/v1/objects/v2_e68887be-c583-375a-a773-48771192c8fa" {
+			t.Fatalf("unexpected resolver path: %s", r.URL.Path)
+		}
+		_, _ = w.Write([]byte(`{"id":"v2_e68887be-c583-375a-a773-48771192c8fa","size":42}`))
+	}))
+	defer server.Close()
+
+	r, err := NewAnVILWithClient(server.URL, server.Client())
+	if err != nil {
+		t.Fatal(err)
+	}
+	obj, err := r.GetObject(context.Background(), compactURI)
+	if err != nil {
+		t.Fatalf("compact DRS URI should be valid: %v", err)
+	}
+	if obj.DRSURI != compactURI || obj.ID != "v2_e68887be-c583-375a-a773-48771192c8fa" {
+		t.Fatalf("unexpected object: %+v", obj)
+	}
+}
+
 func TestAnVILResolverRedactsErrorBodiesAndClassifiesAuthorization(t *testing.T) {
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
 		http.Error(w, "Bearer secret signed=https://secret", http.StatusForbidden)

From 4563ac8411b307a4af15c51088f4f6446af54140 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 20 Jul 2026 16:35:11 -0700
Subject: [PATCH 19/66] fix clean-filter bug

---
 cmd/addref/add-ref.go         |  6 +++++
 cmd/addref/add-ref_test.go    | 49 +++++++++++++++++++++++++++++++++++
 docs/anvil.md                 |  1 +
 docs/commands.md              |  4 +++
 docs/troubleshooting.md       | 21 +++++++++++++++
 internal/filter/clean.go      |  8 ++++--
 internal/filter/clean_test.go | 29 +++++++++++++++++++++
 internal/lfs/object_path.go   |  6 +++--
 8 files changed, 120 insertions(+), 4 deletions(-)

diff --git a/cmd/addref/add-ref.go b/cmd/addref/add-ref.go
index 09545e9d..f181e473 100644
--- a/cmd/addref/add-ref.go
+++ b/cmd/addref/add-ref.go
@@ -116,6 +116,9 @@ var Cmd = &cobra.Command{
 		} else if err := lfs.CreateDRSPointer(&obj, dstPath, drsUri); err != nil {
 			return err
 		}
+		if _, err := gitrepo.TrackReadOnly(cmd.Context(), args[1]); err != nil {
+			return fmt.Errorf("track add-ref destination %s: %w", args[1], err)
+		}
 		if obj.SelfUri == "" {
 			obj.SelfUri = drsUri
 		}
@@ -273,6 +276,9 @@ func runManifest(cmd *cobra.Command, filename string) error {
 		if err != nil {
 			return err
 		}
+		if _, err := gitrepo.TrackReadOnly(cmd.Context(), e.path); err != nil {
+			return fmt.Errorf("track add-ref destination %s: %w", e.path, err)
+		}
 	}
 	fmt.Fprintf(cmd.OutOrStdout(), "%d reference(s) %s\n", len(entries), map[bool]string{true: "validated", false: "added"}[dryRun])
 	return nil
diff --git a/cmd/addref/add-ref_test.go b/cmd/addref/add-ref_test.go
index 6f7cf772..c18828c4 100644
--- a/cmd/addref/add-ref_test.go
+++ b/cmd/addref/add-ref_test.go
@@ -5,12 +5,14 @@ import (
 	"net/http"
 	"net/http/httptest"
 	"os"
+	"os/exec"
 	"path/filepath"
 	"strings"
 	"testing"
 
 	"github.com/calypr/git-drs/internal/config"
 	"github.com/calypr/git-drs/internal/drslog"
+	"github.com/calypr/git-drs/internal/gitrepo"
 	"github.com/calypr/git-drs/internal/lfs"
 	"github.com/calypr/git-drs/internal/remoteruntime"
 	drsapi "github.com/calypr/syfon/apigen/client/drs"
@@ -75,6 +77,53 @@ func TestCreateDRSPointerPreservesSourceURI(t *testing.T) {
 	}
 }
 
+func TestAddRefTrackingMakesDRSPointerDiscoverable(t *testing.T) {
+	repo := t.TempDir()
+	runGitCmd(t, repo, "init")
+	runGitCmd(t, repo, "config", "user.email", "test@example.com")
+	runGitCmd(t, repo, "config", "user.name", "Test User")
+
+	oldWD, err := os.Getwd()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Chdir(repo); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = os.Chdir(oldWD) })
+
+	const path = "population_descriptor.tsv"
+	obj := &drsapi.DrsObject{Size: 200184}
+	if err := lfs.CreateDRSPointer(obj, path, "drs://drs.anv0:v2_example"); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := gitrepo.TrackReadOnly(context.Background(), path); err != nil {
+		t.Fatal(err)
+	}
+	runGitCmd(t, repo, "add", ".gitattributes", path)
+
+	files, err := lfs.GetTrackedLfsFiles(drslog.NewNoOpLogger())
+	if err != nil {
+		t.Fatal(err)
+	}
+	info, ok := files[path]
+	if !ok {
+		t.Fatalf("expected add-ref pointer to be discoverable, got %+v", files)
+	}
+	if info.OidType != "drs" || info.Oid != "//drs.anv0:v2_example" || info.Size != 200184 {
+		t.Fatalf("unexpected pointer inventory: %+v", info)
+	}
+}
+
+func runGitCmd(t *testing.T, dir string, args ...string) {
+	t.Helper()
+	cmd := exec.Command("git", args...)
+	cmd.Dir = dir
+	if out, err := cmd.CombinedOutput(); err != nil {
+		t.Fatalf("git %v failed: %v: %s", args, err, out)
+	}
+}
+
 func TestResolveAddRefObjectUsesSourceAuthorityRemoteCredentials(t *testing.T) {
 	var primaryRequests int
 	primary := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
diff --git a/docs/anvil.md b/docs/anvil.md
index 2c142ad7..c51f5217 100644
--- a/docs/anvil.md
+++ b/docs/anvil.md
@@ -45,6 +45,7 @@ Use the configured remote and choose the path that the data should occupy:
 ```bash
 git drs add-ref --remote anvil \
   drs://<authority>/<object-id> data/sample.cram
+# Run this only after add-ref finishes successfully.
 git add .git-drs/config.yaml .gitattributes data/sample.cram
 git commit -m "Reference AnVIL sample"
 git push
diff --git a/docs/commands.md b/docs/commands.md
index e2cba9fe..fe371139 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -287,6 +287,10 @@ Add a local pointer file for an existing DRS object. If the source DRS object ha
 git drs add-ref drs://example/object-id data/object.bin
 ```
 
+`add-ref` also adds an exact read-only `filter=drs` rule for the destination to
+`.gitattributes`. Stage that file together with the pointer so local inventory
+commands such as `git drs ls-files` can discover the reference.
+
 ### `git drs query <drs-id>`
 
 Query a DRS object by ID or checksum.
diff --git a/docs/troubleshooting.md b/docs/troubleshooting.md
index a65142f7..63e30573 100644
--- a/docs/troubleshooting.md
+++ b/docs/troubleshooting.md
@@ -188,6 +188,11 @@ git drs pull
 
 ### `git drs ls-files` does not show my file
 
+This is not expected for a pointer created by a current `git drs add-ref`:
+`add-ref` automatically adds its destination to `.gitattributes`. For pointers
+created with an older version, add the tracking rule with
+`git drs track path/to/file` and stage `.gitattributes`.
+
 Check these in order:
 
 1. is the path actually tracked?
@@ -214,6 +219,22 @@ git ls-files -- path/to/file
 git drs ls-files -l
 ```
 
+### `git add ... git drs add-ref --remote ...` reports `unknown option 'remote'`
+
+`git add` and `git drs add-ref` are separate commands. If they are entered on
+the same command line, Git interprets `--remote` as an option to `git add`,
+which does not have that option.
+
+Create the reference first, then stage the generated pointer and tracking rule:
+
+```bash
+git drs add-ref --remote anvil drs://drs.anv0:v2_example subject.tsv
+git add .gitattributes subject.tsv
+git commit -m "Add subject.tsv reference"
+```
+
+Do not prefix the `git drs add-ref` command with `git add`.
+
 ### `git remote remove` did not remove my `git-drs` remote
 
 That is expected.
diff --git a/internal/filter/clean.go b/internal/filter/clean.go
index bb0b019d..15f66ca9 100644
--- a/internal/filter/clean.go
+++ b/internal/filter/clean.go
@@ -73,8 +73,12 @@ func CleanContent(_ context.Context, lfsRoot, pathname string, content io.Reader
 				if _, err := dst.Write(data); err != nil {
 					return fmt.Errorf("clean: write existing pointer: %w", err)
 				}
-				if mapErr := writeDrsMap(pathname, pointerOID, pointerSize); mapErr != nil {
-					logger.Warn("clean: failed to write DRS map entry for existing pointer", "pathname", pathname, "error", mapErr)
+				// DRS URI pointers already carry their durable lookup identity. The
+				// SHA256-keyed sidecar map is only applicable to SHA256 pointers.
+				if !lfs.IsDRSURI(pointerOID) {
+					if mapErr := writeDrsMap(pathname, pointerOID, pointerSize); mapErr != nil {
+						logger.Warn("clean: failed to write DRS map entry for existing pointer", "pathname", pathname, "error", mapErr)
+					}
 				}
 				logger.Debug("clean: passed through existing LFS pointer", "pathname", pathname, "oid", pointerOID, "size", pointerSize)
 				return nil
diff --git a/internal/filter/clean_test.go b/internal/filter/clean_test.go
index fbfd1766..0c03dea6 100644
--- a/internal/filter/clean_test.go
+++ b/internal/filter/clean_test.go
@@ -9,6 +9,7 @@ import (
 	"log/slog"
 	"os"
 	"path/filepath"
+	"strings"
 	"testing"
 
 	"github.com/calypr/git-drs/internal/drsobject"
@@ -69,3 +70,31 @@ func TestCleanContentPassesThroughExistingPointer(t *testing.T) {
 		}
 	}
 }
+
+func TestCleanContentPassesThroughDRSURIWithoutSHA256MapWarning(t *testing.T) {
+	repo := t.TempDir()
+	orig, err := os.Getwd()
+	if err != nil {
+		t.Fatalf("getwd: %v", err)
+	}
+	defer os.Chdir(orig)
+	if err := os.Chdir(repo); err != nil {
+		t.Fatalf("chdir: %v", err)
+	}
+
+	const pointer = "version https://calypr.github.io/spec/v1\n" +
+		"oid drs://drs.anv0:v2_e68887be-c583-375a-a773-48771192c8fa\n" +
+		"size 200184\n"
+	var out bytes.Buffer
+	var logs bytes.Buffer
+	logger := slog.New(slog.NewTextHandler(&logs, nil))
+	if err := CleanContent(context.Background(), filepath.Join(repo, ".git", "lfs"), "population_descriptor.tsv", bytes.NewBufferString(pointer), &out, logger); err != nil {
+		t.Fatalf("CleanContent returned error: %v", err)
+	}
+	if out.String() != pointer {
+		t.Fatalf("expected DRS pointer passthrough, got %q", out.String())
+	}
+	if strings.Contains(logs.String(), "failed to write DRS map entry") {
+		t.Fatalf("DRS URI pointer must not be written to the SHA256 map: %s", logs.String())
+	}
+}
diff --git a/internal/lfs/object_path.go b/internal/lfs/object_path.go
index b7b1ba13..c2031959 100644
--- a/internal/lfs/object_path.go
+++ b/internal/lfs/object_path.go
@@ -33,7 +33,7 @@ func cacheKeyForOID(oid string) (string, error) {
 		return strings.ToLower(oid), nil
 	}
 
-	if isDRSURI(oid) {
+	if IsDRSURI(oid) {
 		sum := sha256.Sum256([]byte("git-drs-anvil-ref:v1\n" + normalizeDRSURI(oid)))
 		return hex.EncodeToString(sum[:]), nil
 	}
@@ -41,7 +41,9 @@ func cacheKeyForOID(oid string) (string, error) {
 	return "", fmt.Errorf("error: %s is not a valid sha256 hash or DRS URI", oid)
 }
 
-func isDRSURI(uri string) bool {
+// IsDRSURI reports whether uri is a canonical DRS URI or the //authority/path
+// form stored internally after parsing a git-drs pointer's "oid drs:" line.
+func IsDRSURI(uri string) bool {
 	uri = strings.TrimSpace(uri)
 	return strings.HasPrefix(strings.ToLower(uri), "drs://") || strings.HasPrefix(uri, "//")
 }

From 5bb0921dc4bde0bcc8778175f5a8b87f3a7396ca Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 20 Jul 2026 17:06:47 -0700
Subject: [PATCH 20/66] Keep hydrated DRS URI references clean.

---
 cmd/pull/pull_test.go         | 10 +++--
 internal/filter/clean.go      | 73 +++++++++++++++++++++++++++++++++++
 internal/filter/clean_test.go | 57 +++++++++++++++++++++++++++
 3 files changed, 137 insertions(+), 3 deletions(-)

diff --git a/cmd/pull/pull_test.go b/cmd/pull/pull_test.go
index dd77e67b..c6c7fe49 100644
--- a/cmd/pull/pull_test.go
+++ b/cmd/pull/pull_test.go
@@ -335,9 +335,13 @@ func TestRefreshGitIndexForHydratedFilesClearsDirtyStatus(t *testing.T) {
 
 	worktreePath := filepath.Join(repo, "sample.bin")
 	payload := []byte("hello world payload")
-	sum := sha256.Sum256(payload)
-	oid := hex.EncodeToString(sum[:])
-	writePointerFile(t, worktreePath, oid, strconv.Itoa(len(payload)))
+	oid := "drs://drs.anv0:v2_example-without-sha256"
+	pointer := "version https://calypr.github.io/spec/v1\n" +
+		"oid " + oid + "\n" +
+		"size " + strconv.Itoa(len(payload)) + "\n"
+	if err := os.WriteFile(worktreePath, []byte(pointer), 0o644); err != nil {
+		t.Fatalf("write DRS pointer: %v", err)
+	}
 
 	runGitCmdTest(t, repo, "add", ".gitattributes", "sample.bin")
 	runGitCmdTest(t, repo, "commit", "-m", "commit pointer")
diff --git a/internal/filter/clean.go b/internal/filter/clean.go
index 15f66ca9..5d7d4004 100644
--- a/internal/filter/clean.go
+++ b/internal/filter/clean.go
@@ -8,7 +8,10 @@ import (
 	"io"
 	"log/slog"
 	"os"
+	"os/exec"
 	"path/filepath"
+	"strconv"
+	"strings"
 
 	"github.com/calypr/git-drs/internal/drsobject"
 	"github.com/calypr/git-drs/internal/gitrepo"
@@ -67,6 +70,19 @@ func CleanContent(_ context.Context, lfsRoot, pathname string, content io.Reader
 	size := written
 	oid := hex.EncodeToString(h.Sum(nil))
 
+	// A DRS pointer can use the durable DRS URI as its oid rather than the
+	// payload checksum. When Git asks the clean filter to inspect a hydrated
+	// file, preserve that indexed pointer if its recorded checksum proves the
+	// worktree payload is unchanged. Otherwise hydration would turn the URI
+	// pointer into a SHA256 LFS pointer and appear as a staged modification.
+	if pointer, ok := matchingIndexedDRSPointer(pathname, oid, size); ok {
+		if _, err := dst.Write(pointer); err != nil {
+			return fmt.Errorf("clean: write indexed DRS pointer: %w", err)
+		}
+		logger.Debug("clean: restored indexed DRS pointer for hydrated content", "pathname", pathname, "oid", oid, "size", size)
+		return nil
+	}
+
 	if size > 0 && size < 2048 {
 		if data, readErr := os.ReadFile(tmpPath); readErr == nil {
 			if pointerOID, pointerSize, ok := lfs.ParseLFSPointer(data); ok {
@@ -113,3 +129,60 @@ func CleanContent(_ context.Context, lfsRoot, pathname string, content io.Reader
 
 	return nil
 }
+
+func matchingIndexedDRSPointer(pathname, contentOID string, size int64) ([]byte, bool) {
+	pathname = filepath.ToSlash(filepath.Clean(pathname))
+	if pathname == "." || pathname == ".." || strings.HasPrefix(pathname, "../") {
+		return nil, false
+	}
+	cmd := exec.Command("git", "show", ":"+pathname)
+	pointer, err := cmd.Output()
+	if err != nil {
+		return nil, false
+	}
+	pointerOID, pointerSize, ok := lfs.ParseLFSPointer(pointer)
+	if !ok || !lfs.IsDRSURI(pointerOID) || pointerSize != size {
+		return nil, false
+	}
+	// Some DRS services do not publish a SHA256 checksum. In that case compare
+	// the worktree payload with the validated object cached by pull. This keeps
+	// status clean without hiding a same-sized edit made after hydration.
+	if cachedOID, ok := cachedObjectOID(pointerOID, size); ok && cachedOID == contentOID {
+		return pointer, true
+	}
+	for _, line := range strings.Split(string(pointer), "\n") {
+		fields := strings.Fields(line)
+		if len(fields) == 2 && strings.EqualFold(fields[0], "sha256") {
+			checksum := strings.TrimPrefix(strings.ToLower(fields[1]), "sha256:")
+			if checksum == contentOID {
+				return pointer, true
+			}
+		}
+		if len(fields) == 2 && fields[0] == "size" {
+			// Reject malformed sizes even if a future pointer parser becomes
+			// more permissive.
+			if parsed, err := strconv.ParseInt(fields[1], 10, 64); err != nil || parsed != size {
+				return nil, false
+			}
+		}
+	}
+	return nil, false
+}
+
+func cachedObjectOID(pointerOID string, size int64) (string, bool) {
+	cachePath, err := lfs.ObjectPath(gitrepo.LFSObjectsPath, pointerOID)
+	if err != nil {
+		return "", false
+	}
+	f, err := os.Open(cachePath)
+	if err != nil {
+		return "", false
+	}
+	defer f.Close()
+	h := sha256.New()
+	written, err := io.Copy(h, f)
+	if err != nil || written != size {
+		return "", false
+	}
+	return hex.EncodeToString(h.Sum(nil)), true
+}
diff --git a/internal/filter/clean_test.go b/internal/filter/clean_test.go
index 0c03dea6..af7901d1 100644
--- a/internal/filter/clean_test.go
+++ b/internal/filter/clean_test.go
@@ -5,9 +5,11 @@ import (
 	"context"
 	"crypto/sha256"
 	"encoding/hex"
+	"fmt"
 	"io"
 	"log/slog"
 	"os"
+	"os/exec"
 	"path/filepath"
 	"strings"
 	"testing"
@@ -71,6 +73,61 @@ func TestCleanContentPassesThroughExistingPointer(t *testing.T) {
 	}
 }
 
+func TestCleanContentPreservesIndexedDRSPointerForHydratedPayload(t *testing.T) {
+	repo := t.TempDir()
+	payload := []byte("hydrated population data\n")
+	pointer := "version https://calypr.github.io/spec/v1\n" +
+		"oid drs://drs.anv0:v2_example\n" +
+		"size " + fmt.Sprint(len(payload)) + "\n"
+	path := filepath.Join(repo, "population_descriptor.tsv")
+	if err := os.WriteFile(path, []byte(pointer), 0o644); err != nil {
+		t.Fatalf("write pointer: %v", err)
+	}
+	for _, args := range [][]string{{"init"}, {"add", "population_descriptor.tsv"}} {
+		cmd := exec.Command("git", args...)
+		cmd.Dir = repo
+		if out, err := cmd.CombinedOutput(); err != nil {
+			t.Fatalf("git %v: %v: %s", args, err, out)
+		}
+	}
+
+	orig, err := os.Getwd()
+	if err != nil {
+		t.Fatalf("getwd: %v", err)
+	}
+	defer os.Chdir(orig)
+	if err := os.Chdir(repo); err != nil {
+		t.Fatalf("chdir: %v", err)
+	}
+	cachePath, err := lfs.ObjectPath(gitrepo.LFSObjectsPath, "drs://drs.anv0:v2_example")
+	if err != nil {
+		t.Fatalf("ObjectPath: %v", err)
+	}
+	if err := os.MkdirAll(filepath.Dir(cachePath), 0o755); err != nil {
+		t.Fatalf("mkdir cache: %v", err)
+	}
+	if err := os.WriteFile(cachePath, payload, 0o644); err != nil {
+		t.Fatalf("write cache: %v", err)
+	}
+	var out bytes.Buffer
+	logger := slog.New(slog.NewTextHandler(io.Discard, nil))
+	if err := CleanContent(context.Background(), filepath.Join(repo, ".git", "lfs"), "population_descriptor.tsv", bytes.NewReader(payload), &out, logger); err != nil {
+		t.Fatalf("CleanContent: %v", err)
+	}
+	if out.String() != pointer {
+		t.Fatalf("expected indexed DRS pointer, got %q", out.String())
+	}
+
+	changed := bytes.Repeat([]byte("x"), len(payload))
+	out.Reset()
+	if err := CleanContent(context.Background(), filepath.Join(repo, ".git", "lfs"), "population_descriptor.tsv", bytes.NewReader(changed), &out, logger); err != nil {
+		t.Fatalf("CleanContent changed payload: %v", err)
+	}
+	if out.String() == pointer {
+		t.Fatal("same-sized changed payload must not be hidden by the indexed DRS pointer")
+	}
+}
+
 func TestCleanContentPassesThroughDRSURIWithoutSHA256MapWarning(t *testing.T) {
 	repo := t.TempDir()
 	orig, err := os.Getwd()

From 19475be275326ab92393039c51678e826adea937 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 20 Jul 2026 17:34:15 -0700
Subject: [PATCH 21/66] adds presentation

---
 docs/anvil-terra-poc-presentation.html | 197 +++++++++++++++++++++++++
 1 file changed, 197 insertions(+)
 create mode 100644 docs/anvil-terra-poc-presentation.html

diff --git a/docs/anvil-terra-poc-presentation.html b/docs/anvil-terra-poc-presentation.html
new file mode 100644
index 00000000..a5b7df72
--- /dev/null
+++ b/docs/anvil-terra-poc-presentation.html
@@ -0,0 +1,197 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>AnVIL + Terra × git-drs — reference POC</title>
+  <style>
+    :root { --navy:#10253f; --blue:#1d70a2; --cyan:#54c6be; --gold:#f4b942; --paper:#f6f8fb; --ink:#152334; --muted:#607084; --red:#c84b45; }
+    * { box-sizing:border-box } body { margin:0; background:#081827; color:var(--ink); font-family:Inter, ui-sans-serif, system-ui, sans-serif; overflow:hidden }
+    .deck { height:100vh; display:grid; place-items:center }
+    .slide { display:none; position:relative; width:min(100vw,177.78vh); height:min(100vh,56.25vw); padding:6% 7%; overflow:hidden; background:var(--paper) }
+    .slide.active { display:block }
+    .slide::after { content:attr(data-n); position:absolute; right:3%; bottom:3%; color:#8b98a8; font-size:1.4vh; font-weight:700 }
+    h1,h2,h3,p { margin-top:0 } h1 { font-size:6.2vh; line-height:1.02; letter-spacing:-.045em } h2 { color:var(--navy); font-size:4.2vh; letter-spacing:-.025em; margin-bottom:3.5vh } h3 { font-size:2.35vh; color:var(--blue); margin-bottom:1vh }
+    p,li { font-size:2.1vh; line-height:1.45 } ul,ol { padding-left:1.4em; margin:1vh 0 } li { margin:.65vh 0 } strong { color:var(--navy) }
+    .eyebrow { color:var(--blue); text-transform:uppercase; letter-spacing:.17em; font-size:1.45vh; font-weight:800; margin-bottom:2vh }
+    .subtitle { font-size:2.5vh; color:var(--muted); max-width:70%; line-height:1.4 }
+    .grid2 { display:grid; grid-template-columns:1fr 1fr; gap:4vh } .grid3 { display:grid; grid-template-columns:repeat(3,1fr); gap:2.5vh }
+    .card { background:white; border:1px solid #dce3eb; border-radius:1.3vh; padding:2.2vh; box-shadow:0 1vh 2.5vh #17324d0b }
+    .card p,.card li { font-size:1.75vh } .card h3 { display:flex; gap:.7vh; align-items:center }
+    .tag { display:inline-block; background:#dff4f1; color:#176b68; border-radius:99px; padding:.45vh 1vh; font-size:1.35vh; font-weight:800 }
+    .code { background:#10253f; color:#eaf6ff; border-radius:1.2vh; padding:2.2vh 2.6vh; white-space:pre-wrap; font:1.65vh/1.5 ui-monospace,SFMono-Regular,monospace }
+    .callout { border-left:.7vh solid var(--gold); padding:1vh 1.8vh; background:#fff7e3; font-size:1.8vh }
+    .metric { font-size:4.8vh; font-weight:850; color:var(--blue); line-height:1 } .metric-label { color:var(--muted); font-size:1.45vh; margin-top:.8vh }
+    .flow { display:flex; align-items:stretch; gap:1.2vh; margin-top:3vh } .node { flex:1; background:white; border:.28vh solid #cfdae5; border-radius:1.1vh; padding:1.8vh; text-align:center; font-size:1.65vh } .node b { display:block; font-size:2vh; margin:.5vh 0; color:var(--navy) } .arrow { align-self:center; color:var(--blue); font-size:3.5vh; font-weight:900 }
+    .swim { display:grid; grid-template-columns:17% 1fr; border-top:1px solid #ccd6e0 } .swim>* { border-bottom:1px solid #ccd6e0; padding:1.1vh } .who { color:var(--blue); font-weight:800; font-size:1.6vh } .step { font-size:1.55vh; background:white }
+    .timeline { display:grid; grid-template-columns:repeat(3,1fr); gap:2vh; margin-top:2vh } .phase { border-top:.55vh solid var(--cyan); padding-top:1.5vh } .phase:nth-child(2){border-color:var(--blue)} .phase:nth-child(3){border-color:var(--gold)}
+    .phase p,.phase li { font-size:1.65vh } .bigq { font-size:3.2vh; color:var(--navy); padding:1.5vh 0; border-bottom:1px solid #d9e1e9 }
+    .cover { color:white; background:linear-gradient(130deg,#0d223b 0%,#164d70 62%,#1f7d82 100%) }
+    .cover h1 { max-width:75%; margin-top:10vh } .cover .subtitle { color:#d8edf3 } .orb { position:absolute; border-radius:50%; border:1px solid #ffffff30 } .o1{width:52vh;height:52vh;right:-10vh;top:-8vh}.o2{width:29vh;height:29vh;right:11vh;top:4vh}.o3{width:12vh;height:12vh;right:19vh;top:13vh;background:#f4b94233}
+    .footer { position:absolute; bottom:4%; left:7%; font-size:1.25vh; color:#8090a2 }
+    nav { position:fixed; z-index:5; left:50%; bottom:1.6vh; transform:translateX(-50%); display:flex; gap:.6vh; padding:.6vh; background:#06121ed9; border-radius:99px }
+    button { border:0; border-radius:99px; background:#ffffff22; color:white; width:3.2vh; height:3.2vh; cursor:pointer } button:hover,button.on { background:var(--cyan); color:#08202c }
+    @media print { body{overflow:visible;background:white}.deck{display:block;height:auto}.slide{display:block!important;width:13.333in;height:7.5in;break-after:page}.slide::after,nav{display:none} }
+  </style>
+</head>
+<body>
+<main class="deck">
+  <section class="slide cover active" data-n="01">
+    <div class="orb o1"></div><div class="orb o2"></div><div class="orb o3"></div>
+    <p class="eyebrow" style="color:#75ddd5">Reference proof of concept</p>
+    <h1>AnVIL + Terra<br>meets <span style="color:#75ddd5">git-drs</span></h1>
+    <p class="subtitle">Version controlled dataset layouts—without copying controlled-access payloads into Git.</p>
+    <p class="footer" style="color:#bad5df">Design briefing · July 2026 · source: docs/anvil-terra-poc.md</p>
+  </section>
+
+  <section class="slide" data-n="02">
+    <p class="eyebrow">The idea in one picture</p><h2>Git moves references. AnVIL moves bytes.</h2>
+    <div class="flow">
+      <div class="node"><span class="tag">USER A</span><b>Add references</b>ADC-authorized metadata validation</div><div class="arrow">→</div>
+      <div class="node"><span class="tag">GIT</span><b>Commit pointers</b>Canonical DRS URI + size + checksum</div><div class="arrow">→</div>
+      <div class="node"><span class="tag">USER B</span><b>Clone + authenticate</b>Independent Google identity</div><div class="arrow">→</div>
+      <div class="node"><span class="tag">ANVIL</span><b>Hydrate</b>Fresh authorized URL; verified bytes</div>
+    </div>
+    <div class="grid3" style="margin-top:5vh"><div><div class="metric">0</div><div class="metric-label">payload bytes committed to Git</div></div><div><div class="metric">2</div><div class="metric-label">independent user identities</div></div><div><div class="metric">1</div><div class="metric-label">portable canonical reference</div></div></div>
+    <p class="callout" style="margin-top:4vh"><strong>Security boundary:</strong> Git visibility reveals paths and DRS identifiers; it never grants authorization to the underlying data.</p>
+  </section>
+
+  <section class="slide" data-n="03">
+    <p class="eyebrow">Use cases</p><h2>One reference model, four perspectives</h2>
+    <div class="grid2">
+      <article class="card"><h3>✦ Data reference author</h3><p>Publish a reviewable, versioned dataset layout—one object or a manifest—without downloading payloads.</p></article>
+      <article class="card"><h3>↓ Data consumer</h3><p>Clone pointers, authenticate independently, then hydrate everything or only paths matching a pattern.</p></article>
+      <article class="card"><h3>◉ Unauthorized reader</h3><p>Inspect repository history but receive a clear denial when attempting controlled-data hydration.</p></article>
+      <article class="card"><h3>✓ Repository maintainer</h3><p>Review deterministic pointers, diagnose provider failures, and run clean-clone acceptance tests.</p></article>
+    </div>
+    <p class="footer">Out of scope: uploads, record mutation, provider copying, remote GC, and workspace-table sync.</p>
+  </section>
+
+  <section class="slide" data-n="04">
+    <p class="eyebrow">How to · author</p><h2>Add once. Publish with ordinary Git.</h2>
+    <div class="grid2">
+      <div><div class="code">gcloud auth application-default login
+
+git drs add-ref --remote anvil \
+  drs://authority/object-1 data/sample.cram
+
+# or: validate a batch before writing
+git drs add-ref --remote anvil \
+  --manifest references.tsv --dry-run
+
+git add .git-drs/ .gitattributes data/
+git commit -m "Add AnVIL data references"
+git push</div></div>
+      <div><h3>What gets published</h3><ul><li>Canonical DRS URI pointers</li><li>Paths and Git history</li><li><code>.gitattributes</code></li><li>Allowlisted, non-secret remote configuration</li></ul><h3 style="margin-top:3vh;color:var(--red)">What never gets published</h3><ul><li>Payload bytes or cache content</li><li>Tokens, headers, or ADC files</li><li>Signed download URLs</li></ul></div>
+    </div>
+  </section>
+
+  <section class="slide" data-n="05">
+    <p class="eyebrow">How to · consumer</p><h2>A clean clone is enough</h2>
+    <div class="grid2">
+      <div><div class="code">gcloud auth application-default login
+
+git clone &lt;git-repository&gt;
+cd &lt;repository&gt;
+
+# hydrate every authorized reference
+git drs pull
+
+# or only one dataset slice
+git drs pull -I "data/*.cram"</div><p class="callout" style="margin-top:2vh">No author cache, local Git config, token, or signed URL is transferred.</p></div>
+      <div><div class="swim"><div class="who">GIT</div><div class="step">Clone pointer + safe public config</div><div class="who">USER B</div><div class="step">Supply ADC; choose all or include pattern</div><div class="who">RESOLVER</div><div class="step">Fetch current metadata and fresh access</div><div class="who">CACHE</div><div class="step">Download → verify → atomic promote</div><div class="who">WORKTREE</div><div class="step">Hydrate destination only after validation</div></div></div>
+    </div>
+  </section>
+
+  <section class="slide" data-n="06">
+    <p class="eyebrow">Examples</p><h2>Portable pointer + safe configuration</h2>
+    <div class="grid2">
+      <div><h3>Tracked pointer</h3><div class="code">version https://calypr.github.io/spec/v1
+oid drs://authority/object-1
+size 987654321
+sha256 8d969eef…</div><p><strong>The DRS URI stays canonical</strong> even when a SHA256 is available. A checksum describes content; it does not identify the AnVIL record.</p></div>
+      <div><h3>Tracked <code>.git-drs/config.yaml</code></h3><div class="code">version: 1
+default_remote: anvil
+remotes:
+  anvil:
+    type: terra
+    endpoint: https://data.terra.bio
+    auth: google-adc
+    mode: read-only</div><p>Only allowlisted public settings load. Secret-like or unknown sensitive fields fail closed.</p></div>
+    </div>
+  </section>
+
+  <section class="slide" data-n="07">
+    <p class="eyebrow">Architecture</p><h2>Provider-neutral resolution breaks Syfon coupling</h2>
+    <svg viewBox="0 0 1200 410" role="img" aria-label="Layered resolver architecture" style="width:100%;height:47vh">
+      <defs><marker id="a" markerWidth="8" markerHeight="8" refX="7" refY="4" orient="auto"><path d="M0 0L8 4L0 8Z" fill="#1d70a2"/></marker></defs>
+      <g font-family="system-ui" text-anchor="middle"><rect x="30" y="45" width="220" height="95" rx="14" fill="#fff" stroke="#b9c9d8"/><text x="140" y="84" font-size="22" font-weight="700">Commands</text><text x="140" y="113" font-size="17">add-ref · pull · ping</text>
+      <rect x="350" y="45" width="500" height="95" rx="14" fill="#dff4f1" stroke="#54c6be" stroke-width="3"/><text x="600" y="82" font-size="23" font-weight="700">Resolver interface</text><text x="600" y="113" font-size="17">GetObject · GetAccess</text>
+      <rect x="950" y="45" width="220" height="95" rx="14" fill="#fff" stroke="#b9c9d8"/><text x="1060" y="84" font-size="22" font-weight="700">Identity</text><text x="1060" y="113" font-size="17">remote · cache · content</text>
+      <path d="M250 92H345M855 92H945" stroke="#1d70a2" stroke-width="4" marker-end="url(#a)"/>
+      <rect x="350" y="250" width="220" height="105" rx="14" fill="#164d70"/><text x="460" y="292" font-size="21" font-weight="700" fill="white">AnVILResolver</text><text x="460" y="322" font-size="16" fill="#d8edf3">Google ADC · routing</text>
+      <rect x="630" y="250" width="220" height="105" rx="14" fill="#164d70"/><text x="740" y="292" font-size="21" font-weight="700" fill="white">SyfonResolver</text><text x="740" y="322" font-size="16" fill="#d8edf3">Gen3 · local behavior</text>
+      <path d="M540 140L465 245M660 140L735 245" stroke="#1d70a2" stroke-width="4" marker-end="url(#a)"/></g>
+    </svg>
+    <p class="callout">Resolver selection comes from the configured remote—not a user-facing <code>--remote-type</code> switch.</p>
+  </section>
+
+  <section class="slide" data-n="08">
+    <p class="eyebrow">Architecture detail</p><h2>Three identities—not one overloaded OID</h2>
+    <div class="grid3">
+      <article class="card"><span class="tag">REMOTE</span><h3 style="margin-top:2vh">Canonical DRS URI</h3><p>Normalized provider record identity. Committed to Git and used for object/access resolution.</p></article>
+      <article class="card"><span class="tag">LOCAL</span><h3 style="margin-top:2vh">Cache OID</h3><p>Filesystem-safe SHA256 of a versioned prefix plus normalized DRS URI. Never replaces remote identity.</p></article>
+      <article class="card"><span class="tag">CONTENT</span><h3 style="margin-top:2vh">Content SHA256</h3><p>Durable integrity metadata, when supplied. Used to verify bytes—not to locate the record.</p></article>
+    </div>
+    <div class="code" style="margin-top:3vh">cache_oid = sha256("git-drs-anvil-ref:v1\n" + normalized_drs_uri)</div>
+    <p class="callout" style="margin-top:2vh"><strong>Download invariant:</strong> resolve fresh access → temporary file → size/checksum verify → atomic cache promotion → worktree hydration.</p>
+  </section>
+
+  <section class="slide" data-n="09">
+    <p class="eyebrow">Tests</p><h2>Good component coverage; one decisive gap</h2>
+    <div class="grid3">
+      <article class="card"><span class="tag">IMPLEMENTED</span><h3 style="margin-top:1.5vh">Focused coverage</h3><ul><li>Resolver contract + errors</li><li>Terra remote + safe config</li><li>Canonical pointer/cache key</li><li>Terra ping + push refusal</li></ul></article>
+      <article class="card"><span class="tag">PARTIAL</span><h3 style="margin-top:1.5vh">Workflow coverage</h3><ul><li>Manifest validation + dry run</li><li>Pull size/SHA256 checks</li><li>Selective hydration</li><li>Cache reuse behavior</li></ul></article>
+      <article class="card"><span class="tag" style="background:#fff0cf;color:#805a00">MISSING</span><h3 style="margin-top:1.5vh">POC acceptance</h3><ul><li>Independent User A/User B state</li><li>Real or contract-faithful AnVIL</li><li>Expired URL + retry journey</li><li>Authorization leak audit</li></ul></article>
+    </div>
+    <div class="flow"><div class="node"><b>Arrange</b>Separate homes, config, ADC, caches</div><div class="arrow">→</div><div class="node"><b>Act</b>Commit → clone → authenticate → pull</div><div class="arrow">→</div><div class="node"><b>Assert</b>Verified bytes; isolated credentials</div></div>
+  </section>
+
+  <section class="slide" data-n="10">
+    <p class="eyebrow">Implementation audit</p><h2>Most original blockers are now closed</h2>
+    <div class="grid2">
+      <div><h3 style="color:#176b68">✓ Implemented</h3><ul><li>ADC-backed <code>AnVILResolver</code> handles metadata and access.</li><li>Terra <code>add-ref</code> and pull use provider-neutral resolution.</li><li>Remote config selects behavior; <code>--remote-type</code> is hidden and deprecated.</li><li>Terra pointers retain DRS URI, size, and optional SHA256.</li><li>DRS cache keys are derived separately from content checksums.</li></ul></div>
+      <div><h3 style="color:#a66c00">△ Still incomplete</h3><ul><li>Provider-neutral routing is not yet universal; legacy providers still use Syfon paths.</li><li>The production AnVIL endpoint/scopes/contract still require authoritative validation.</li><li>Manifest resolution is sequential; bounded concurrency is not implemented.</li><li>Downloads lack bounded retry and automatic expired-URL re-resolution.</li><li>No complete clean-clone, independent two-user acceptance test exists.</li></ul></div>
+    </div>
+    <p class="callout" style="margin-top:2vh"><strong>Bottom line:</strong> this is no longer an unwired design. It is an implemented vertical slice that still needs production-contract validation, resilience, and end-to-end proof.</p>
+  </section>
+
+  <section class="slide" data-n="11">
+    <p class="eyebrow">Next steps</p><h2>Turn the vertical slice into a proven POC</h2>
+    <div class="timeline">
+      <article class="phase"><span class="tag">P0 · VERIFY</span><h3 style="margin-top:1.5vh">Prove production fit</h3><ul><li>Confirm endpoint + OAuth scopes</li><li>Certify resolver response contract</li><li>Choose stable test records</li><li>Run clean two-user clone/pull</li><li>Audit logs/history for secrets</li></ul></article>
+      <article class="phase"><span class="tag">P1 · HARDEN</span><h3 style="margin-top:1.5vh">Make it resilient</h3><ul><li>Expired-URL re-resolution</li><li>Bounded retry + cancellation</li><li>Bounded manifest concurrency</li><li><code>git drs doctor</code></li><li>CI + compatibility matrix</li></ul></article>
+      <article class="phase"><span class="tag">P2 · DEFER</span><h3 style="margin-top:1.5vh">Protect the scope</h3><ul><li>AnVIL uploads or mutation</li><li>Cross-provider copying</li><li>Remote GC</li><li>Workspace sync</li><li>All-provider redesign</li></ul></article>
+    </div>
+  </section>
+
+  <section class="slide" data-n="12">
+    <p class="eyebrow">Questions</p><h2>Decisions needed to start the POC</h2>
+    <div class="bigq">01 · Which authoritative AnVIL resolver contract, endpoint, and OAuth scopes will we certify?</div>
+    <div class="bigq">02 · What stable test objects cover checksummed, non-checksummed, large, and denied cases?</div>
+    <div class="bigq">03 · Is the proposed pointer extension compatible with every parser that must read it?</div>
+    <div class="bigq">04 · What is the supported override policy for tracked vs. local remote configuration?</div>
+    <div class="bigq">05 · Who owns the independent-user acceptance environment and compatibility matrix?</div>
+    <p class="footer">Use ← / →, space, or the controls below. Print to PDF in landscape for a shareable static deck.</p>
+  </section>
+</main>
+<nav aria-label="Slide navigation"></nav>
+<script>
+  const slides=[...document.querySelectorAll('.slide')], nav=document.querySelector('nav'); let current=0;
+  slides.forEach((_,i)=>{const b=document.createElement('button'); b.textContent=i+1; b.setAttribute('aria-label',`Go to slide ${i+1}`); b.onclick=()=>show(i); nav.appendChild(b)});
+  function show(i){current=(i+slides.length)%slides.length;slides.forEach((s,n)=>s.classList.toggle('active',n===current));[...nav.children].forEach((b,n)=>b.classList.toggle('on',n===current));history.replaceState(null,'',`#${current+1}`)}
+  addEventListener('keydown',e=>{if(['ArrowRight',' ','PageDown'].includes(e.key))show(current+1);if(['ArrowLeft','PageUp'].includes(e.key))show(current-1);if(e.key==='Home')show(0);if(e.key==='End')show(slides.length-1)});
+  show(Math.max(0,Math.min(slides.length-1,(parseInt(location.hash.slice(1))||1)-1)));
+</script>
+</body>
+</html>

From e1ff2ee198f8f363e4951aa18a998fd26ba2b8fb Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 20 Jul 2026 17:45:33 -0700
Subject: [PATCH 22/66] adds anvil manifest

---
 scripts/anvil-add-ref-commands.sh | 86 +++++++++++++++++++++++++++++++
 1 file changed, 86 insertions(+)
 create mode 100755 scripts/anvil-add-ref-commands.sh

diff --git a/scripts/anvil-add-ref-commands.sh b/scripts/anvil-add-ref-commands.sh
new file mode 100755
index 00000000..f6aa91d3
--- /dev/null
+++ b/scripts/anvil-add-ref-commands.sh
@@ -0,0 +1,86 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+usage() {
+    cat <<'EOF'
+Generate git-drs add-ref commands from an AnVIL TSV export.
+
+Usage:
+    anvil-add-ref-commands.sh <input.tsv>
+
+The input must contain columns named "files.drs_uri" and "files.file_name".
+Commands are written to standard output; they are not executed.
+EOF
+}
+
+die() {
+    printf 'error: %s\n' "$*" >&2
+    exit 1
+}
+
+split_tsv_line() {
+    local line=$1
+
+    # macOS ships Bash 3.2, which does not support namerefs. Return fields
+    # through this global array instead so the script works with both
+    # the system Bash on macOS and newer Bash releases.
+    tsv_fields=()
+    while [[ $line == *$'\t'* ]]; do
+        tsv_fields+=("${line%%$'\t'*}")
+        line=${line#*$'\t'}
+    done
+    tsv_fields+=("$line")
+}
+
+if [[ ${1:-} == "-h" || ${1:-} == "--help" ]]; then
+    usage
+    exit 0
+fi
+
+[[ $# -eq 1 ]] || {
+    usage >&2
+    exit 2
+}
+
+input=$1
+[[ -f $input ]] || die "TSV file not found: $input"
+[[ -r $input ]] || die "TSV file is not readable: $input"
+
+IFS= read -r header_line < "$input" || die "TSV file is empty: $input"
+header_line=${header_line%$'\r'}
+header_line=${header_line#$'\xef\xbb\xbf'}
+
+declare -a headers
+declare -a tsv_fields
+split_tsv_line "$header_line"
+headers=("${tsv_fields[@]}")
+
+drs_uri_index=-1
+file_name_index=-1
+for index in "${!headers[@]}"; do
+    case ${headers[$index]} in
+        files.drs_uri) drs_uri_index=$index ;;
+        files.file_name) file_name_index=$index ;;
+    esac
+done
+
+((drs_uri_index >= 0)) || die 'required column not found: files.drs_uri'
+((file_name_index >= 0)) || die 'required column not found: files.file_name'
+
+line_number=1
+while IFS= read -r line || [[ -n $line ]]; do
+    ((line_number += 1))
+    line=${line%$'\r'}
+    [[ -n $line ]] || continue
+
+    declare -a fields
+    split_tsv_line "$line"
+    fields=("${tsv_fields[@]}")
+
+    drs_uri=${fields[$drs_uri_index]:-}
+    file_name=${fields[$file_name_index]:-}
+    [[ -n $drs_uri ]] || die "line $line_number has an empty files.drs_uri value"
+    [[ -n $file_name ]] || die "line $line_number has an empty files.file_name value"
+
+    printf 'git drs add-ref --remote anvil %q %q\n' "$drs_uri" "$file_name"
+done < <(tail -n +2 -- "$input")

From d61dcde447dc7672ad4438fa702b5cae76a4e071 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 20 Jul 2026 17:56:58 -0700
Subject: [PATCH 23/66] Add example AnVIL manifest workflow slide

---
 docs/anvil-terra-poc-presentation.html | 52 +++++++++++++++++++++++---
 1 file changed, 46 insertions(+), 6 deletions(-)

diff --git a/docs/anvil-terra-poc-presentation.html b/docs/anvil-terra-poc-presentation.html
index a5b7df72..b3784dcd 100644
--- a/docs/anvil-terra-poc-presentation.html
+++ b/docs/anvil-terra-poc-presentation.html
@@ -104,6 +104,46 @@ <h1>AnVIL + Terra<br>meets <span style="color:#75ddd5">git-drs</span></h1>
   </section>
 
   <section class="slide" data-n="06">
+    <p class="eyebrow">Example user workflow</p><h2>From AnVIL manifest to a pointer-only GitHub repo</h2>
+    <div class="grid2">
+      <div><h3>1 · Configure and add references</h3><div class="code" style="font-size:1.35vh">git init
+
+# Configure the read-only Terra remote.
+git drs remote add terra anvil \
+  --drs-endpoint https://data.terra.bio \
+  --auth google-adc \
+  --mode read-only
+
+# Download the TSV from AnVIL Data Explorer first.
+manifest=/tmp/anvil-manifest-38dc7537.tsv
+
+# Generate, review, then run one add-ref per row.
+scripts/anvil-add-ref-commands.sh "$manifest" \
+  > /tmp/add-anvil-refs.sh
+cat /tmp/add-anvil-refs.sh
+bash /tmp/add-anvil-refs.sh</div></div>
+      <div><h3>2 · Commit, hydrate, and publish</h3><div class="code" style="font-size:1.35vh"># The generated commands create references such as:
+# sequencing_dataset.tsv · subject.tsv
+# sequencing_file.tsv · plink_file_wide.tsv
+# sample.tsv · sample_set.tsv
+# population_descriptor.tsv
+
+git add .git-drs/ .gitattributes '*.tsv'
+git commit -m "Add references to AnVIL data"
+
+# Materialize only TSVs on local disk.
+git drs pull -I "*.tsv"
+git status
+
+git branch -M main
+git remote add origin \
+  https://github.com/bwalsh/ANVIL_1000G_PRIMED_data_model.git
+git push -u origin main</div></div>
+    </div>
+    <p class="callout" style="margin-top:2vh"><strong>Result:</strong> the local worktree contains hydrated TSV data; GitHub contains only small DRS pointers and safe public configuration—not the dataset payloads.</p>
+  </section>
+
+  <section class="slide" data-n="07">
     <p class="eyebrow">Examples</p><h2>Portable pointer + safe configuration</h2>
     <div class="grid2">
       <div><h3>Tracked pointer</h3><div class="code">version https://calypr.github.io/spec/v1
@@ -121,7 +161,7 @@ <h1>AnVIL + Terra<br>meets <span style="color:#75ddd5">git-drs</span></h1>
     </div>
   </section>
 
-  <section class="slide" data-n="07">
+  <section class="slide" data-n="08">
     <p class="eyebrow">Architecture</p><h2>Provider-neutral resolution breaks Syfon coupling</h2>
     <svg viewBox="0 0 1200 410" role="img" aria-label="Layered resolver architecture" style="width:100%;height:47vh">
       <defs><marker id="a" markerWidth="8" markerHeight="8" refX="7" refY="4" orient="auto"><path d="M0 0L8 4L0 8Z" fill="#1d70a2"/></marker></defs>
@@ -136,7 +176,7 @@ <h1>AnVIL + Terra<br>meets <span style="color:#75ddd5">git-drs</span></h1>
     <p class="callout">Resolver selection comes from the configured remote—not a user-facing <code>--remote-type</code> switch.</p>
   </section>
 
-  <section class="slide" data-n="08">
+  <section class="slide" data-n="09">
     <p class="eyebrow">Architecture detail</p><h2>Three identities—not one overloaded OID</h2>
     <div class="grid3">
       <article class="card"><span class="tag">REMOTE</span><h3 style="margin-top:2vh">Canonical DRS URI</h3><p>Normalized provider record identity. Committed to Git and used for object/access resolution.</p></article>
@@ -147,7 +187,7 @@ <h1>AnVIL + Terra<br>meets <span style="color:#75ddd5">git-drs</span></h1>
     <p class="callout" style="margin-top:2vh"><strong>Download invariant:</strong> resolve fresh access → temporary file → size/checksum verify → atomic cache promotion → worktree hydration.</p>
   </section>
 
-  <section class="slide" data-n="09">
+  <section class="slide" data-n="10">
     <p class="eyebrow">Tests</p><h2>Good component coverage; one decisive gap</h2>
     <div class="grid3">
       <article class="card"><span class="tag">IMPLEMENTED</span><h3 style="margin-top:1.5vh">Focused coverage</h3><ul><li>Resolver contract + errors</li><li>Terra remote + safe config</li><li>Canonical pointer/cache key</li><li>Terra ping + push refusal</li></ul></article>
@@ -157,7 +197,7 @@ <h1>AnVIL + Terra<br>meets <span style="color:#75ddd5">git-drs</span></h1>
     <div class="flow"><div class="node"><b>Arrange</b>Separate homes, config, ADC, caches</div><div class="arrow">→</div><div class="node"><b>Act</b>Commit → clone → authenticate → pull</div><div class="arrow">→</div><div class="node"><b>Assert</b>Verified bytes; isolated credentials</div></div>
   </section>
 
-  <section class="slide" data-n="10">
+  <section class="slide" data-n="11">
     <p class="eyebrow">Implementation audit</p><h2>Most original blockers are now closed</h2>
     <div class="grid2">
       <div><h3 style="color:#176b68">✓ Implemented</h3><ul><li>ADC-backed <code>AnVILResolver</code> handles metadata and access.</li><li>Terra <code>add-ref</code> and pull use provider-neutral resolution.</li><li>Remote config selects behavior; <code>--remote-type</code> is hidden and deprecated.</li><li>Terra pointers retain DRS URI, size, and optional SHA256.</li><li>DRS cache keys are derived separately from content checksums.</li></ul></div>
@@ -166,7 +206,7 @@ <h1>AnVIL + Terra<br>meets <span style="color:#75ddd5">git-drs</span></h1>
     <p class="callout" style="margin-top:2vh"><strong>Bottom line:</strong> this is no longer an unwired design. It is an implemented vertical slice that still needs production-contract validation, resilience, and end-to-end proof.</p>
   </section>
 
-  <section class="slide" data-n="11">
+  <section class="slide" data-n="12">
     <p class="eyebrow">Next steps</p><h2>Turn the vertical slice into a proven POC</h2>
     <div class="timeline">
       <article class="phase"><span class="tag">P0 · VERIFY</span><h3 style="margin-top:1.5vh">Prove production fit</h3><ul><li>Confirm endpoint + OAuth scopes</li><li>Certify resolver response contract</li><li>Choose stable test records</li><li>Run clean two-user clone/pull</li><li>Audit logs/history for secrets</li></ul></article>
@@ -175,7 +215,7 @@ <h1>AnVIL + Terra<br>meets <span style="color:#75ddd5">git-drs</span></h1>
     </div>
   </section>
 
-  <section class="slide" data-n="12">
+  <section class="slide" data-n="13">
     <p class="eyebrow">Questions</p><h2>Decisions needed to start the POC</h2>
     <div class="bigq">01 · Which authoritative AnVIL resolver contract, endpoint, and OAuth scopes will we certify?</div>
     <div class="bigq">02 · What stable test objects cover checksummed, non-checksummed, large, and denied cases?</div>

From 1b7b7b097332e9414204117f5ea97c5a00a732dc Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 20 Jul 2026 18:13:46 -0700
Subject: [PATCH 24/66] adds docs/index.html

---
 docs/index.html | 109 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 109 insertions(+)
 create mode 100644 docs/index.html

diff --git a/docs/index.html b/docs/index.html
new file mode 100644
index 00000000..4d5f70db
--- /dev/null
+++ b/docs/index.html
@@ -0,0 +1,109 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Git DRS Documentation</title>
+    <style>
+        * {
+            margin: 0;
+            padding: 0;
+            box-sizing: border-box;
+        }
+        body {
+            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;
+            line-height: 1.6;
+            color: #333;
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            min-height: 100vh;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            padding: 20px;
+        }
+        .container {
+            background: white;
+            border-radius: 12px;
+            box-shadow: 0 20px 60px rgba(0, 0, 0, 0.3);
+            max-width: 600px;
+            width: 100%;
+            padding: 60px 40px;
+            text-align: center;
+        }
+        h1 {
+            font-size: 2.5em;
+            margin-bottom: 20px;
+            color: #667eea;
+        }
+        .subtitle {
+            font-size: 1.1em;
+            color: #666;
+            margin-bottom: 40px;
+            line-height: 1.8;
+        }
+        .cta-section {
+            margin-top: 50px;
+            padding-top: 40px;
+            border-top: 2px solid #eee;
+        }
+        .cta-text {
+            font-size: 0.95em;
+            color: #999;
+            margin-bottom: 20px;
+        }
+        a.btn {
+            display: inline-block;
+            padding: 14px 32px;
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            color: white;
+            text-decoration: none;
+            border-radius: 6px;
+            font-weight: 600;
+            transition: transform 0.2s, box-shadow 0.2s;
+            box-shadow: 0 4px 15px rgba(102, 126, 234, 0.4);
+        }
+        a.btn:hover {
+            transform: translateY(-2px);
+            box-shadow: 0 6px 20px rgba(102, 126, 234, 0.6);
+        }
+        .feature-list {
+            margin-top: 50px;
+            text-align: left;
+            display: inline-block;
+        }
+        .feature-list li {
+            list-style: none;
+            padding: 10px 0;
+            color: #666;
+            font-size: 0.95em;
+        }
+        .feature-list li:before {
+            content: "✓ ";
+            color: #667eea;
+            font-weight: bold;
+            margin-right: 10px;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <h1>Welcome to Git DRS</h1>
+        <p class="subtitle">
+            Git-based Data Repository Service (DRS) integration for Terra/Anvil.
+            Manage large files and data efficiently with DRS-enabled Git workflows.
+        </p>
+        
+        <ul class="feature-list">
+            <li>Seamless DRS integration with Git</li>
+            <li>Support for multipart uploads and downloads</li>
+            <li>Terra/Anvil workspace compatibility</li>
+            <li>Efficient large file handling</li>
+        </ul>
+
+        <div class="cta-section">
+            <p class="cta-text">Get started with our Terra/Anvil POC presentation:</p>
+            <a href="anvil-terra-poc-presentation.html" class="btn">View Presentation →</a>
+        </div>
+    </div>
+</body>
+</html>

From 87c4cd836a88c9784afc773d62811eedbfd31160 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 10:31:00 -0700
Subject: [PATCH 25/66] docs: propose a unified remote CLI and multi-DRS
 architecture

---
 docs/remote-cli-design.md | 217 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 217 insertions(+)
 create mode 100644 docs/remote-cli-design.md

diff --git a/docs/remote-cli-design.md b/docs/remote-cli-design.md
new file mode 100644
index 00000000..845343c6
--- /dev/null
+++ b/docs/remote-cli-design.md
@@ -0,0 +1,217 @@
+# Remote CLI and multi-DRS server design
+
+## Status
+
+Proposed. This document describes a migration target rather than the current
+command-line contract.
+
+## Problem
+
+`remote add` currently exposes the implementation as three different command
+shapes:
+
+```text
+git drs remote add gen3 [remote-name] <organization/project>
+git drs remote add local <remote-name> <url> <organization/project>
+git drs remote add terra <remote-name> --drs-endpoint URL --auth google-adc --mode read-only
+```
+
+This creates several avoidable distinctions:
+
+- the provider is sometimes a command and sometimes effectively a deployment
+  choice;
+- the endpoint is inferred, positional, or a flag depending on the provider;
+- `--cred`, `--token`, `--username`, and `--password` encode credential formats
+  rather than a credential source;
+- `--mode read-only` and `--auth google-adc` ask users to state the only values
+  currently accepted;
+- `--bucket` mixes DRS resolution with Gen3 storage and publishing policy;
+- `--no-skip-smudge` is repository checkout policy, not a remote property; and
+- `local` describes where a server is deployed, not which DRS protocol it
+  implements.
+
+Adding Cancer Genomics Cloud (CGC), Synapse, or another GA4GH DRS service by
+copying this pattern would produce another provider subcommand and another set
+of slightly different flags for every service.
+
+## Proposed vocabulary
+
+Use one command with two required concepts: a local remote name and a server
+endpoint (or a well-known endpoint alias).
+
+```text
+git drs remote add <name> <endpoint-or-alias> [flags]
+
+Flags:
+  --scope <scope>             Optional provider-specific collection/project scope
+  --auth <method>             auto, none, bearer, basic, google-adc, or provider-helper
+  --credential <source>      Credential source, never an inline secret
+  --provider <provider>      auto, ga4gh, gen3, terra, cgc, or synapse
+  --storage <bucket/prefix>  Advanced write/registration storage override
+  --checkout <mode>          pointers or hydrate
+```
+
+For example:
+
+```sh
+# Provider and capabilities discovered from service-info where possible.
+git drs remote add cgc https://cgc-ga4gh-api.sbgenomics.com \
+  --auth bearer --credential env:CGC_TOKEN
+
+git drs remote add synapse https://repo-prod.prod.sagebase.org \
+  --auth bearer --credential helper:synapse
+
+# A preset may supply a public endpoint and authentication default.
+git drs remote add anvil terra --scope my-billing-project/my-workspace
+
+# Gen3 keeps its scope, but no longer needs a different grammar.
+git drs remote add production https://example-gen3.org \
+  --provider gen3 --scope PROGRAM/PROJECT \
+  --credential file:~/.gen3/credentials.json
+```
+
+`<endpoint-or-alias>` should be an HTTPS URL by default. Aliases such as
+`terra`, `cgc`, and `synapse` are conveniences that expand to versioned,
+maintained presets; they are not separate protocols. `--provider` is an escape
+hatch when discovery is absent or ambiguous, and should normally remain
+`auto`.
+
+### Defaults remove flags
+
+- Discover the provider and supported features using GA4GH service-info and a
+  small, maintained fingerprint table. Print the detected provider before
+  persisting configuration.
+- Infer `--auth auto` from the preset, a 401 challenge, and installed credential
+  helpers. Do not silently downgrade from authenticated to anonymous access.
+- Infer read-only versus writable from capability probing. Replace `--mode`
+  with reported capabilities rather than a user assertion.
+- Default checkout behavior from the repository's existing configuration.
+  `--checkout` is an optional convenience on `remote add`; the canonical
+  setting belongs to a repository-level `config` command.
+- Prompt for a storage choice only when a write operation actually needs one.
+  Keep `--storage` for automation, but do not make bucket selection part of
+  adding a read-only DRS resolver.
+
+### Credential sources
+
+One `--credential` option should name where credentials come from:
+
+```text
+env:NAME        read a token from an environment variable
+file:PATH       import/read a provider credential file
+helper:NAME     invoke an OS, Git, or provider credential helper
+stdin           read a secret without placing it in shell history
+profile:NAME    use an existing provider profile
+```
+
+Inline `--token` and `--password` values should be deprecated because they are
+visible in process listings and shell history. Basic authentication can still
+be supported by a helper that returns a username and password. Public tracked
+configuration contains only endpoint, provider, scope, and safe capability
+hints; credential source selection and secrets remain clone-local.
+
+## Separate the DRS protocol from provider extensions
+
+Model a remote as a composition instead of one provider-specific client:
+
+1. **Resolver** — the GA4GH DRS operations for object metadata and access
+   methods/URLs.
+2. **Authenticator** — anonymous, bearer, basic, Google ADC, or a provider
+   helper that can refresh credentials.
+3. **Namespace codec** — parsing and formatting the server's accepted DRS URI
+   authority and object identifiers.
+4. **Publisher** — optional upload, registration, checksum search, bucket
+   mapping, and delete operations. These are not implied by DRS resolution.
+5. **Capabilities** — discovered facts such as resolve, download, search,
+   register, upload, and delete, cached with the remote configuration and
+   rechecked by `git drs remote diagnose <name>`.
+
+The generic resolver should implement the standard DRS object and access
+flows. Provider adapters should be small and limited to real differences:
+authentication, endpoint/URI normalization, pagination or response quirks,
+and non-standard publishing APIs. Core code should select behavior by a
+capability interface, not by tests such as `remote.type == "terra"`.
+
+This separation also makes errors useful. A CGC or Synapse remote can be a
+perfectly valid read-only resolver even when it cannot support the current
+Gen3 checksum-search and registration workflow. `push` should fail early with
+"remote does not advertise register/upload" rather than treating resolution
+success as evidence that publishing is available.
+
+## CGC and Synapse
+
+Both services should first be treated as GA4GH DRS resolvers, then augmented
+only where their documented behavior requires it.
+
+### Cancer Genomics Cloud
+
+The CGC adapter should provide a preset for its DRS base URL, bearer-token
+credential help, and its accepted DRS URI authority/object identifier form.
+It should use the generic object and access flow. Any CGC project browsing,
+file upload, or file registration API belongs in an optional publisher adapter,
+because those operations are outside the baseline DRS resolver contract.
+
+The implementation must test whether an access response contains a directly
+usable URL or requires the follow-up access endpoint, preserve documented
+headers, and never persist a signed access URL. A project identifier, if needed
+for non-DRS publishing, is `--scope`; it must not be required merely to resolve
+a complete DRS URI.
+
+### Synapse
+
+The Synapse adapter should likewise provide its production endpoint/authority
+preset and obtain a Synapse bearer credential through a helper. Resolution
+should remain object-ID based and should not assume that a returned checksum is
+itself a resolvable object ID.
+
+Synapse project/entity discovery and mutation are separate Synapse REST
+capabilities. If later supported for publishing, they should be implemented by
+a Synapse publisher and exposed through capability checks, not folded into the
+generic DRS resolver or made mandatory during `remote add`.
+
+### Conformance fixtures
+
+Add provider contract tests built from sanitized documented responses for:
+
+- service-info discovery or the explicit fallback when it is unavailable;
+- object metadata with one and multiple access methods;
+- the access endpoint and expiring URL handling;
+- bearer authentication and redaction of tokens and response bodies;
+- 401/403, 404, 429, and server-error classification;
+- DRS URI authority and percent-encoding normalization; and
+- missing SHA-256 checksums (the canonical DRS URI remains the retrieval
+  identity).
+
+Live acceptance tests should be opt-in and credential-gated. Generic GA4GH
+contract tests should run against every adapter so provider support cannot
+silently diverge.
+
+## Compatibility and migration
+
+Introduce the unified form without immediately removing scripts:
+
+1. Add `remote add <name> <endpoint-or-alias>` and store the compositional
+   remote configuration.
+2. Keep `remote add gen3`, `local`, and `terra` as hidden or deprecated
+   compatibility shims that translate their arguments to the new model.
+3. Add `git drs remote migrate` and make `remote list --verbose` display the
+   translated endpoint, provider, auth source (never its value), and
+   capabilities.
+4. Warn on inline `--token`/`--password`, `--mode`, and `--no-skip-smudge` with
+   the exact replacement command for at least one release cycle.
+5. Remove legacy forms only in a major release or retain them indefinitely as
+   thin aliases if maintenance cost is negligible.
+
+The minimal common case then becomes memorable:
+
+```sh
+git drs remote add <name> <server>
+```
+
+Scope, authentication, publishing storage, and checkout policy appear only
+when the server or workflow actually needs them.
+
+## References
+
+- [Cancer Genomics Cloud DRS API overview](https://docs.cancergenomicscloud.org/reference/drs-api-overview)
+- [Synapse DRS controller REST documentation](https://rest-docs.synapse.org/rest/index.html#org.sagebionetworks.drs.controller.DrsController)

From 57f85fe35e9b371fa696192280eb2c57e513592b Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 10:31:13 -0700
Subject: [PATCH 26/66] ignore working dirs

---
 .gitignore | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitignore b/.gitignore
index b1aaab11..16da783b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,3 +18,6 @@ coverage/unit/
 admin/
 # Ignore any file named .env anywhere in the repository
 .env
+# ignore working dirs, files
+attic/
+patch.txt

From 7cb16424d16a2c0d24aaf9cce045124d30b5522c Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 10:54:20 -0700
Subject: [PATCH 27/66] clarified --auth and --credential

---
 docs/remote-cli-design.md | 68 +++++++++++++++++++++++++++++++++++++--
 1 file changed, 65 insertions(+), 3 deletions(-)

diff --git a/docs/remote-cli-design.md b/docs/remote-cli-design.md
index 845343c6..6fd7b3a4 100644
--- a/docs/remote-cli-design.md
+++ b/docs/remote-cli-design.md
@@ -44,7 +44,7 @@ git drs remote add <name> <endpoint-or-alias> [flags]
 
 Flags:
   --scope <scope>             Optional provider-specific collection/project scope
-  --auth <method>             auto, none, bearer, basic, google-adc, or provider-helper
+  --auth <method>             auto, none, bearer, basic, google-adc, or provider-helper[:name]
   --credential <source>      Credential source, never an inline secret
   --provider <provider>      auto, ga4gh, gen3, terra, cgc, or synapse
   --storage <bucket/prefix>  Advanced write/registration storage override
@@ -76,13 +76,75 @@ maintained presets; they are not separate protocols. `--provider` is an escape
 hatch when discovery is absent or ambiguous, and should normally remain
 `auto`.
 
+### Authentication methods
+
+`--auth` selects **how an HTTP request is authorized**. It is distinct from
+`--credential`, which selects **where the material needed by that method comes
+from**. For example, `--auth bearer --credential env:CGC_TOKEN` says to put a
+bearer token in the request and to read that token from `CGC_TOKEN`.
+
+The methods have the following meanings:
+
+| Method | Meaning |
+| --- | --- |
+| `auto` | Select a method from trusted configuration and discovery, using the deterministic order below. This is the default; it does not mean "try every credential." |
+| `none` | Send no authentication. If the server rejects the request, report that authentication is required rather than silently trying local credentials. |
+| `bearer` | Send an OAuth-style bearer access token obtained from `--credential`. |
+| `basic` | Send an HTTP Basic username/password pair obtained from `--credential`. |
+| `google-adc` | Use Google Application Default Credentials to obtain and refresh the token expected by the service. |
+| `provider-helper` | Delegate token acquisition and refresh to the adapter for the selected provider; the adapter returns request credentials, but does not replace the DRS resolver. |
+
+`auto` should resolve once when the remote is added, persist the selected
+method (not a secret), and show the result to the user. The selection order is:
+
+1. an explicit `--credential` whose type implies a method, if unambiguous;
+2. the endpoint alias's maintained default (for example, a Terra alias may
+   select `google-adc`);
+3. authentication metadata returned by trusted service discovery;
+4. a single installed provider helper registered for the detected provider;
+5. `none` only when an anonymous capability probe succeeds.
+
+If the evidence is absent, conflicting, or names multiple usable methods,
+`remote add` should stop and ask the user to choose `--auth`; it must not send
+available credentials to a server merely because they exist. A 401 challenge
+may refine discovery, but it must not trigger a loop that tries bearer, basic,
+and local credential stores in turn. Subsequent commands use the persisted
+method, so `auto` does not make network behavior vary from invocation to
+invocation. `git drs remote diagnose` may explicitly rerun discovery.
+
+`provider-helper` is for authentication lifecycles that the generic methods
+cannot represent. Examples include a Gen3 profile helper that exchanges an API
+key and refreshes a Fence access token, or a future Synapse helper that obtains
+a short-lived token through Synapse's supported login flow. The value does not
+mean "execute any program found on `PATH`": the helper must be registered by a
+known provider adapter, selected by the detected or explicit `--provider`, and
+subject to the endpoint allowlist for that remote. If more than one helper is
+available, configuration should use a qualified value such as
+`provider-helper:gen3-profile` rather than relying on search order.
+
+This differs from `--credential helper:synapse`: a **credential helper** only
+returns already usable material, such as a bearer token, while a **provider
+helper** owns a provider-specific exchange or refresh flow and may use a
+credential source as its input. For example:
+
+```sh
+# A generic bearer method reads an already usable token.
+git drs remote add synapse https://repo-prod.prod.sagebase.org \
+  --auth bearer --credential helper:synapse
+
+# A provider adapter exchanges the named Gen3 profile and refreshes tokens.
+git drs remote add production https://example-gen3.org \
+  --provider gen3 --auth provider-helper:gen3-profile \
+  --credential profile:production --scope PROGRAM/PROJECT
+```
+
 ### Defaults remove flags
 
 - Discover the provider and supported features using GA4GH service-info and a
   small, maintained fingerprint table. Print the detected provider before
   persisting configuration.
-- Infer `--auth auto` from the preset, a 401 challenge, and installed credential
-  helpers. Do not silently downgrade from authenticated to anonymous access.
+- Resolve `--auth auto` using the deterministic authentication selection above.
+  Do not silently downgrade from authenticated to anonymous access.
 - Infer read-only versus writable from capability probing. Replace `--mode`
   with reported capabilities rather than a user assertion.
 - Default checkout behavior from the repository's existing configuration.

From a24b78a80b5e55e7b7096889706f776a2b8cb29e Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 11:52:46 -0700
Subject: [PATCH 28/66] Restrict override reads to repo-local config

---
 internal/config/config.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/config/config.go b/internal/config/config.go
index ff7da793..f65bbbfe 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -215,7 +215,7 @@ func parseAndAddRemote(cfg *Config, subsectionName string, remoteType string, en
 }
 
 func loadGitConfigOverrides(cfg *Config) error {
-	cmd := exec.Command("git", "config", "--get-regexp", `^drs\.`)
+	cmd := exec.Command("git", "config", "--local", "--get-regexp", `^drs\.`)
 	out, err := cmd.Output()
 	if err != nil {
 		// git config exits non-zero when no matching keys exist. In that case,

From 1259a5a3812ea0eaceba4ec82ead1b71a63862d2 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 12:01:38 -0700
Subject: [PATCH 29/66] Remove Terra auth and mode keys with the remote

---
 internal/config/config.go      |  2 ++
 internal/config/config_test.go | 35 ++++++++++++++++++++++++++++++++++
 2 files changed, 37 insertions(+)

diff --git a/internal/config/config.go b/internal/config/config.go
index f65bbbfe..52922e22 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -375,6 +375,8 @@ func RemoveRemote(name Remote) (*Config, error) {
 		fmt.Sprintf("drs.remote.%s.bucket", name),
 		fmt.Sprintf("drs.remote.%s.organization", name),
 		fmt.Sprintf("drs.remote.%s.storage_prefix", name),
+		fmt.Sprintf("drs.remote.%s.auth", name),
+		fmt.Sprintf("drs.remote.%s.mode", name),
 		fmt.Sprintf("drs.remote.%s.token", name),
 		fmt.Sprintf("drs.remote.%s.username", name),
 		fmt.Sprintf("drs.remote.%s.password", name),
diff --git a/internal/config/config_test.go b/internal/config/config_test.go
index 7b6ab109..33d8cf50 100644
--- a/internal/config/config_test.go
+++ b/internal/config/config_test.go
@@ -291,3 +291,38 @@ func TestUpdateRemote_LocalTypePersistence(t *testing.T) {
 		t.Errorf("Expected BaseURL http://localhost:8080, got %s", localRemote.BaseURL)
 	}
 }
+
+func TestRemoveRemote_TerraCleansAuthAndMode(t *testing.T) {
+	tmpDir := setupTestRepo(t)
+	remoteName := Remote("anvil")
+
+	_, err := UpdateRemote(remoteName, RemoteSelect{
+		Terra: &TerraRemote{
+			Endpoint: "https://data.terra.bio",
+			Auth:     "google-adc",
+			Mode:     "read-only",
+		},
+	})
+	if err != nil {
+		t.Fatalf("UpdateRemote failed: %v", err)
+	}
+
+	cfg, err := RemoveRemote(remoteName)
+	if err != nil {
+		t.Fatalf("RemoveRemote failed: %v", err)
+	}
+	if _, ok := cfg.Remotes[remoteName]; ok {
+		t.Fatalf("removed Terra remote %q was recreated", remoteName)
+	}
+
+	for _, key := range []string{
+		"drs.remote.anvil.auth",
+		"drs.remote.anvil.mode",
+	} {
+		cmd := exec.Command("git", "config", "--local", "--get", key)
+		cmd.Dir = tmpDir
+		if output, err := cmd.CombinedOutput(); err == nil {
+			t.Errorf("expected %s to be unset, got %q", key, string(output))
+		}
+	}
+}

From 5f7aba1e8e1f47521bbeb4d8dd7db3071895a57a Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 12:08:25 -0700
Subject: [PATCH 30/66] Match the DRS access header schema

---
 internal/resolver/resolver.go      | 14 ++++++++----
 internal/resolver/resolver_test.go | 36 ++++++++++++++++++++++++++++++
 2 files changed, 46 insertions(+), 4 deletions(-)

diff --git a/internal/resolver/resolver.go b/internal/resolver/resolver.go
index f06e6afc..7d356d88 100644
--- a/internal/resolver/resolver.go
+++ b/internal/resolver/resolver.go
@@ -57,8 +57,14 @@ func DownloadToCache(ctx context.Context, r Resolver, drsURI, destination string
 		tmp.Close()
 		return err
 	}
-	for key, value := range access.Headers {
-		req.Header.Set(key, value)
+	for _, header := range access.Headers {
+		key, value, ok := strings.Cut(header, ":")
+		key = strings.TrimSpace(key)
+		if !ok || key == "" {
+			tmp.Close()
+			return fmt.Errorf("AnVIL resolver returned an invalid access header")
+		}
+		req.Header.Add(key, strings.TrimSpace(value))
 	}
 	resp, err := http.DefaultClient.Do(req)
 	if err != nil {
@@ -110,8 +116,8 @@ type Checksum struct {
 }
 
 type ResolvedAccess struct {
-	URL     string            `json:"url"`
-	Headers map[string]string `json:"headers"`
+	URL     string   `json:"url"`
+	Headers []string `json:"headers"`
 }
 
 // AnVILResolver routes every DRS authority through the configured trusted
diff --git a/internal/resolver/resolver_test.go b/internal/resolver/resolver_test.go
index 11eb3b73..b8ac9a33 100644
--- a/internal/resolver/resolver_test.go
+++ b/internal/resolver/resolver_test.go
@@ -3,8 +3,10 @@ package resolver
 import (
 	"context"
 	"errors"
+	"fmt"
 	"net/http"
 	"net/http/httptest"
+	"path/filepath"
 	"strings"
 	"testing"
 )
@@ -38,6 +40,40 @@ func TestAnVILResolverContract(t *testing.T) {
 	}
 }
 
+func TestDownloadToCacheUsesAccessURLHeaders(t *testing.T) {
+	const body = "data"
+	download := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if got := r.Header.Values("X-Provider-Token"); len(got) != 2 || got[0] != "first" || got[1] != "second:part" {
+			t.Errorf("unexpected provider headers: %q", got)
+			http.Error(w, "missing headers", http.StatusUnauthorized)
+			return
+		}
+		_, _ = w.Write([]byte(body))
+	}))
+	defer download.Close()
+
+	resolverServer := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		switch r.URL.Path {
+		case "/ga4gh/drs/v1/objects/object-1":
+			_, _ = w.Write([]byte(`{"id":"object-1","size":4,"access_methods":[{"type":"https","access_id":"a1"}]}`))
+		case "/ga4gh/drs/v1/objects/object-1/access/a1":
+			_, _ = fmt.Fprintf(w, `{"url":%q,"headers":["X-Provider-Token: first","X-Provider-Token: second:part"]}`, download.URL)
+		default:
+			http.NotFound(w, r)
+		}
+	}))
+	defer resolverServer.Close()
+
+	r, err := NewAnVILWithClient(resolverServer.URL, resolverServer.Client())
+	if err != nil {
+		t.Fatal(err)
+	}
+	destination := filepath.Join(t.TempDir(), "cache", "object-1")
+	if err := DownloadToCache(context.Background(), r, "drs://example.org/object-1", destination); err != nil {
+		t.Fatalf("DownloadToCache returned error: %v", err)
+	}
+}
+
 func TestAnVILResolverAcceptsCompactDRSURI(t *testing.T) {
 	const compactURI = "drs://drs.anv0:v2_e68887be-c583-375a-a773-48771192c8fa"
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {

From 2c63f35c75c2be09b32cafbc41523cae0ed83265 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 12:20:28 -0700
Subject: [PATCH 31/66] fix: Destination validation can escape through symlinks

---
 cmd/addref/add-ref.go      | 22 ++++++++++++++++++
 cmd/addref/add-ref_test.go | 47 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 69 insertions(+)

diff --git a/cmd/addref/add-ref.go b/cmd/addref/add-ref.go
index f181e473..86e271ed 100644
--- a/cmd/addref/add-ref.go
+++ b/cmd/addref/add-ref.go
@@ -141,6 +141,28 @@ func safeDestination(dst string) (string, error) {
 	if err != nil {
 		return "", err
 	}
+	root, err = filepath.EvalSymlinks(root)
+	if err != nil {
+		return "", fmt.Errorf("resolve repository root: %w", err)
+	}
+
+	// Do not allow an existing path component to redirect the eventual pointer
+	// write. Checking only the cleaned path is insufficient: os.WriteFile and
+	// MkdirAll follow symlinks, including a symlink at the destination itself.
+	current := root
+	for _, component := range strings.Split(clean, string(filepath.Separator)) {
+		current = filepath.Join(current, component)
+		info, statErr := os.Lstat(current)
+		if os.IsNotExist(statErr) {
+			break
+		}
+		if statErr != nil {
+			return "", fmt.Errorf("inspect destination path %s: %w", dst, statErr)
+		}
+		if info.Mode()&os.ModeSymlink != 0 {
+			return "", fmt.Errorf("destination path contains a symlink: %s", dst)
+		}
+	}
 	return filepath.Join(root, clean), nil
 }
 
diff --git a/cmd/addref/add-ref_test.go b/cmd/addref/add-ref_test.go
index c18828c4..52c4e270 100644
--- a/cmd/addref/add-ref_test.go
+++ b/cmd/addref/add-ref_test.go
@@ -50,6 +50,53 @@ func TestCreateLfsPointer_NoSHA256(t *testing.T) {
 	}
 }
 
+func TestSafeDestinationRejectsSymlinkedParent(t *testing.T) {
+	repo := t.TempDir()
+	outside := t.TempDir()
+	runGitCmd(t, repo, "init")
+	if err := os.Symlink(outside, filepath.Join(repo, "data")); err != nil {
+		t.Fatal(err)
+	}
+
+	oldWD, err := os.Getwd()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Chdir(repo); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = os.Chdir(oldWD) })
+
+	if _, err := safeDestination(filepath.Join("data", "pointer")); err == nil || !strings.Contains(err.Error(), "symlink") {
+		t.Fatalf("expected symlink destination to be rejected, got %v", err)
+	}
+}
+
+func TestSafeDestinationRejectsSymlinkedFile(t *testing.T) {
+	repo := t.TempDir()
+	outside := filepath.Join(t.TempDir(), "outside")
+	runGitCmd(t, repo, "init")
+	if err := os.WriteFile(outside, []byte("keep"), 0o600); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Symlink(outside, filepath.Join(repo, "pointer")); err != nil {
+		t.Fatal(err)
+	}
+
+	oldWD, err := os.Getwd()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Chdir(repo); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = os.Chdir(oldWD) })
+
+	if _, err := safeDestination("pointer"); err == nil || !strings.Contains(err.Error(), "symlink") {
+		t.Fatalf("expected symlink destination to be rejected, got %v", err)
+	}
+}
+
 func TestAddRefLocalOIDUsesDerivedSourceWhenSHA256Missing(t *testing.T) {
 	obj := &drsapi.DrsObject{Checksums: []drsapi.Checksum{{Type: "md5", Checksum: "md5"}}}
 	oid := addRefLocalOID("drs://example.org/object-1", "source", obj)

From 7f76d076f5f4db996027868bb1ec756965247224 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 12:42:38 -0700
Subject: [PATCH 32/66] Fix Terra automatic smudge downloads

---
 cmd/filter/main.go      | 21 ++++++++++--
 cmd/filter/main_test.go | 71 +++++++++++++++++++++++++++++++++++++++++
 cmd/smudge/main.go      | 14 ++++++++
 3 files changed, 104 insertions(+), 2 deletions(-)
 create mode 100644 cmd/filter/main_test.go

diff --git a/cmd/filter/main.go b/cmd/filter/main.go
index cc70f45b..a60a6da8 100644
--- a/cmd/filter/main.go
+++ b/cmd/filter/main.go
@@ -23,6 +23,7 @@ import (
 	internalfilter "github.com/calypr/git-drs/internal/filter"
 	"github.com/calypr/git-drs/internal/lfs"
 	"github.com/calypr/git-drs/internal/remoteruntime"
+	"github.com/calypr/git-drs/internal/resolver"
 	internaltransfer "github.com/calypr/git-drs/internal/transfer"
 	"github.com/spf13/cobra"
 )
@@ -52,6 +53,7 @@ func runFilter(cmd *cobra.Command, _ []string) error {
 	}
 
 	var drsCtx *remoteruntime.GitContext
+	var terraResolver resolver.Resolver
 
 	remote, err := cfg.GetDefaultRemote()
 	if err != nil {
@@ -60,6 +62,11 @@ func runFilter(cmd *cobra.Command, _ []string) error {
 		drsCtx, err = remoteruntime.New(cfg, remote, logger)
 		if err != nil {
 			logger.Info("DRS server not configured or unreachable", "err", err)
+		} else if drsCtx.RemoteType == config.TerraServerType && !internalfilter.ShouldSkipSmudge() {
+			terraResolver, err = resolver.NewAnVIL(ctx, drsCtx.Endpoint)
+			if err != nil {
+				return fmt.Errorf("filter: create Terra resolver: %w", err)
+			}
 		}
 	}
 
@@ -70,7 +77,7 @@ func runFilter(cmd *cobra.Command, _ []string) error {
 	logger.Debug("Resolved LFS root directory", "lfsRoot", lfsRoot)
 	// Build the filter and register handlers.
 	f := internalfilter.NewGitFilter(os.Stdin, os.Stdout, logger).
-		OnSmudge(makeSmudgeHandler(drsCtx, logger)).
+		OnSmudge(makeSmudgeHandler(drsCtx, terraResolver, logger)).
 		OnClean(makeCleanHandler(lfsRoot, logger))
 
 	return f.Run(ctx)
@@ -80,12 +87,15 @@ func runFilter(cmd *cobra.Command, _ []string) error {
 // Smudge handler — checkout: LFS pointer → real file content
 // --------------------------------------------------------------------------
 
-func makeSmudgeHandler(drsCtx *remoteruntime.GitContext, logger *slog.Logger) internalfilter.SmudgeFunc {
+func makeSmudgeHandler(drsCtx *remoteruntime.GitContext, terraResolver resolver.Resolver, logger *slog.Logger) internalfilter.SmudgeFunc {
 	return func(ctx context.Context, req internalfilter.FilterRequest, ptr io.Reader, dst io.Writer) error {
 		logger.Debug("smudge handler invoked", "pathname", req.Pathname)
 		var downloadFn internalfilter.SmudgeDownloadFunc
 		if drsCtx != nil && !internalfilter.ShouldSkipSmudge() {
 			downloadFn = func(callCtx context.Context, oid, cachePath string) error {
+				if terraResolver != nil {
+					return resolver.DownloadToCache(callCtx, terraResolver, normalizeDRSOID(oid), cachePath)
+				}
 				return internaltransfer.DownloadToCachePath(callCtx, drsCtx, oid, cachePath)
 			}
 		}
@@ -93,6 +103,13 @@ func makeSmudgeHandler(drsCtx *remoteruntime.GitContext, logger *slog.Logger) in
 	}
 }
 
+func normalizeDRSOID(oid string) string {
+	if len(oid) >= 2 && oid[:2] == "//" {
+		return "drs:" + oid
+	}
+	return oid
+}
+
 // --------------------------------------------------------------------------
 // Clean handler — stage: real file content → LFS pointer
 // --------------------------------------------------------------------------
diff --git a/cmd/filter/main_test.go b/cmd/filter/main_test.go
new file mode 100644
index 00000000..2cdccb72
--- /dev/null
+++ b/cmd/filter/main_test.go
@@ -0,0 +1,71 @@
+package filter
+
+import (
+	"bytes"
+	"context"
+	"io"
+	"log/slog"
+	"net/http"
+	"net/http/httptest"
+	"os"
+	"path/filepath"
+	"testing"
+
+	internalfilter "github.com/calypr/git-drs/internal/filter"
+	"github.com/calypr/git-drs/internal/remoteruntime"
+	"github.com/calypr/git-drs/internal/resolver"
+)
+
+type recordingResolver struct {
+	accessURL string
+	drsURI    string
+}
+
+func (r *recordingResolver) GetObject(_ context.Context, drsURI string) (*resolver.ResolvedObject, error) {
+	r.drsURI = drsURI
+	return &resolver.ResolvedObject{
+		Size:          13,
+		AccessMethods: []resolver.AccessMethod{{AccessID: "access-1"}},
+	}, nil
+}
+
+func (r *recordingResolver) GetAccess(context.Context, string, string) (*resolver.ResolvedAccess, error) {
+	return &resolver.ResolvedAccess{URL: r.accessURL}, nil
+}
+
+func TestSmudgeHandlerUsesTerraResolver(t *testing.T) {
+	t.Setenv("GIT_DRS_SKIP_SMUDGE", "false")
+	payload := []byte("terra payload")
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		_, _ = w.Write(payload)
+	}))
+	defer server.Close()
+
+	repo := t.TempDir()
+	if err := os.MkdirAll(filepath.Join(repo, ".git", "lfs", "objects"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	oldWD, err := os.Getwd()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Chdir(repo); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = os.Chdir(oldWD) })
+
+	r := &recordingResolver{accessURL: server.URL}
+	ctx := &remoteruntime.GitContext{}
+	handler := makeSmudgeHandler(ctx, r, slog.New(slog.NewTextHandler(io.Discard, nil)))
+	pointer := "version https://calypr.github.io/spec/v1\noid drs://example.org/object-1\nsize 13\n"
+	var output bytes.Buffer
+	if err := handler(context.Background(), internalfilter.FilterRequest{Pathname: "data.bin"}, bytes.NewBufferString(pointer), &output); err != nil {
+		t.Fatalf("smudge handler: %v", err)
+	}
+	if got, want := output.String(), string(payload); got != want {
+		t.Fatalf("smudged content = %q, want %q", got, want)
+	}
+	if got, want := r.drsURI, "drs://example.org/object-1"; got != want {
+		t.Fatalf("resolver DRS URI = %q, want %q", got, want)
+	}
+}
diff --git a/cmd/smudge/main.go b/cmd/smudge/main.go
index faebd995..964df49c 100644
--- a/cmd/smudge/main.go
+++ b/cmd/smudge/main.go
@@ -10,6 +10,7 @@ import (
 	"github.com/calypr/git-drs/internal/drslog"
 	internalfilter "github.com/calypr/git-drs/internal/filter"
 	"github.com/calypr/git-drs/internal/remoteruntime"
+	"github.com/calypr/git-drs/internal/resolver"
 	internaltransfer "github.com/calypr/git-drs/internal/transfer"
 	"github.com/spf13/cobra"
 )
@@ -64,7 +65,20 @@ func runSmudge(cmd *cobra.Command, args []string) error {
 
 	var downloadFn internalfilter.SmudgeDownloadFunc
 	if !internalfilter.ShouldSkipSmudge() {
+		var terraResolver resolver.Resolver
+		if drsCtx.RemoteType == config.TerraServerType {
+			terraResolver, err = resolver.NewAnVIL(ctx, drsCtx.Endpoint)
+			if err != nil {
+				return fmt.Errorf("smudge: create Terra resolver: %w", err)
+			}
+		}
 		downloadFn = func(callCtx context.Context, oid, cachePath string) error {
+			if terraResolver != nil {
+				if len(oid) >= 2 && oid[:2] == "//" {
+					oid = "drs:" + oid
+				}
+				return resolver.DownloadToCache(callCtx, terraResolver, oid, cachePath)
+			}
 			return internaltransfer.DownloadToCachePath(callCtx, drsCtx, oid, cachePath)
 		}
 	}

From 18ec625a01ea969160c3e9a9f3b42687115550a4 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 12:55:53 -0700
Subject: [PATCH 33/66] Clarify read-only Terra push behavior

---
 cmd/push/main.go      |  7 ++++++-
 cmd/push/push_test.go | 23 +++++++++++++++++++++++
 docs/anvil.md         | 10 +++++++---
 3 files changed, 36 insertions(+), 4 deletions(-)

diff --git a/cmd/push/main.go b/cmd/push/main.go
index 950a3090..e61aa8a3 100644
--- a/cmd/push/main.go
+++ b/cmd/push/main.go
@@ -59,7 +59,12 @@ var Cmd = &cobra.Command{
 			}
 		}
 		if selected, ok := cfg.Remotes[remote]; ok && selected.Terra != nil {
-			return fmt.Errorf("remote %q is read-only; publish AnVIL references with ordinary git push", remote)
+			return fmt.Errorf(
+				"remote %q is read-only: git drs push cannot upload files to Terra\n"+
+					"no files were uploaded, and you do not need to back out a commit that references existing Terra data\n"+
+					"to publish the commit and its DRS references, use ordinary git push to a Git remote; this pushes only Git metadata and does not upload files to Terra",
+				remote,
+			)
 		}
 
 		drsClient, err := remoteruntime.New(cfg, remote, myLogger)
diff --git a/cmd/push/push_test.go b/cmd/push/push_test.go
index 69f16c4e..b8a79962 100644
--- a/cmd/push/push_test.go
+++ b/cmd/push/push_test.go
@@ -6,6 +6,7 @@ import (
 	"github.com/calypr/git-drs/internal/config"
 	"github.com/calypr/git-drs/internal/testutils"
 	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
 )
 
 func TestPushCmdArgs(t *testing.T) {
@@ -38,3 +39,25 @@ func TestPushRun_DefaultRemoteError(t *testing.T) {
 	err := Cmd.RunE(Cmd, []string{})
 	assert.Error(t, err)
 }
+
+func TestPushRun_ReadOnlyTerraRemoteExplainsWhatWasNotPushed(t *testing.T) {
+	tmpDir := testutils.SetupTestGitRepo(t)
+	testutils.CreateTestConfig(t, tmpDir, &config.Config{
+		DefaultRemote: "anvil",
+		Remotes: map[config.Remote]config.RemoteSelect{
+			"anvil": {Terra: &config.TerraRemote{
+				Endpoint: "https://data.terra.bio",
+				Mode:     "read-only",
+			}},
+		},
+	})
+
+	err := Cmd.RunE(Cmd, nil)
+	require.Error(t, err)
+	assert.ErrorContains(t, err, `remote "anvil" is read-only`)
+	assert.ErrorContains(t, err, "cannot upload files to Terra")
+	assert.ErrorContains(t, err, "no files were uploaded")
+	assert.ErrorContains(t, err, "do not need to back out a commit")
+	assert.ErrorContains(t, err, "ordinary git push to a Git remote")
+	assert.ErrorContains(t, err, "pushes only Git metadata")
+}
diff --git a/docs/anvil.md b/docs/anvil.md
index c51f5217..74964a08 100644
--- a/docs/anvil.md
+++ b/docs/anvil.md
@@ -56,9 +56,13 @@ and writes a small pointer. The pointer retains the canonical DRS URI even when
 the record has a SHA256 checksum. It never contains an access token or signed
 download URL. Destination paths must stay inside the Git repository.
 
-AnVIL remotes are read-only: publish pointers with ordinary `git push`.
-`git drs push` refuses a Terra remote because that command uploads payloads to
-writable DRS providers.
+AnVIL remotes are read-only. `git drs push` refuses a Terra remote before doing
+any remote work because that command uploads payloads to writable DRS
+providers. The failure does not require backing out a commit that references
+existing Terra data: publish that commit and its pointers with ordinary
+`git push` to a Git remote. Plain `git push` transfers only the Git commit and
+small DRS references; it does **not** upload the referenced files to Terra or
+create or modify Terra DRS records.
 
 ## Clone and hydrate as another user
 

From acb8601aeef90414755395299be2cbb51c95cdb4 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 13:10:19 -0700
Subject: [PATCH 34/66] docs DRS compact identifiers and auth discovery

---
 docs/compact-identifier-auth-discovery.md | 140 ++++++++++++++++++++++
 1 file changed, 140 insertions(+)
 create mode 100644 docs/compact-identifier-auth-discovery.md

diff --git a/docs/compact-identifier-auth-discovery.md b/docs/compact-identifier-auth-discovery.md
new file mode 100644
index 00000000..ad4e21d6
--- /dev/null
+++ b/docs/compact-identifier-auth-discovery.md
@@ -0,0 +1,140 @@
+# DRS compact identifiers, remote routing, and authentication discovery
+
+## Summary
+
+`git-drs` currently treats a DRS URI as an object identifier, not as a
+replacement for remote configuration. Remote configuration continues to store
+a concrete HTTP endpoint and provider-specific settings.
+
+The authority in a `drs://` URI participates in resolution in some code paths,
+but it is not universally treated as a directly reachable HTTPS hostname. This
+distinction is important because a DRS authority can be an identifier namespace
+rather than a DNS name.
+
+The GA4GH DRS service-info operation can be used as one input to service and
+authentication discovery. `git-drs` currently probes service-info for Terra
+health checks, but it does not yet infer or persist an authentication method
+from the response.
+
+## Does a DRS compact identifier replace the configured remote?
+
+No. There are two separate concepts:
+
+- A DRS URI or compact identifier, such as `drs://drs.anv0:v2_...`, identifies
+  a DRS object and its authority.
+- A configured `git-drs` remote contains the concrete HTTP endpoint and any
+  provider-specific configuration needed to contact the service.
+
+The current configuration model stores an endpoint or base URL for Gen3,
+Terra, and local remotes. These values are persisted as
+`drs.remote.<name>.endpoint` in repository configuration.
+
+The proposed unified remote interface may accept maintained aliases such as
+`terra`, `cgc`, and `synapse`. These aliases would expand to concrete,
+versioned endpoint presets; they are conveniences, not DRS object identifiers
+or separate protocols.
+
+The local compact OID described in the DRS identity ADR is another distinct
+concept. The DRS URI is the canonical remote object identity, while the derived
+OID is only a compact, filesystem-safe key for pointers and cache storage. The
+derived OID does not identify or configure the DRS server.
+
+## Is the `drs://` authority resolved as a hostname?
+
+Partially, depending on the URI form and resolution path.
+
+### Slash-form URI
+
+For a URI such as:
+
+```text
+drs://source.example.org/object-1
+```
+
+the `add-ref` resolution path:
+
+1. parses the URI authority;
+2. looks for a configured remote whose endpoint host matches that authority;
+3. uses that configured remote, including its authentication, when one matches;
+4. otherwise derives `https://source.example.org` and attempts an anonymous
+   DRS object lookup.
+
+This fallback allows a complete slash-form DRS URI to direct resolution to its
+source service without incorrectly sending it to the selected primary remote.
+
+### Compact colon-form URI
+
+For a compact identifier such as:
+
+```text
+drs://drs.anv0:v2_example
+```
+
+the AnVIL resolver understands that the colon separates the authority from the
+object ID; it is not a network port separator. It extracts `drs.anv0` as the
+authority and `v2_example` as the object ID.
+
+The AnVIL resolver does not convert `drs.anv0` into an HTTPS endpoint. Instead,
+it routes the identifier through the configured, trusted Terra/AnVIL resolver
+endpoint. In this case the DRS authority is a namespace used by the resolver,
+not necessarily a directly reachable DNS host.
+
+The direct `add-ref` source-host parser currently expects an object ID in the
+URI path. Compact colon-form identifiers therefore do not use the same
+authority-derived anonymous fallback as slash-form identifiers; they depend on
+the provider-specific resolver path.
+
+### Recommended routing rule
+
+The authority should participate in routing, but `git-drs` should prefer a
+trusted authority-to-endpoint mapping or a configured resolver. It should not
+universally assume that every DRS authority can safely be contacted as
+`https://<authority>`.
+
+## Can service-info determine how authentication works?
+
+The GA4GH DRS service-info operation is available at the conventional route:
+
+```http
+GET <endpoint>/ga4gh/drs/v1/service-info
+```
+
+For Terra remotes, `git drs ping` already sends this request, treats a
+successful response as a health check, and prints the service-info response.
+The request currently uses the default HTTP client.
+
+`git-drs` does not currently use that response to:
+
+- select bearer, Basic, Google ADC, or provider-helper authentication;
+- identify a credential source;
+- persist a discovered authentication method;
+- discover authentication for every remote type.
+
+Service-info can be one trusted discovery input, but it may not contain enough
+information to configure authentication completely. A response might identify
+the service without specifying all of the OAuth issuer, audience, scopes,
+credential source, or provider-specific login workflow required by a client.
+
+The proposed `--auth auto` behavior therefore uses a deterministic precedence:
+
+1. an explicit credential whose type implies one authentication method;
+2. the maintained default from a trusted endpoint alias;
+3. authentication metadata returned by trusted service discovery;
+4. one installed provider helper for the detected provider;
+5. anonymous access only after an anonymous capability probe succeeds.
+
+If discovery is absent, conflicting, or advertises multiple usable methods,
+remote setup should require an explicit authentication choice. It must not try
+each locally available credential against the server. Once selected, the
+authentication method should be persisted so normal commands have stable
+network behavior; an explicit diagnostic command may rerun discovery.
+
+## Current behavior at a glance
+
+| Question | Current behavior |
+| --- | --- |
+| Does a DRS compact identifier replace the configured endpoint? | No. Remote endpoints remain in configuration. |
+| Is the `drs://` authority used for routing? | Partially. Slash-form external references can derive an HTTPS endpoint; AnVIL compact identifiers use the configured trusted resolver. |
+| Can `git-drs` call service-info? | Yes. `git drs ping` calls it for Terra remotes. |
+| Does service-info automatically configure authentication? | No. Authentication discovery is proposed but not implemented. |
+| Should every authority be treated as an HTTPS hostname? | No. Prefer a trusted mapping or resolver because an authority may be a namespace rather than a reachable host. |

From 9553fec50dda35866615037f4944237164cf7ef9 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 13:56:21 -0700
Subject: [PATCH 35/66] Make pulled files read-only for read-only remotes

---
 cmd/pull/main.go      | 29 ++++++++++++++++++--
 cmd/pull/pull_test.go | 62 +++++++++++++++++++++++++++++++++++++++++--
 2 files changed, 87 insertions(+), 4 deletions(-)

diff --git a/cmd/pull/main.go b/cmd/pull/main.go
index 27efa844..c2e01c0b 100644
--- a/cmd/pull/main.go
+++ b/cmd/pull/main.go
@@ -218,7 +218,8 @@ var Cmd = &cobra.Command{
 			logg.Debug("no missing pointer objects to download")
 		}
 
-		if err := checkoutDownloadedFiles(pointers, progress); err != nil {
+		readOnly := remoteIsReadOnly(cfg, remote)
+		if err := checkoutDownloadedFiles(pointers, progress, readOnly); err != nil {
 			return err
 		}
 		if err := refreshGitIndexForHydratedFiles(pointers); err != nil {
@@ -439,7 +440,15 @@ func globToRegexp(pattern string) string {
 	return b.String()
 }
 
-func checkoutDownloadedFiles(files []pointerFile, progress *internaltransfer.PullProgressRenderer) error {
+func remoteIsReadOnly(cfg *config.Config, remote config.Remote) bool {
+	selected, ok := cfg.Remotes[remote]
+	// Terra remotes are resolver-only and therefore always read-only. Match the
+	// push command's capability check rather than relying on optional legacy
+	// configuration fields being present.
+	return ok && selected.Terra != nil
+}
+
+func checkoutDownloadedFiles(files []pointerFile, progress *internaltransfer.PullProgressRenderer, readOnly bool) error {
 	for _, f := range files {
 		if strings.TrimSpace(f.Name) == "" || strings.TrimSpace(f.Oid) == "" {
 			continue
@@ -462,6 +471,17 @@ func checkoutDownloadedFiles(files []pointerFile, progress *internaltransfer.Pul
 				return fmt.Errorf("failed to create directory for %s: %w", f.Name, err)
 			}
 		}
+		// A previous pull may have made this path read-only. Temporarily restore
+		// owner write permission so that a later pull can safely replace it.
+		if info, statErr := os.Stat(f.Name); statErr == nil {
+			if err := os.Chmod(f.Name, info.Mode().Perm()|0o200); err != nil {
+				src.Close()
+				return fmt.Errorf("failed to make %s writable for checkout: %w", f.Name, err)
+			}
+		} else if !os.IsNotExist(statErr) {
+			src.Close()
+			return fmt.Errorf("failed to inspect checkout path %s: %w", f.Name, statErr)
+		}
 		dst, err := os.OpenFile(f.Name, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o644)
 		if err != nil {
 			src.Close()
@@ -485,6 +505,11 @@ func checkoutDownloadedFiles(files []pointerFile, progress *internaltransfer.Pul
 			}
 			return fmt.Errorf("checked out invalid content for %s: %w", f.Name, err)
 		}
+		if readOnly {
+			if err := os.Chmod(f.Name, 0o444); err != nil {
+				return fmt.Errorf("failed to make pulled file %s read-only: %w", f.Name, err)
+			}
+		}
 		progress.OnCompleted(toPullFile(f))
 	}
 	return nil
diff --git a/cmd/pull/pull_test.go b/cmd/pull/pull_test.go
index c6c7fe49..eeab5df6 100644
--- a/cmd/pull/pull_test.go
+++ b/cmd/pull/pull_test.go
@@ -250,7 +250,7 @@ func TestCheckoutDownloadedFilesRejectsInvalidCachedObject(t *testing.T) {
 	files := []pointerFile{{Name: "data/file.bin", Oid: oid, Size: 100}}
 	progress.OnPlan(toPullFiles(files))
 
-	err = checkoutDownloadedFiles(files, progress)
+	err = checkoutDownloadedFiles(files, progress, false)
 	if err == nil {
 		t.Fatal("expected checkoutDownloadedFiles to reject invalid cached object")
 	}
@@ -293,7 +293,7 @@ func TestCheckedOutContentCleansBackToPointer(t *testing.T) {
 	progress := internaltransfer.NewPullProgressRenderer(io.Discard)
 	files := []pointerFile{{Name: "data/file.bin", Oid: oid, Size: int64(len(payload))}}
 	progress.OnPlan(toPullFiles(files))
-	if err := checkoutDownloadedFiles(files, progress); err != nil {
+	if err := checkoutDownloadedFiles(files, progress, false); err != nil {
 		t.Fatalf("checkoutDownloadedFiles: %v", err)
 	}
 
@@ -316,6 +316,64 @@ func TestCheckedOutContentCleansBackToPointer(t *testing.T) {
 	}
 }
 
+func TestCheckoutDownloadedFilesFromReadOnlyRemoteSetsReadOnlyPermission(t *testing.T) {
+	if runtime.GOOS == "windows" {
+		t.Skip("POSIX permission bits are not supported on Windows")
+	}
+
+	repo := t.TempDir()
+	oldWD, err := os.Getwd()
+	if err != nil {
+		t.Fatalf("getwd: %v", err)
+	}
+	if err := os.Chdir(repo); err != nil {
+		t.Fatalf("chdir repo: %v", err)
+	}
+	t.Cleanup(func() { _ = os.Chdir(oldWD) })
+
+	payload := []byte("read-only remote payload")
+	sum := sha256.Sum256(payload)
+	oid := hex.EncodeToString(sum[:])
+	cachePath, err := lfs.ObjectPath(gitrepo.LFSObjectsPath, oid)
+	if err != nil {
+		t.Fatalf("ObjectPath: %v", err)
+	}
+	if err := os.MkdirAll(filepath.Dir(cachePath), 0o755); err != nil {
+		t.Fatalf("mkdir cache dir: %v", err)
+	}
+	if err := os.WriteFile(cachePath, payload, 0o644); err != nil {
+		t.Fatalf("write cache: %v", err)
+	}
+
+	files := []pointerFile{{Name: "data/file.bin", Oid: oid, Size: int64(len(payload))}}
+	progress := internaltransfer.NewPullProgressRenderer(io.Discard)
+	progress.OnPlan(toPullFiles(files))
+	if err := checkoutDownloadedFiles(files, progress, true); err != nil {
+		t.Fatalf("checkoutDownloadedFiles: %v", err)
+	}
+
+	info, err := os.Stat(files[0].Name)
+	if err != nil {
+		t.Fatalf("stat checked-out file: %v", err)
+	}
+	if got, want := info.Mode().Perm(), os.FileMode(0o444); got != want {
+		t.Fatalf("checked-out permissions = %o, want %o", got, want)
+	}
+}
+
+func TestRemoteIsReadOnly(t *testing.T) {
+	cfg := &config.Config{Remotes: map[config.Remote]config.RemoteSelect{
+		"anvil": {Terra: &config.TerraRemote{Mode: "read-only"}},
+		"local": {Local: &config.LocalRemote{}},
+	}}
+	if !remoteIsReadOnly(cfg, "anvil") {
+		t.Fatal("expected read-only Terra remote to be detected")
+	}
+	if remoteIsReadOnly(cfg, "local") {
+		t.Fatal("did not expect local remote to be read-only")
+	}
+}
+
 func TestRefreshGitIndexForHydratedFilesClearsDirtyStatus(t *testing.T) {
 	repo := t.TempDir()
 	gitDRS := buildGitDRSBinaryForTest(t)

From d4b7bb789671e59aff155dc0287a07f8ea37cccd Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 17:12:47 -0700
Subject: [PATCH 36/66] Document rollback for accidental read-only DRS edits

---
 docs/anvil.md | 47 +++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)

diff --git a/docs/anvil.md b/docs/anvil.md
index 74964a08..36a30f44 100644
--- a/docs/anvil.md
+++ b/docs/anvil.md
@@ -85,6 +85,53 @@ Cloning the Git repository does **not** grant AnVIL data access. A user without
 permission can inspect reference paths and DRS URIs but receives an
 authorization error when hydration resolves the object.
 
+## Undo an accidental change to downloaded data
+
+`git drs pull` makes files downloaded from a read-only remote read-only. If a
+user nevertheless makes a downloaded file writable, changes it, stages it, and
+commits it, the clean filter records the changed content as a new pointer.
+`git drs push` will still refuse the operation because the Terra remote is
+read-only; that error does not by itself identify the accidental edit.
+
+If the mistaken commit is the latest commit and has not been pushed, restore
+the original DRS pointer from its parent and amend the commit:
+
+```bash
+# Inspect the change before rewriting the commit.
+git diff HEAD^ HEAD -- data/sample.cram
+
+# Restore the original pointer in both the index and working tree.
+git restore --source=HEAD^ --staged --worktree -- data/sample.cram
+git commit --amend --no-edit
+
+# Confirm that the committed file is a pointer again.
+git show HEAD:data/sample.cram
+git status
+```
+
+If the entire latest commit was a mistake and it contains no work that should
+be kept, it can instead be removed with `git reset --hard HEAD^`. Inspect the
+commit and working tree first because this discards all changes in both.
+
+If the mistaken commit has already been shared, do not rewrite shared history.
+Restore the pointer in a corrective commit:
+
+```bash
+git restore --source=HEAD^ --staged --worktree -- data/sample.cram
+git commit -m "Restore AnVIL DRS reference"
+git push
+```
+
+After either repair, hydrate the restored pointer again when local access to
+the payload is needed:
+
+```bash
+git drs pull -I "data/sample.cram"
+```
+
+Use ordinary `git push` to publish commits containing read-only AnVIL
+references. Do not use `git drs push` for a Terra remote.
+
 ## Security and troubleshooting
 
 * `google application default credentials are unavailable`: run

From 1a2850ceec6ae8323e4332887696456f9af8c371 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 21 Jul 2026 17:34:16 -0700
Subject: [PATCH 37/66] Refresh AnVIL POC gaps and roadmap

---
 docs/anvil-terra-poc-presentation.html | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/anvil-terra-poc-presentation.html b/docs/anvil-terra-poc-presentation.html
index b3784dcd..d020e235 100644
--- a/docs/anvil-terra-poc-presentation.html
+++ b/docs/anvil-terra-poc-presentation.html
@@ -201,7 +201,7 @@ <h1>AnVIL + Terra<br>meets <span style="color:#75ddd5">git-drs</span></h1>
     <p class="eyebrow">Implementation audit</p><h2>Most original blockers are now closed</h2>
     <div class="grid2">
       <div><h3 style="color:#176b68">✓ Implemented</h3><ul><li>ADC-backed <code>AnVILResolver</code> handles metadata and access.</li><li>Terra <code>add-ref</code> and pull use provider-neutral resolution.</li><li>Remote config selects behavior; <code>--remote-type</code> is hidden and deprecated.</li><li>Terra pointers retain DRS URI, size, and optional SHA256.</li><li>DRS cache keys are derived separately from content checksums.</li></ul></div>
-      <div><h3 style="color:#a66c00">△ Still incomplete</h3><ul><li>Provider-neutral routing is not yet universal; legacy providers still use Syfon paths.</li><li>The production AnVIL endpoint/scopes/contract still require authoritative validation.</li><li>Manifest resolution is sequential; bounded concurrency is not implemented.</li><li>Downloads lack bounded retry and automatic expired-URL re-resolution.</li><li>No complete clean-clone, independent two-user acceptance test exists.</li></ul></div>
+      <div><h3 style="color:#a66c00">△ Still incomplete</h3><ul><li>Routing is only partly provider-neutral: slash-form authorities may map to HTTPS, while compact AnVIL IDs still require the trusted Terra resolver.</li><li>Service-info is only a Terra health probe; it does not discover or persist authentication, provider, or capabilities.</li><li>Remote setup still has provider-specific command shapes instead of one endpoint/alias + scope/auth model.</li><li>Downloads still lack bounded concurrency, retry, cancellation, and expired-URL re-resolution.</li><li>The production contract and a clean-clone, independent two-user acceptance test remain unverified.</li></ul></div>
     </div>
     <p class="callout" style="margin-top:2vh"><strong>Bottom line:</strong> this is no longer an unwired design. It is an implemented vertical slice that still needs production-contract validation, resilience, and end-to-end proof.</p>
   </section>
@@ -209,9 +209,9 @@ <h1>AnVIL + Terra<br>meets <span style="color:#75ddd5">git-drs</span></h1>
   <section class="slide" data-n="12">
     <p class="eyebrow">Next steps</p><h2>Turn the vertical slice into a proven POC</h2>
     <div class="timeline">
-      <article class="phase"><span class="tag">P0 · VERIFY</span><h3 style="margin-top:1.5vh">Prove production fit</h3><ul><li>Confirm endpoint + OAuth scopes</li><li>Certify resolver response contract</li><li>Choose stable test records</li><li>Run clean two-user clone/pull</li><li>Audit logs/history for secrets</li></ul></article>
-      <article class="phase"><span class="tag">P1 · HARDEN</span><h3 style="margin-top:1.5vh">Make it resilient</h3><ul><li>Expired-URL re-resolution</li><li>Bounded retry + cancellation</li><li>Bounded manifest concurrency</li><li><code>git drs doctor</code></li><li>CI + compatibility matrix</li></ul></article>
-      <article class="phase"><span class="tag">P2 · DEFER</span><h3 style="margin-top:1.5vh">Protect the scope</h3><ul><li>AnVIL uploads or mutation</li><li>Cross-provider copying</li><li>Remote GC</li><li>Workspace sync</li><li>All-provider redesign</li></ul></article>
+      <article class="phase"><span class="tag">P0 · VERIFY</span><h3 style="margin-top:1.5vh">Prove production fit</h3><ul><li>Confirm endpoint + OAuth scopes</li><li>Certify service-info/object/access contracts</li><li>Test slash + compact DRS IDs</li><li>Run clean two-user clone/pull</li><li>Audit logs/history for secrets</li></ul></article>
+      <article class="phase"><span class="tag">P1 · HARDEN</span><h3 style="margin-top:1.5vh">Make it resilient</h3><ul><li>Trusted authority/alias routing</li><li>Persist deterministic auth discovery</li><li>Expired-URL re-resolution</li><li>Bounded retry + concurrency</li><li>Remote diagnostics + CI</li></ul></article>
+      <article class="phase"><span class="tag">P2 · GENERALIZE</span><h3 style="margin-top:1.5vh">Keep DRS composable</h3><ul><li>Unify <code>remote add</code></li><li>Resolver/auth/capability interfaces</li><li>CGC + Synapse contract fixtures</li><li>Keep publishing provider-specific</li><li>Defer mutation and cross-provider copy</li></ul></article>
     </div>
   </section>
 

From fdd0065e75ca50ce3d23e63280b3f6a0d73b7d09 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 22 Jul 2026 11:21:40 -0700
Subject: [PATCH 38/66] Publish end-user docs and presentation with GitHub
 Pages

---
 .github/workflows/pages.yaml           |  73 ++++++
 README.md                              |   2 +
 docs/anvil-terra-poc-presentation.html | 237 -----------------
 docs/anvil-terra-poc-presentation.md   | 345 +++++++++++++++++++++++++
 docs/github-pages.md                   |  98 +++++++
 docs/index.html                        | 109 --------
 docs/index.md                          |  35 +++
 mkdocs.yml                             |  30 +++
 8 files changed, 583 insertions(+), 346 deletions(-)
 create mode 100644 .github/workflows/pages.yaml
 delete mode 100644 docs/anvil-terra-poc-presentation.html
 create mode 100644 docs/anvil-terra-poc-presentation.md
 create mode 100644 docs/github-pages.md
 delete mode 100644 docs/index.html
 create mode 100644 docs/index.md
 create mode 100644 mkdocs.yml

diff --git a/.github/workflows/pages.yaml b/.github/workflows/pages.yaml
new file mode 100644
index 00000000..0d7c915d
--- /dev/null
+++ b/.github/workflows/pages.yaml
@@ -0,0 +1,73 @@
+name: Publish documentation
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - docs/**
+      - mkdocs.yml
+      - .github/workflows/pages.yaml
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: pages
+  cancel-in-progress: true
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Configure GitHub Pages
+        uses: actions/configure-pages@v5
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install documentation builder
+        run: python -m pip install mkdocs-material==9.6.14
+
+      - name: Select end-user documentation
+        run: |
+          mkdir -p .pages-docs
+          cp docs/index.md .pages-docs/
+          cp docs/quickstart.md .pages-docs/
+          cp docs/getting-started.md .pages-docs/
+          cp docs/commands.md .pages-docs/
+          cp docs/pointer-files.md .pages-docs/
+          cp docs/adding-s3-files.md .pages-docs/
+          cp docs/remove-files.md .pages-docs/
+          cp docs/troubleshooting.md .pages-docs/
+
+      - name: Build documentation and presentation
+        run: |
+          npx --yes @marp-team/marp-cli@4.2.3 \
+            docs/anvil-terra-poc-presentation.md \
+            --html \
+            --output .pages-docs/anvil-terra-poc-presentation.html
+          mkdocs build --strict
+
+      - name: Upload GitHub Pages artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: _site
+
+  deploy:
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - name: Deploy GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4
diff --git a/README.md b/README.md
index eb3e5d91..65c2ec7b 100644
--- a/README.md
+++ b/README.md
@@ -108,10 +108,12 @@ Push and pull depend on server-side bucket mapping for the requested scope. That
 
 ## Documentation
 
+- [Documentation Home](docs/index.md)
 - [Getting Started](docs/getting-started.md)
 - [Commands Reference](docs/commands.md)
 - [Troubleshooting](docs/troubleshooting.md)
 - [Developer Guide](docs/developer-guide.md)
+- [Publishing documentation with GitHub Pages](docs/github-pages.md)
 - [GA4GH DRS Scalability Gaps](docs/ga4gh-drs-scalability-gaps.md)
 
 ## Requirements
diff --git a/docs/anvil-terra-poc-presentation.html b/docs/anvil-terra-poc-presentation.html
deleted file mode 100644
index d020e235..00000000
--- a/docs/anvil-terra-poc-presentation.html
+++ /dev/null
@@ -1,237 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>AnVIL + Terra × git-drs — reference POC</title>
-  <style>
-    :root { --navy:#10253f; --blue:#1d70a2; --cyan:#54c6be; --gold:#f4b942; --paper:#f6f8fb; --ink:#152334; --muted:#607084; --red:#c84b45; }
-    * { box-sizing:border-box } body { margin:0; background:#081827; color:var(--ink); font-family:Inter, ui-sans-serif, system-ui, sans-serif; overflow:hidden }
-    .deck { height:100vh; display:grid; place-items:center }
-    .slide { display:none; position:relative; width:min(100vw,177.78vh); height:min(100vh,56.25vw); padding:6% 7%; overflow:hidden; background:var(--paper) }
-    .slide.active { display:block }
-    .slide::after { content:attr(data-n); position:absolute; right:3%; bottom:3%; color:#8b98a8; font-size:1.4vh; font-weight:700 }
-    h1,h2,h3,p { margin-top:0 } h1 { font-size:6.2vh; line-height:1.02; letter-spacing:-.045em } h2 { color:var(--navy); font-size:4.2vh; letter-spacing:-.025em; margin-bottom:3.5vh } h3 { font-size:2.35vh; color:var(--blue); margin-bottom:1vh }
-    p,li { font-size:2.1vh; line-height:1.45 } ul,ol { padding-left:1.4em; margin:1vh 0 } li { margin:.65vh 0 } strong { color:var(--navy) }
-    .eyebrow { color:var(--blue); text-transform:uppercase; letter-spacing:.17em; font-size:1.45vh; font-weight:800; margin-bottom:2vh }
-    .subtitle { font-size:2.5vh; color:var(--muted); max-width:70%; line-height:1.4 }
-    .grid2 { display:grid; grid-template-columns:1fr 1fr; gap:4vh } .grid3 { display:grid; grid-template-columns:repeat(3,1fr); gap:2.5vh }
-    .card { background:white; border:1px solid #dce3eb; border-radius:1.3vh; padding:2.2vh; box-shadow:0 1vh 2.5vh #17324d0b }
-    .card p,.card li { font-size:1.75vh } .card h3 { display:flex; gap:.7vh; align-items:center }
-    .tag { display:inline-block; background:#dff4f1; color:#176b68; border-radius:99px; padding:.45vh 1vh; font-size:1.35vh; font-weight:800 }
-    .code { background:#10253f; color:#eaf6ff; border-radius:1.2vh; padding:2.2vh 2.6vh; white-space:pre-wrap; font:1.65vh/1.5 ui-monospace,SFMono-Regular,monospace }
-    .callout { border-left:.7vh solid var(--gold); padding:1vh 1.8vh; background:#fff7e3; font-size:1.8vh }
-    .metric { font-size:4.8vh; font-weight:850; color:var(--blue); line-height:1 } .metric-label { color:var(--muted); font-size:1.45vh; margin-top:.8vh }
-    .flow { display:flex; align-items:stretch; gap:1.2vh; margin-top:3vh } .node { flex:1; background:white; border:.28vh solid #cfdae5; border-radius:1.1vh; padding:1.8vh; text-align:center; font-size:1.65vh } .node b { display:block; font-size:2vh; margin:.5vh 0; color:var(--navy) } .arrow { align-self:center; color:var(--blue); font-size:3.5vh; font-weight:900 }
-    .swim { display:grid; grid-template-columns:17% 1fr; border-top:1px solid #ccd6e0 } .swim>* { border-bottom:1px solid #ccd6e0; padding:1.1vh } .who { color:var(--blue); font-weight:800; font-size:1.6vh } .step { font-size:1.55vh; background:white }
-    .timeline { display:grid; grid-template-columns:repeat(3,1fr); gap:2vh; margin-top:2vh } .phase { border-top:.55vh solid var(--cyan); padding-top:1.5vh } .phase:nth-child(2){border-color:var(--blue)} .phase:nth-child(3){border-color:var(--gold)}
-    .phase p,.phase li { font-size:1.65vh } .bigq { font-size:3.2vh; color:var(--navy); padding:1.5vh 0; border-bottom:1px solid #d9e1e9 }
-    .cover { color:white; background:linear-gradient(130deg,#0d223b 0%,#164d70 62%,#1f7d82 100%) }
-    .cover h1 { max-width:75%; margin-top:10vh } .cover .subtitle { color:#d8edf3 } .orb { position:absolute; border-radius:50%; border:1px solid #ffffff30 } .o1{width:52vh;height:52vh;right:-10vh;top:-8vh}.o2{width:29vh;height:29vh;right:11vh;top:4vh}.o3{width:12vh;height:12vh;right:19vh;top:13vh;background:#f4b94233}
-    .footer { position:absolute; bottom:4%; left:7%; font-size:1.25vh; color:#8090a2 }
-    nav { position:fixed; z-index:5; left:50%; bottom:1.6vh; transform:translateX(-50%); display:flex; gap:.6vh; padding:.6vh; background:#06121ed9; border-radius:99px }
-    button { border:0; border-radius:99px; background:#ffffff22; color:white; width:3.2vh; height:3.2vh; cursor:pointer } button:hover,button.on { background:var(--cyan); color:#08202c }
-    @media print { body{overflow:visible;background:white}.deck{display:block;height:auto}.slide{display:block!important;width:13.333in;height:7.5in;break-after:page}.slide::after,nav{display:none} }
-  </style>
-</head>
-<body>
-<main class="deck">
-  <section class="slide cover active" data-n="01">
-    <div class="orb o1"></div><div class="orb o2"></div><div class="orb o3"></div>
-    <p class="eyebrow" style="color:#75ddd5">Reference proof of concept</p>
-    <h1>AnVIL + Terra<br>meets <span style="color:#75ddd5">git-drs</span></h1>
-    <p class="subtitle">Version controlled dataset layouts—without copying controlled-access payloads into Git.</p>
-    <p class="footer" style="color:#bad5df">Design briefing · July 2026 · source: docs/anvil-terra-poc.md</p>
-  </section>
-
-  <section class="slide" data-n="02">
-    <p class="eyebrow">The idea in one picture</p><h2>Git moves references. AnVIL moves bytes.</h2>
-    <div class="flow">
-      <div class="node"><span class="tag">USER A</span><b>Add references</b>ADC-authorized metadata validation</div><div class="arrow">→</div>
-      <div class="node"><span class="tag">GIT</span><b>Commit pointers</b>Canonical DRS URI + size + checksum</div><div class="arrow">→</div>
-      <div class="node"><span class="tag">USER B</span><b>Clone + authenticate</b>Independent Google identity</div><div class="arrow">→</div>
-      <div class="node"><span class="tag">ANVIL</span><b>Hydrate</b>Fresh authorized URL; verified bytes</div>
-    </div>
-    <div class="grid3" style="margin-top:5vh"><div><div class="metric">0</div><div class="metric-label">payload bytes committed to Git</div></div><div><div class="metric">2</div><div class="metric-label">independent user identities</div></div><div><div class="metric">1</div><div class="metric-label">portable canonical reference</div></div></div>
-    <p class="callout" style="margin-top:4vh"><strong>Security boundary:</strong> Git visibility reveals paths and DRS identifiers; it never grants authorization to the underlying data.</p>
-  </section>
-
-  <section class="slide" data-n="03">
-    <p class="eyebrow">Use cases</p><h2>One reference model, four perspectives</h2>
-    <div class="grid2">
-      <article class="card"><h3>✦ Data reference author</h3><p>Publish a reviewable, versioned dataset layout—one object or a manifest—without downloading payloads.</p></article>
-      <article class="card"><h3>↓ Data consumer</h3><p>Clone pointers, authenticate independently, then hydrate everything or only paths matching a pattern.</p></article>
-      <article class="card"><h3>◉ Unauthorized reader</h3><p>Inspect repository history but receive a clear denial when attempting controlled-data hydration.</p></article>
-      <article class="card"><h3>✓ Repository maintainer</h3><p>Review deterministic pointers, diagnose provider failures, and run clean-clone acceptance tests.</p></article>
-    </div>
-    <p class="footer">Out of scope: uploads, record mutation, provider copying, remote GC, and workspace-table sync.</p>
-  </section>
-
-  <section class="slide" data-n="04">
-    <p class="eyebrow">How to · author</p><h2>Add once. Publish with ordinary Git.</h2>
-    <div class="grid2">
-      <div><div class="code">gcloud auth application-default login
-
-git drs add-ref --remote anvil \
-  drs://authority/object-1 data/sample.cram
-
-# or: validate a batch before writing
-git drs add-ref --remote anvil \
-  --manifest references.tsv --dry-run
-
-git add .git-drs/ .gitattributes data/
-git commit -m "Add AnVIL data references"
-git push</div></div>
-      <div><h3>What gets published</h3><ul><li>Canonical DRS URI pointers</li><li>Paths and Git history</li><li><code>.gitattributes</code></li><li>Allowlisted, non-secret remote configuration</li></ul><h3 style="margin-top:3vh;color:var(--red)">What never gets published</h3><ul><li>Payload bytes or cache content</li><li>Tokens, headers, or ADC files</li><li>Signed download URLs</li></ul></div>
-    </div>
-  </section>
-
-  <section class="slide" data-n="05">
-    <p class="eyebrow">How to · consumer</p><h2>A clean clone is enough</h2>
-    <div class="grid2">
-      <div><div class="code">gcloud auth application-default login
-
-git clone &lt;git-repository&gt;
-cd &lt;repository&gt;
-
-# hydrate every authorized reference
-git drs pull
-
-# or only one dataset slice
-git drs pull -I "data/*.cram"</div><p class="callout" style="margin-top:2vh">No author cache, local Git config, token, or signed URL is transferred.</p></div>
-      <div><div class="swim"><div class="who">GIT</div><div class="step">Clone pointer + safe public config</div><div class="who">USER B</div><div class="step">Supply ADC; choose all or include pattern</div><div class="who">RESOLVER</div><div class="step">Fetch current metadata and fresh access</div><div class="who">CACHE</div><div class="step">Download → verify → atomic promote</div><div class="who">WORKTREE</div><div class="step">Hydrate destination only after validation</div></div></div>
-    </div>
-  </section>
-
-  <section class="slide" data-n="06">
-    <p class="eyebrow">Example user workflow</p><h2>From AnVIL manifest to a pointer-only GitHub repo</h2>
-    <div class="grid2">
-      <div><h3>1 · Configure and add references</h3><div class="code" style="font-size:1.35vh">git init
-
-# Configure the read-only Terra remote.
-git drs remote add terra anvil \
-  --drs-endpoint https://data.terra.bio \
-  --auth google-adc \
-  --mode read-only
-
-# Download the TSV from AnVIL Data Explorer first.
-manifest=/tmp/anvil-manifest-38dc7537.tsv
-
-# Generate, review, then run one add-ref per row.
-scripts/anvil-add-ref-commands.sh "$manifest" \
-  > /tmp/add-anvil-refs.sh
-cat /tmp/add-anvil-refs.sh
-bash /tmp/add-anvil-refs.sh</div></div>
-      <div><h3>2 · Commit, hydrate, and publish</h3><div class="code" style="font-size:1.35vh"># The generated commands create references such as:
-# sequencing_dataset.tsv · subject.tsv
-# sequencing_file.tsv · plink_file_wide.tsv
-# sample.tsv · sample_set.tsv
-# population_descriptor.tsv
-
-git add .git-drs/ .gitattributes '*.tsv'
-git commit -m "Add references to AnVIL data"
-
-# Materialize only TSVs on local disk.
-git drs pull -I "*.tsv"
-git status
-
-git branch -M main
-git remote add origin \
-  https://github.com/bwalsh/ANVIL_1000G_PRIMED_data_model.git
-git push -u origin main</div></div>
-    </div>
-    <p class="callout" style="margin-top:2vh"><strong>Result:</strong> the local worktree contains hydrated TSV data; GitHub contains only small DRS pointers and safe public configuration—not the dataset payloads.</p>
-  </section>
-
-  <section class="slide" data-n="07">
-    <p class="eyebrow">Examples</p><h2>Portable pointer + safe configuration</h2>
-    <div class="grid2">
-      <div><h3>Tracked pointer</h3><div class="code">version https://calypr.github.io/spec/v1
-oid drs://authority/object-1
-size 987654321
-sha256 8d969eef…</div><p><strong>The DRS URI stays canonical</strong> even when a SHA256 is available. A checksum describes content; it does not identify the AnVIL record.</p></div>
-      <div><h3>Tracked <code>.git-drs/config.yaml</code></h3><div class="code">version: 1
-default_remote: anvil
-remotes:
-  anvil:
-    type: terra
-    endpoint: https://data.terra.bio
-    auth: google-adc
-    mode: read-only</div><p>Only allowlisted public settings load. Secret-like or unknown sensitive fields fail closed.</p></div>
-    </div>
-  </section>
-
-  <section class="slide" data-n="08">
-    <p class="eyebrow">Architecture</p><h2>Provider-neutral resolution breaks Syfon coupling</h2>
-    <svg viewBox="0 0 1200 410" role="img" aria-label="Layered resolver architecture" style="width:100%;height:47vh">
-      <defs><marker id="a" markerWidth="8" markerHeight="8" refX="7" refY="4" orient="auto"><path d="M0 0L8 4L0 8Z" fill="#1d70a2"/></marker></defs>
-      <g font-family="system-ui" text-anchor="middle"><rect x="30" y="45" width="220" height="95" rx="14" fill="#fff" stroke="#b9c9d8"/><text x="140" y="84" font-size="22" font-weight="700">Commands</text><text x="140" y="113" font-size="17">add-ref · pull · ping</text>
-      <rect x="350" y="45" width="500" height="95" rx="14" fill="#dff4f1" stroke="#54c6be" stroke-width="3"/><text x="600" y="82" font-size="23" font-weight="700">Resolver interface</text><text x="600" y="113" font-size="17">GetObject · GetAccess</text>
-      <rect x="950" y="45" width="220" height="95" rx="14" fill="#fff" stroke="#b9c9d8"/><text x="1060" y="84" font-size="22" font-weight="700">Identity</text><text x="1060" y="113" font-size="17">remote · cache · content</text>
-      <path d="M250 92H345M855 92H945" stroke="#1d70a2" stroke-width="4" marker-end="url(#a)"/>
-      <rect x="350" y="250" width="220" height="105" rx="14" fill="#164d70"/><text x="460" y="292" font-size="21" font-weight="700" fill="white">AnVILResolver</text><text x="460" y="322" font-size="16" fill="#d8edf3">Google ADC · routing</text>
-      <rect x="630" y="250" width="220" height="105" rx="14" fill="#164d70"/><text x="740" y="292" font-size="21" font-weight="700" fill="white">SyfonResolver</text><text x="740" y="322" font-size="16" fill="#d8edf3">Gen3 · local behavior</text>
-      <path d="M540 140L465 245M660 140L735 245" stroke="#1d70a2" stroke-width="4" marker-end="url(#a)"/></g>
-    </svg>
-    <p class="callout">Resolver selection comes from the configured remote—not a user-facing <code>--remote-type</code> switch.</p>
-  </section>
-
-  <section class="slide" data-n="09">
-    <p class="eyebrow">Architecture detail</p><h2>Three identities—not one overloaded OID</h2>
-    <div class="grid3">
-      <article class="card"><span class="tag">REMOTE</span><h3 style="margin-top:2vh">Canonical DRS URI</h3><p>Normalized provider record identity. Committed to Git and used for object/access resolution.</p></article>
-      <article class="card"><span class="tag">LOCAL</span><h3 style="margin-top:2vh">Cache OID</h3><p>Filesystem-safe SHA256 of a versioned prefix plus normalized DRS URI. Never replaces remote identity.</p></article>
-      <article class="card"><span class="tag">CONTENT</span><h3 style="margin-top:2vh">Content SHA256</h3><p>Durable integrity metadata, when supplied. Used to verify bytes—not to locate the record.</p></article>
-    </div>
-    <div class="code" style="margin-top:3vh">cache_oid = sha256("git-drs-anvil-ref:v1\n" + normalized_drs_uri)</div>
-    <p class="callout" style="margin-top:2vh"><strong>Download invariant:</strong> resolve fresh access → temporary file → size/checksum verify → atomic cache promotion → worktree hydration.</p>
-  </section>
-
-  <section class="slide" data-n="10">
-    <p class="eyebrow">Tests</p><h2>Good component coverage; one decisive gap</h2>
-    <div class="grid3">
-      <article class="card"><span class="tag">IMPLEMENTED</span><h3 style="margin-top:1.5vh">Focused coverage</h3><ul><li>Resolver contract + errors</li><li>Terra remote + safe config</li><li>Canonical pointer/cache key</li><li>Terra ping + push refusal</li></ul></article>
-      <article class="card"><span class="tag">PARTIAL</span><h3 style="margin-top:1.5vh">Workflow coverage</h3><ul><li>Manifest validation + dry run</li><li>Pull size/SHA256 checks</li><li>Selective hydration</li><li>Cache reuse behavior</li></ul></article>
-      <article class="card"><span class="tag" style="background:#fff0cf;color:#805a00">MISSING</span><h3 style="margin-top:1.5vh">POC acceptance</h3><ul><li>Independent User A/User B state</li><li>Real or contract-faithful AnVIL</li><li>Expired URL + retry journey</li><li>Authorization leak audit</li></ul></article>
-    </div>
-    <div class="flow"><div class="node"><b>Arrange</b>Separate homes, config, ADC, caches</div><div class="arrow">→</div><div class="node"><b>Act</b>Commit → clone → authenticate → pull</div><div class="arrow">→</div><div class="node"><b>Assert</b>Verified bytes; isolated credentials</div></div>
-  </section>
-
-  <section class="slide" data-n="11">
-    <p class="eyebrow">Implementation audit</p><h2>Most original blockers are now closed</h2>
-    <div class="grid2">
-      <div><h3 style="color:#176b68">✓ Implemented</h3><ul><li>ADC-backed <code>AnVILResolver</code> handles metadata and access.</li><li>Terra <code>add-ref</code> and pull use provider-neutral resolution.</li><li>Remote config selects behavior; <code>--remote-type</code> is hidden and deprecated.</li><li>Terra pointers retain DRS URI, size, and optional SHA256.</li><li>DRS cache keys are derived separately from content checksums.</li></ul></div>
-      <div><h3 style="color:#a66c00">△ Still incomplete</h3><ul><li>Routing is only partly provider-neutral: slash-form authorities may map to HTTPS, while compact AnVIL IDs still require the trusted Terra resolver.</li><li>Service-info is only a Terra health probe; it does not discover or persist authentication, provider, or capabilities.</li><li>Remote setup still has provider-specific command shapes instead of one endpoint/alias + scope/auth model.</li><li>Downloads still lack bounded concurrency, retry, cancellation, and expired-URL re-resolution.</li><li>The production contract and a clean-clone, independent two-user acceptance test remain unverified.</li></ul></div>
-    </div>
-    <p class="callout" style="margin-top:2vh"><strong>Bottom line:</strong> this is no longer an unwired design. It is an implemented vertical slice that still needs production-contract validation, resilience, and end-to-end proof.</p>
-  </section>
-
-  <section class="slide" data-n="12">
-    <p class="eyebrow">Next steps</p><h2>Turn the vertical slice into a proven POC</h2>
-    <div class="timeline">
-      <article class="phase"><span class="tag">P0 · VERIFY</span><h3 style="margin-top:1.5vh">Prove production fit</h3><ul><li>Confirm endpoint + OAuth scopes</li><li>Certify service-info/object/access contracts</li><li>Test slash + compact DRS IDs</li><li>Run clean two-user clone/pull</li><li>Audit logs/history for secrets</li></ul></article>
-      <article class="phase"><span class="tag">P1 · HARDEN</span><h3 style="margin-top:1.5vh">Make it resilient</h3><ul><li>Trusted authority/alias routing</li><li>Persist deterministic auth discovery</li><li>Expired-URL re-resolution</li><li>Bounded retry + concurrency</li><li>Remote diagnostics + CI</li></ul></article>
-      <article class="phase"><span class="tag">P2 · GENERALIZE</span><h3 style="margin-top:1.5vh">Keep DRS composable</h3><ul><li>Unify <code>remote add</code></li><li>Resolver/auth/capability interfaces</li><li>CGC + Synapse contract fixtures</li><li>Keep publishing provider-specific</li><li>Defer mutation and cross-provider copy</li></ul></article>
-    </div>
-  </section>
-
-  <section class="slide" data-n="13">
-    <p class="eyebrow">Questions</p><h2>Decisions needed to start the POC</h2>
-    <div class="bigq">01 · Which authoritative AnVIL resolver contract, endpoint, and OAuth scopes will we certify?</div>
-    <div class="bigq">02 · What stable test objects cover checksummed, non-checksummed, large, and denied cases?</div>
-    <div class="bigq">03 · Is the proposed pointer extension compatible with every parser that must read it?</div>
-    <div class="bigq">04 · What is the supported override policy for tracked vs. local remote configuration?</div>
-    <div class="bigq">05 · Who owns the independent-user acceptance environment and compatibility matrix?</div>
-    <p class="footer">Use ← / →, space, or the controls below. Print to PDF in landscape for a shareable static deck.</p>
-  </section>
-</main>
-<nav aria-label="Slide navigation"></nav>
-<script>
-  const slides=[...document.querySelectorAll('.slide')], nav=document.querySelector('nav'); let current=0;
-  slides.forEach((_,i)=>{const b=document.createElement('button'); b.textContent=i+1; b.setAttribute('aria-label',`Go to slide ${i+1}`); b.onclick=()=>show(i); nav.appendChild(b)});
-  function show(i){current=(i+slides.length)%slides.length;slides.forEach((s,n)=>s.classList.toggle('active',n===current));[...nav.children].forEach((b,n)=>b.classList.toggle('on',n===current));history.replaceState(null,'',`#${current+1}`)}
-  addEventListener('keydown',e=>{if(['ArrowRight',' ','PageDown'].includes(e.key))show(current+1);if(['ArrowLeft','PageUp'].includes(e.key))show(current-1);if(e.key==='Home')show(0);if(e.key==='End')show(slides.length-1)});
-  show(Math.max(0,Math.min(slides.length-1,(parseInt(location.hash.slice(1))||1)-1)));
-</script>
-</body>
-</html>
diff --git a/docs/anvil-terra-poc-presentation.md b/docs/anvil-terra-poc-presentation.md
new file mode 100644
index 00000000..3de78a23
--- /dev/null
+++ b/docs/anvil-terra-poc-presentation.md
@@ -0,0 +1,345 @@
+---
+marp: true
+title: AnVIL + Terra x git-drs — reference POC
+description: A reference proof of concept for version-controlled dataset layouts
+paginate: true
+theme: git-drs
+---
+
+<!-- _class: cover -->
+<!-- _paginate: false -->
+
+<style>
+/* @theme git-drs */
+@import 'default';
+:root { --navy: #10253f; --blue: #1d70a2; --cyan: #54c6be; --gold: #f4b942; --paper: #f6f8fb; --muted: #607084; }
+section { background: var(--paper); color: #152334; font-family: Inter, ui-sans-serif, system-ui, sans-serif; padding: 64px 78px; }
+section::after { color: #8b98a8; font-size: 16px; font-weight: 700; }
+h1, h2, h3 { color: var(--navy); }
+h1 { font-size: 56px; letter-spacing: -.04em; }
+h2 { font-size: 40px; letter-spacing: -.025em; }
+h3 { color: var(--blue); font-size: 23px; }
+p, li { font-size: 20px; line-height: 1.4; }
+code { background: #e8edf3; }
+pre { background: var(--navy); border-radius: 12px; color: #eaf6ff; padding: 18px 22px; }
+pre code { background: transparent; font-size: 16px; line-height: 1.4; }
+blockquote { background: #fff7e3; border-left: 7px solid var(--gold); color: #152334; padding: 10px 18px; }
+blockquote p { font-size: 18px; }
+table { width: 100%; }
+th { background: var(--navy); color: white; }
+td, th { font-size: 17px; }
+.cover { background: linear-gradient(130deg, #0d223b 0%, #164d70 62%, #1f7d82 100%); color: white; }
+.cover h1 { color: white; font-size: 64px; margin-top: 110px; max-width: 850px; }
+.cover strong { color: #75ddd5; }
+.cover p { color: #d8edf3; font-size: 26px; max-width: 850px; }
+.small p, .small li { font-size: 17px; }
+.compact p, .compact li { font-size: 16px; line-height: 1.3; }
+.columns { display: grid; grid-template-columns: 1fr 1fr; gap: 42px; }
+.columns3 { display: grid; grid-template-columns: repeat(3, 1fr); gap: 28px; }
+.card { background: white; border: 1px solid #dce3eb; border-radius: 12px; padding: 18px 22px; }
+.card p, .card li { font-size: 17px; }
+.tag { background: #dff4f1; border-radius: 99px; color: #176b68; display: inline-block; font-size: 14px; font-weight: 800; padding: 5px 10px; }
+</style>
+
+# AnVIL + Terra meets **git-drs**
+
+Version-controlled dataset layouts—without copying controlled-access payloads into Git.
+
+Reference proof of concept · July 2026
+
+---
+
+## Git moves references. AnVIL moves bytes.
+
+| User A | Git | User B | AnVIL |
+|---|---|---|---|
+| Add references with ADC-authorized metadata validation | Commit canonical DRS URI, size, and checksum | Clone and authenticate with an independent Google identity | Hydrate from a fresh authorized URL and verify bytes |
+
+<div class="columns3">
+<div class="card"><h3>0 payload bytes</h3><p>committed to Git</p></div>
+<div class="card"><h3>2 identities</h3><p>authenticate independently</p></div>
+<div class="card"><h3>1 reference</h3><p>stays canonical and portable</p></div>
+</div>
+
+> **Security boundary:** Git visibility reveals paths and DRS identifiers; it never grants authorization to the underlying data.
+
+---
+
+## One reference model, four perspectives
+
+<div class="columns">
+<div class="card"><h3>Data reference author</h3><p>Publish a reviewable, versioned dataset layout—one object or a manifest—without downloading payloads.</p></div>
+<div class="card"><h3>Data consumer</h3><p>Clone pointers, authenticate independently, then hydrate everything or only paths matching a pattern.</p></div>
+<div class="card"><h3>Unauthorized reader</h3><p>Inspect repository history but receive a clear denial when attempting controlled-data hydration.</p></div>
+<div class="card"><h3>Repository maintainer</h3><p>Review deterministic pointers, diagnose provider failures, and run clean-clone acceptance tests.</p></div>
+</div>
+
+**Out of scope:** uploads, record mutation, provider copying, remote GC, and workspace-table sync.
+
+---
+
+## Add once. Publish with ordinary Git.
+
+<div class="columns">
+<div>
+
+```bash
+gcloud auth application-default login
+
+git drs add-ref --remote anvil \
+  drs://authority/object-1 data/sample.cram
+
+# Validate a batch before writing
+git drs add-ref --remote anvil \
+  --manifest references.tsv --dry-run
+
+git add .git-drs/ .gitattributes data/
+git commit -m "Add AnVIL data references"
+git push
+```
+</div>
+<div>
+
+### Published
+
+- Canonical DRS URI pointers
+- Paths and Git history
+- `.gitattributes`
+- Allowlisted, non-secret remote configuration
+
+### Never published
+
+- Payload bytes or cache content
+- Tokens, headers, or ADC files
+- Signed download URLs
+</div>
+</div>
+
+---
+
+## A clean clone is enough
+
+<div class="columns">
+<div>
+
+```bash
+gcloud auth application-default login
+
+git clone <git-repository>
+cd <repository>
+
+# Hydrate every authorized reference
+git drs pull
+
+# Or only one dataset slice
+git drs pull -I "data/*.cram"
+```
+
+> No author cache, local Git config, token, or signed URL is transferred.
+</div>
+<div>
+
+| Stage | Action |
+|---|---|
+| **Git** | Clone pointer and safe public config |
+| **User B** | Supply ADC; choose all or include pattern |
+| **Resolver** | Fetch current metadata and fresh access |
+| **Cache** | Download, verify, atomically promote |
+| **Worktree** | Hydrate only after validation |
+</div>
+</div>
+
+---
+
+<!-- _class: compact -->
+
+## AnVIL manifest to pointer-only GitHub repo
+
+<div class="columns">
+<div>
+
+### 1. Configure and add references
+
+```bash
+git init
+git drs remote add terra anvil \
+  --drs-endpoint https://data.terra.bio \
+  --auth google-adc --mode read-only
+
+# Download the TSV from AnVIL Data Explorer first.
+manifest=/tmp/anvil-manifest-38dc7537.tsv
+scripts/anvil-add-ref-commands.sh "$manifest" \
+  > /tmp/add-anvil-refs.sh
+cat /tmp/add-anvil-refs.sh
+bash /tmp/add-anvil-refs.sh
+```
+</div>
+<div>
+
+### 2. Commit, hydrate, and publish
+
+```bash
+git add .git-drs/ .gitattributes '*.tsv'
+git commit -m "Add references to AnVIL data"
+
+# Materialize only TSVs locally.
+git drs pull -I "*.tsv"
+git status
+
+git branch -M main
+git remote add origin \
+  https://github.com/bwalsh/\
+ANVIL_1000G_PRIMED_data_model.git
+git push -u origin main
+```
+</div>
+</div>
+
+> **Result:** the worktree contains hydrated TSV data; GitHub contains only DRS pointers and safe public configuration.
+
+---
+
+## Portable pointer + safe configuration
+
+<div class="columns">
+<div>
+
+### Tracked pointer
+
+```text
+version https://calypr.github.io/spec/v1
+oid drs://authority/object-1
+size 987654321
+sha256 8d969eef…
+```
+
+The DRS URI stays canonical. A checksum describes content; it does not identify the AnVIL record.
+</div>
+<div>
+
+### Tracked `.git-drs/config.yaml`
+
+```yaml
+version: 1
+default_remote: anvil
+remotes:
+  anvil:
+    type: terra
+    endpoint: https://data.terra.bio
+    auth: google-adc
+    mode: read-only
+```
+
+Only allowlisted public settings load. Secret-like or unknown sensitive fields fail closed.
+</div>
+</div>
+
+---
+
+## Provider-neutral resolution breaks Syfon coupling
+
+```text
+Commands                 Resolver interface                 Identities
+add-ref · pull · ping  -> GetObject · GetAccess          -> remote · cache · content
+                              |
+                   +----------+----------+
+                   |                     |
+            AnVILResolver          SyfonResolver
+          Google ADC · routing   Gen3 · local behavior
+```
+
+### Design rules
+
+- Commands depend on one resolver contract.
+- The configured remote selects the resolver.
+- Authentication and provider routing stay behind the interface.
+- There is no user-facing `--remote-type` switch.
+
+---
+
+## Three identities—not one overloaded OID
+
+<div class="columns3">
+<div class="card"><span class="tag">REMOTE</span><h3>Canonical DRS URI</h3><p>Normalized provider record identity. Committed to Git and used for object and access resolution.</p></div>
+<div class="card"><span class="tag">LOCAL</span><h3>Cache OID</h3><p>Filesystem-safe SHA256 of a versioned prefix plus normalized DRS URI. Never replaces remote identity.</p></div>
+<div class="card"><span class="tag">CONTENT</span><h3>Content SHA256</h3><p>Durable integrity metadata, when supplied. Used to verify bytes—not to locate the record.</p></div>
+</div>
+
+```text
+cache_oid = sha256("git-drs-anvil-ref:v1\n" + normalized_drs_uri)
+```
+
+> **Download invariant:** fresh access → temporary file → verify size/checksum → atomic cache promotion → hydrate worktree.
+
+---
+
+<!-- _class: small -->
+
+## Good component coverage; one decisive gap
+
+<div class="columns3">
+<div class="card"><span class="tag">IMPLEMENTED</span><h3>Focused coverage</h3><ul><li>Resolver contract and errors</li><li>Terra remote and safe config</li><li>Canonical pointer/cache key</li><li>Terra ping and push refusal</li></ul></div>
+<div class="card"><span class="tag">PARTIAL</span><h3>Workflow coverage</h3><ul><li>Manifest validation and dry run</li><li>Pull size/SHA256 checks</li><li>Selective hydration</li><li>Cache reuse behavior</li></ul></div>
+<div class="card"><span class="tag">MISSING</span><h3>POC acceptance</h3><ul><li>Independent User A/User B state</li><li>Real or contract-faithful AnVIL</li><li>Expired URL and retry journey</li><li>Authorization leak audit</li></ul></div>
+</div>
+
+| Arrange | Act | Assert |
+|---|---|---|
+| Separate homes, config, ADC, caches | Commit → clone → authenticate → pull | Verified bytes; isolated credentials |
+
+---
+
+<!-- _class: small -->
+
+## Most original blockers are now closed
+
+<div class="columns">
+<div>
+
+### Implemented
+
+- ADC-backed `AnVILResolver` handles metadata and access.
+- Terra `add-ref` and pull use provider-neutral resolution.
+- Remote config selects behavior; `--remote-type` is deprecated.
+- Terra pointers retain DRS URI, size, and optional SHA256.
+- Cache keys are separate from content checksums.
+</div>
+<div>
+
+### Still incomplete
+
+- Compact AnVIL IDs still require the trusted Terra resolver.
+- Service-info does not discover auth, provider, or capabilities.
+- Remote setup retains provider-specific command shapes.
+- Downloads lack bounded concurrency, retry, cancellation, and expired-URL re-resolution.
+- Production and independent two-user acceptance remain unverified.
+</div>
+</div>
+
+> **Bottom line:** an implemented vertical slice still needs production-contract validation, resilience, and end-to-end proof.
+
+---
+
+<!-- _class: small -->
+
+## Turn the vertical slice into a proven POC
+
+<div class="columns3">
+<div class="card"><span class="tag">P0 · VERIFY</span><h3>Prove production fit</h3><ul><li>Confirm endpoint and OAuth scopes</li><li>Certify object/access contracts</li><li>Test slash and compact DRS IDs</li><li>Run clean two-user clone/pull</li><li>Audit logs and history</li></ul></div>
+<div class="card"><span class="tag">P1 · HARDEN</span><h3>Make it resilient</h3><ul><li>Trusted authority routing</li><li>Persist auth discovery</li><li>Expired-URL re-resolution</li><li>Bounded retry and concurrency</li><li>Remote diagnostics and CI</li></ul></div>
+<div class="card"><span class="tag">P2 · GENERALIZE</span><h3>Keep DRS composable</h3><ul><li>Unify `remote add`</li><li>Resolver/auth interfaces</li><li>CGC and Synapse fixtures</li><li>Keep publishing provider-specific</li><li>Defer mutation and copying</li></ul></div>
+</div>
+
+---
+
+## Decisions needed to start the POC
+
+1. Which authoritative AnVIL resolver contract, endpoint, and OAuth scopes will we certify?
+2. What stable test objects cover checksummed, non-checksummed, large, and denied cases?
+3. Is the pointer extension compatible with every parser that must read it?
+4. What is the supported override policy for tracked versus local remote configuration?
+5. Who owns the independent-user acceptance environment and compatibility matrix?
+
+### Questions?
+
+The maintained design source is [`docs/anvil-terra-poc.md`](anvil-terra-poc.md).
diff --git a/docs/github-pages.md b/docs/github-pages.md
new file mode 100644
index 00000000..91de92a4
--- /dev/null
+++ b/docs/github-pages.md
@@ -0,0 +1,98 @@
+# Publishing documentation with GitHub Pages
+
+The [`Publish documentation`](../.github/workflows/pages.yaml) workflow builds
+the end-user documentation selected in `mkdocs.yml` and renders the
+[`anvil-terra-poc-presentation.md`](anvil-terra-poc-presentation.md) Marp deck.
+It publishes both outputs as one GitHub Pages site. Do not edit or commit the
+generated HTML.
+
+## Enable GitHub Pages
+
+An administrator only needs to configure Pages once for the repository:
+
+1. Open the repository on GitHub and select **Settings**.
+2. Select **Pages** under **Code and automation**.
+3. Under **Build and deployment**, set **Source** to **GitHub Actions**.
+4. If GitHub prompts you to enable Actions, open **Settings → Actions →
+   General**, allow GitHub Actions to run, and save the setting.
+5. Open **Actions → Publish documentation**, select **Run workflow**, choose the
+   `main` branch, and select **Run workflow**.
+6. When the workflow finishes, its `deploy` job shows the published site URL.
+   The URL also appears in **Settings → Pages**.
+
+The repository must permit the official actions used by the workflow. If the
+organization restricts actions, allow these actions and their pinned major
+versions:
+
+- `actions/checkout@v4`
+- `actions/configure-pages@v5`
+- `actions/setup-python@v5`
+- `actions/upload-pages-artifact@v3`
+- `actions/deploy-pages@v4`
+
+The workflow declares the required `pages: write` and `id-token: write`
+permissions itself. No deploy key, personal access token, or `gh-pages` branch
+is required.
+
+## Publish updates
+
+After Pages is enabled, push a change under `docs/`, `mkdocs.yml`, or the Pages
+workflow to `main`. The workflow runs automatically, renders the selected
+Markdown pages with MkDocs, renders the deck with the pinned Marp CLI version,
+and deploys the combined site. A maintainer can also publish without a content
+change by running the workflow manually from the **Actions** tab.
+
+The generated site includes:
+
+```text
+/index.html
+/quickstart/
+/getting-started/
+/commands/
+/pointer-files/
+/adding-s3-files/
+/remove-files/
+/troubleshooting/
+/anvil-terra-poc-presentation.html
+```
+
+If the repository's default publishing branch is not `main`, update the
+`on.push.branches` value in `.github/workflows/pages.yaml` before relying on
+automatic deployments.
+
+## Preview locally
+
+With Python, Node.js, and npm installed, stage the selected end-user pages and
+build the same combined site as CI:
+
+```bash
+python -m pip install mkdocs-material==9.6.14
+rm -rf .pages-docs _site
+mkdir .pages-docs
+cp docs/{index,quickstart,getting-started,commands,pointer-files}.md .pages-docs/
+cp docs/{adding-s3-files,remove-files,troubleshooting}.md .pages-docs/
+npx --yes @marp-team/marp-cli@4.2.3 \
+  docs/anvil-terra-poc-presentation.md \
+  --html \
+  --output .pages-docs/anvil-terra-poc-presentation.html
+mkdocs build --strict
+python -m http.server --directory _site 8000
+```
+
+Open `http://localhost:8000/` in a browser. Keep dependency versions in these
+commands synchronized with `.github/workflows/pages.yaml` when upgrading the
+documentation toolchain.
+
+## Troubleshooting
+
+- **The workflow does not start after a push:** confirm the change is on
+  `main` and touches `docs/**`, `mkdocs.yml`, or
+  `.github/workflows/pages.yaml`.
+- **The deploy job reports that Pages is not enabled:** repeat the enablement
+  steps and confirm the Pages source is **GitHub Actions**, not **Deploy from a
+  branch**.
+- **An action is blocked:** ask an organization owner to allow the five
+  official GitHub actions listed above.
+- **The page is not immediately available:** wait for the `deploy` job to
+  finish and use the URL shown in that job rather than guessing the repository
+  URL.
diff --git a/docs/index.html b/docs/index.html
deleted file mode 100644
index 4d5f70db..00000000
--- a/docs/index.html
+++ /dev/null
@@ -1,109 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-    <meta charset="UTF-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>Git DRS Documentation</title>
-    <style>
-        * {
-            margin: 0;
-            padding: 0;
-            box-sizing: border-box;
-        }
-        body {
-            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;
-            line-height: 1.6;
-            color: #333;
-            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
-            min-height: 100vh;
-            display: flex;
-            align-items: center;
-            justify-content: center;
-            padding: 20px;
-        }
-        .container {
-            background: white;
-            border-radius: 12px;
-            box-shadow: 0 20px 60px rgba(0, 0, 0, 0.3);
-            max-width: 600px;
-            width: 100%;
-            padding: 60px 40px;
-            text-align: center;
-        }
-        h1 {
-            font-size: 2.5em;
-            margin-bottom: 20px;
-            color: #667eea;
-        }
-        .subtitle {
-            font-size: 1.1em;
-            color: #666;
-            margin-bottom: 40px;
-            line-height: 1.8;
-        }
-        .cta-section {
-            margin-top: 50px;
-            padding-top: 40px;
-            border-top: 2px solid #eee;
-        }
-        .cta-text {
-            font-size: 0.95em;
-            color: #999;
-            margin-bottom: 20px;
-        }
-        a.btn {
-            display: inline-block;
-            padding: 14px 32px;
-            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
-            color: white;
-            text-decoration: none;
-            border-radius: 6px;
-            font-weight: 600;
-            transition: transform 0.2s, box-shadow 0.2s;
-            box-shadow: 0 4px 15px rgba(102, 126, 234, 0.4);
-        }
-        a.btn:hover {
-            transform: translateY(-2px);
-            box-shadow: 0 6px 20px rgba(102, 126, 234, 0.6);
-        }
-        .feature-list {
-            margin-top: 50px;
-            text-align: left;
-            display: inline-block;
-        }
-        .feature-list li {
-            list-style: none;
-            padding: 10px 0;
-            color: #666;
-            font-size: 0.95em;
-        }
-        .feature-list li:before {
-            content: "✓ ";
-            color: #667eea;
-            font-weight: bold;
-            margin-right: 10px;
-        }
-    </style>
-</head>
-<body>
-    <div class="container">
-        <h1>Welcome to Git DRS</h1>
-        <p class="subtitle">
-            Git-based Data Repository Service (DRS) integration for Terra/Anvil.
-            Manage large files and data efficiently with DRS-enabled Git workflows.
-        </p>
-        
-        <ul class="feature-list">
-            <li>Seamless DRS integration with Git</li>
-            <li>Support for multipart uploads and downloads</li>
-            <li>Terra/Anvil workspace compatibility</li>
-            <li>Efficient large file handling</li>
-        </ul>
-
-        <div class="cta-section">
-            <p class="cta-text">Get started with our Terra/Anvil POC presentation:</p>
-            <a href="anvil-terra-poc-presentation.html" class="btn">View Presentation →</a>
-        </div>
-    </div>
-</body>
-</html>
diff --git a/docs/index.md b/docs/index.md
new file mode 100644
index 00000000..b7671758
--- /dev/null
+++ b/docs/index.md
@@ -0,0 +1,35 @@
+# Git DRS Documentation
+
+`git-drs` brings Git-compatible versioning workflows to large data stored
+behind Data Repository Service (DRS) providers. Use these end-user guides to
+install the command, connect a repository, manage pointer-backed files, and
+resolve common problems.
+
+## Start here
+
+- [Quick Start](quickstart.md) — install `git-drs`, configure a remote, and
+  complete the first push and pull workflow.
+- [Getting Started](getting-started.md) — understand the Git and DRS mental
+  model and the most common repository workflows.
+- [Commands Reference](commands.md) — look up the supported CLI commands and
+  their options.
+
+## Work with data
+
+- [Pointer Files and Reference State](pointer-files.md) — learn what Git
+  commits in place of large payloads.
+- [Add Existing S3 Objects](adding-s3-files.md) — create references for data
+  that is already in provider storage.
+- [Remove Files](remove-files.md) — remove tracked files and understand remote
+  reconciliation behavior.
+- [Troubleshooting](troubleshooting.md) — diagnose setup, authentication,
+  tracking, push, and hydration problems.
+
+## AnVIL/Terra proof of concept
+
+View the [AnVIL/Terra DRS reference presentation](anvil-terra-poc-presentation.html)
+for a visual overview of the reference-only workflow, architecture, security
+boundary, and remaining production-validation work.
+
+The presentation is generated from Markdown during the Pages build; its HTML
+output is not stored in the repository.
diff --git a/mkdocs.yml b/mkdocs.yml
new file mode 100644
index 00000000..62de6f0a
--- /dev/null
+++ b/mkdocs.yml
@@ -0,0 +1,30 @@
+site_name: Git DRS Documentation
+site_description: End-user documentation for Git-compatible DRS workflows
+repo_url: https://github.com/calypr/git-drs
+docs_dir: .pages-docs
+site_dir: _site
+
+theme:
+  name: material
+  features:
+    - content.code.copy
+    - navigation.sections
+    - navigation.top
+
+markdown_extensions:
+  - admonition
+  - pymdownx.superfences
+  - pymdownx.tabbed:
+      alternate_style: true
+
+nav:
+  - Home: index.md
+  - Start here:
+      - Quick Start: quickstart.md
+      - Getting Started: getting-started.md
+      - Commands Reference: commands.md
+  - Work with data:
+      - Pointer Files and Reference State: pointer-files.md
+      - Add Existing S3 Objects: adding-s3-files.md
+      - Remove Files: remove-files.md
+      - Troubleshooting: troubleshooting.md

From 68c083e8d63ea7fc6191a47a842f5e02be0f069f Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 22 Jul 2026 15:34:17 -0700
Subject: [PATCH 39/66] Define DRS preset catalog ownership and safe overrides

---
 docs/remote-cli-design.md | 179 ++++++++++++++++++++++++++++++++------
 1 file changed, 150 insertions(+), 29 deletions(-)

diff --git a/docs/remote-cli-design.md b/docs/remote-cli-design.md
index 6fd7b3a4..93f4b870 100644
--- a/docs/remote-cli-design.md
+++ b/docs/remote-cli-design.md
@@ -36,11 +36,14 @@ of slightly different flags for every service.
 
 ## Proposed vocabulary
 
-Use one command with two required concepts: a local remote name and a server
-endpoint (or a well-known endpoint alias).
+Use one command whose only required concept is a server endpoint (or a
+well-known endpoint alias). The local remote name should normally be derived
+from the alias or endpoint host; an explicit name is only needed to override
+that default or to configure the same service more than once.
 
 ```text
-git drs remote add <name> <endpoint-or-alias> [flags]
+git drs remote add <endpoint-or-alias> [flags]
+git drs remote add <name> <endpoint-or-alias> [flags]  # explicit-name form
 
 Flags:
   --scope <scope>             Optional provider-specific collection/project scope
@@ -54,27 +57,129 @@ Flags:
 For example:
 
 ```sh
-# Provider and capabilities discovered from service-info where possible.
-git drs remote add cgc https://cgc-ga4gh-api.sbgenomics.com \
-  --auth bearer --credential env:CGC_TOKEN
+# Presets supply the endpoint, provider, and authentication method.
+git drs remote add cgc --credential env:CGC_TOKEN
 
-git drs remote add synapse https://repo-prod.prod.sagebase.org \
-  --auth bearer --credential helper:synapse
+# A GA4GH Service Registry ID can select a service without spelling its URL.
+git drs remote add registry:com.sb.cgc.drs --credential env:CGC_TOKEN
+
+git drs remote add synapse --credential helper:synapse
 
 # A preset may supply a public endpoint and authentication default.
-git drs remote add anvil terra --scope my-billing-project/my-workspace
+git drs remote add terra --scope my-billing-project/my-workspace
 
-# Gen3 keeps its scope, but no longer needs a different grammar.
-git drs remote add production https://example-gen3.org \
+# A custom deployment needs its URL; its name defaults from the host.
+git drs remote add https://example-gen3.org \
   --provider gen3 --scope PROGRAM/PROJECT \
   --credential file:~/.gen3/credentials.json
 ```
 
 `<endpoint-or-alias>` should be an HTTPS URL by default. Aliases such as
 `terra`, `cgc`, and `synapse` are conveniences that expand to versioned,
-maintained presets; they are not separate protocols. `--provider` is an escape
-hatch when discovery is absent or ambiguous, and should normally remain
-`auto`.
+maintained presets, including the endpoint and usual authentication method;
+they are not separate protocols. Thus `cgc` is not repeated as both a name and
+a URL, and users do not have to restate `--auth bearer` when the preset already
+knows it. For a URL, derive a stable local name from its host and report it
+before saving. If that name already exists, ask for an explicit name rather
+than silently replacing it. `--provider` is an escape hatch when discovery is
+absent or ambiguous, and should normally remain `auto`.
+
+### Preset catalog and overrides
+
+**Implementation status:** this section is a proposal. There is currently no
+`internal/presets/presets.yaml`, preset-loading code, or `git drs preset`
+command. The implemented `remote add` commands remain the legacy `gen3`,
+`local`, and `terra` forms listed in the Problem section.
+
+When this proposal is implemented, the built-in preset list should be
+maintained in a reviewed, version-controlled catalog in this repository. The
+proposed location is `internal/presets/presets.yaml`; choosing that path in this
+design does not create the file or implementation. The catalog should be
+embedded in each `git-drs` release. Each entry should contain only non-secret
+defaults: alias, endpoint, provider, authentication method, and optional
+registry service ID. The catalog should not be downloaded at command runtime.
+The proposed `git drs preset list` and `git drs preset show <alias>` commands
+should display the shipped entries, their source (`built-in`, `system`, or
+`user`), and the release version that supplied them.
+
+Preset expansion should be a one-time operation during `remote add`. The
+implementation should persist its resolved endpoint, provider, authentication
+method, preset alias, and catalog version in the remote configuration, and
+print those values before saving. Existing remotes would therefore not change
+when a later `git-drs` release edits a preset. The proposed
+`git drs remote diagnose <name>` may report a newer preset and offer an explicit
+migration; it must not adopt one automatically.
+
+The proposed commands would allow users and administrators to add presets in
+user and system configuration:
+
+```sh
+git drs preset add lab https://drs.example.edu --provider gen3 --level user
+git drs preset add institute https://drs.example.org --level system
+```
+
+Custom names must not silently shadow built-in aliases. A collision should
+fail and direct the user to a qualified selector such as `user:lab` or
+`system:lab`; built-ins may be selected explicitly as `built-in:cgc`. This
+preserves a short, predictable `cgc` path while allowing local catalogs without
+creating a route for configuration to redirect credentials unexpectedly.
+
+Explicit command-line values take precedence over non-endpoint preset defaults,
+so `--auth`, `--provider`, and `--scope` can override the expanded values after
+the command prints the effective configuration. To use a different endpoint,
+the user should pass that HTTPS URL or a qualified custom preset instead of
+overriding the meaning of a built-in alias. Credential sources and secret
+values never belong in any preset catalog.
+
+### Registry discovery
+
+The [GA4GH Service Registry](https://registry.ga4gh.org/) can remove the need
+to type an endpoint for services it lists. Prefer its service `id` as the
+selector because that value is intended as an identifier:
+
+```sh
+git drs remote add registry:com.sb.cgc.drs
+git drs remote add registry:org.sagebase.prod.repo-prod
+```
+
+The `registry:` prefix makes network lookup explicit and avoids confusing a
+registry selector with a built-in alias, local remote name, or URL. On a
+successful lookup, persist the resolved URL and registry ID in the remote
+configuration and print the registry name and URL for confirmation. Normal
+operations, including `push`, use that persisted endpoint; they must not
+silently follow a later registry change on every invocation. An explicit
+`remote diagnose` or refresh operation may report a changed registry record
+and ask the user whether to adopt it.
+
+A registry display `name` may be accepted as a convenience only when it has a
+single exact match. It is not a reliable primary key: names are human-readable,
+can change, can contain spaces, and are not necessarily unique. For example,
+the registry currently contains two DRS records named `Canine Data Commons`.
+Do not use fuzzy or prefix matching to guess a credential destination. If a
+name matches zero or multiple records, list the candidate IDs and require the
+user to select an ID or URL. Short forms such as `cgc` remain maintained aliases
+rather than fuzzy registry-name searches.
+
+Consequently, an arbitrary local remote name in a fresh repository cannot by
+itself safely determine a server. It can do so only when it is an exact
+maintained alias or an explicit, uniquely resolved registry selector.
+
+Registry lookup discovers a candidate DRS resolver endpoint, not a publishing
+contract. Registry records can represent multiple logical datasets at one URL,
+and their URLs vary between service roots and paths ending in
+`/ga4gh/drs/v1/objects`. Normalize and validate the advertised endpoint through
+service-info and capability probing before saving it. In particular, a
+registry match must not make `push` assume that upload or registration is
+supported; the publisher capability checks described below still apply. If
+the registry is unavailable or the record is invalid, fail with an actionable
+request for an explicit URL rather than guessing.
+
+Neither a GA4GH Service Registry record nor the GA4GH service-info response
+declares which HTTP `Authorization` scheme or credential flow a DRS deployment
+requires. Registry discovery therefore supplies only service identity and a
+candidate URL; service-info can confirm service identity and implementation
+metadata, but it cannot select `bearer`, `basic`, `google-adc`, or a provider
+helper. Do not infer authentication from registry membership or a DRS version.
 
 ### Authentication methods
 
@@ -100,17 +205,25 @@ method (not a secret), and show the result to the user. The selection order is:
 1. an explicit `--credential` whose type implies a method, if unambiguous;
 2. the endpoint alias's maintained default (for example, a Terra alias may
    select `google-adc`);
-3. authentication metadata returned by trusted service discovery;
-4. a single installed provider helper registered for the detected provider;
-5. `none` only when an anonymous capability probe succeeds.
+3. a single installed provider helper registered for the detected provider;
+4. `none` only when an anonymous capability probe succeeds.
 
 If the evidence is absent, conflicting, or names multiple usable methods,
 `remote add` should stop and ask the user to choose `--auth`; it must not send
 available credentials to a server merely because they exist. A 401 challenge
-may refine discovery, but it must not trigger a loop that tries bearer, basic,
-and local credential stores in turn. Subsequent commands use the persisted
-method, so `auto` does not make network behavior vary from invocation to
-invocation. `git drs remote diagnose` may explicitly rerun discovery.
+with a standards-compliant `WWW-Authenticate` header may identify an HTTP
+scheme, but the registry and service-info cannot. A challenge must not trigger
+a loop that tries bearer, basic, and local credential stores in turn.
+Subsequent commands use the persisted method, so `auto` does not make network
+behavior vary from invocation to invocation. `git drs remote diagnose` may
+explicitly rerun discovery.
+
+The common preset path should require no explicit `--auth`. For example, the
+CGC and Synapse presets select bearer authentication, while a Terra preset may
+select `google-adc`. `--auth` remains available for custom deployments,
+overrides, and ambiguous discovery; it is not routine boilerplate. Supplying a
+credential source whose type unambiguously implies a method likewise makes an
+explicit `--auth` unnecessary.
 
 `provider-helper` is for authentication lifecycles that the generic methods
 cannot represent. Examples include a Gen3 profile helper that exchanges an API
@@ -140,9 +253,12 @@ git drs remote add production https://example-gen3.org \
 
 ### Defaults remove flags
 
-- Discover the provider and supported features using GA4GH service-info and a
-  small, maintained fingerprint table. Print the detected provider before
-  persisting configuration.
+- Identify the service and provider using GA4GH service-info and a small,
+  maintained fingerprint table after resolving any explicit registry selector.
+  Probe resolver and publisher capabilities separately; service-info does not
+  advertise authentication or upload/registration support. Print the registry
+  match, endpoint, detected provider, and probed capabilities before persisting
+  configuration.
 - Resolve `--auth auto` using the deterministic authentication selection above.
   Do not silently downgrade from authenticated to anonymous access.
 - Infer read-only versus writable from capability probing. Replace `--mode`
@@ -252,8 +368,9 @@ silently diverge.
 
 Introduce the unified form without immediately removing scripts:
 
-1. Add `remote add <name> <endpoint-or-alias>` and store the compositional
-   remote configuration.
+1. Add `remote add <endpoint-or-alias>` with a derived local name, support
+   explicit `registry:<service-id>` lookup, retain the explicit-name form for
+   overrides, and store the resolved compositional remote configuration.
 2. Keep `remote add gen3`, `local`, and `terra` as hidden or deprecated
    compatibility shims that translate their arguments to the new model.
 3. Add `git drs remote migrate` and make `remote list --verbose` display the
@@ -267,13 +384,17 @@ Introduce the unified form without immediately removing scripts:
 The minimal common case then becomes memorable:
 
 ```sh
-git drs remote add <name> <server>
+git drs remote add <server-or-alias>
 ```
 
-Scope, authentication, publishing storage, and checkout policy appear only
-when the server or workflow actually needs them.
+An explicit local name, scope, authentication override, publishing storage,
+and checkout policy appear only when the server or workflow actually needs
+them. A credential source may still be required, but a preset or unambiguous
+source prevents the user from also having to state the corresponding
+authentication method.
 
 ## References
 
 - [Cancer Genomics Cloud DRS API overview](https://docs.cancergenomicscloud.org/reference/drs-api-overview)
+- [GA4GH Service Registry](https://registry.ga4gh.org/)
 - [Synapse DRS controller REST documentation](https://rest-docs.synapse.org/rest/index.html#org.sagebionetworks.drs.controller.DrsController)

From 521d994b930d6c6bc0c542f5e26586f0c3c0faba Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 22 Jul 2026 16:07:35 -0700
Subject: [PATCH 40/66] Implement unified remote CLI and built-in DRS presets

---
 README.md                         |   7 +-
 cmd/preset/root.go                |  40 +++++++++
 cmd/remote/add/init.go            |  16 +++-
 cmd/remote/add/terra.go           |   5 +-
 cmd/remote/add/unified.go         | 141 ++++++++++++++++++++++++++++++
 cmd/remote/add/unified_test.go    |  57 ++++++++++++
 cmd/remote/list.go                |   6 ++
 cmd/root.go                       |   2 +
 docs/commands.md                  |  32 +++++++
 docs/remote-cli-design.md         |  12 +--
 internal/config/config.go         |  48 ++++++++++
 internal/config/remote.go         |  23 ++++-
 internal/presets/presets.go       |  54 ++++++++++++
 internal/presets/presets.yaml     |  20 +++++
 internal/presets/presets_test.go  |  19 ++++
 internal/remoteruntime/runtime.go |   6 ++
 16 files changed, 475 insertions(+), 13 deletions(-)
 create mode 100644 cmd/preset/root.go
 create mode 100644 cmd/remote/add/unified.go
 create mode 100644 cmd/remote/add/unified_test.go
 create mode 100644 internal/presets/presets.go
 create mode 100644 internal/presets/presets.yaml
 create mode 100644 internal/presets/presets_test.go

diff --git a/README.md b/README.md
index 65c2ec7b..16cf9056 100644
--- a/README.md
+++ b/README.md
@@ -42,7 +42,9 @@ At a high level:
 
 ```bash
 git drs install
-git drs remote add gen3 production HTAN_INT/BForePC --cred /path/to/credentials.json
+git drs remote add production https://example-gen3.org --provider gen3 \
+  --scope HTAN_INT/BForePC --auth provider-helper:gen3-profile \
+  --credential file:/path/to/credentials.json
 git drs track "*.bam"
 git add .gitattributes
 git add sample.bam
@@ -91,7 +93,8 @@ Push and pull depend on server-side bucket mapping for the requested scope. That
 | --- | --- |
 | `git drs install` | Install global `git-drs` filter config |
 | `git drs init` | Explicitly initialize or repair repository-local `git-drs` state |
-| `git drs remote add gen3 [remote] <org/project>` | Add or refresh a Gen3/Syfon remote |
+| `git drs remote add <endpoint-or-alias>` | Add a DRS remote (built-ins: calypr, terra, synapse, cgc) |
+| `git drs preset list` | List the non-secret presets embedded in this release |
 | `git drs remote list` | List configured remotes |
 | `git drs remote remove <name>` | Remove a configured DRS remote |
 | `git drs remote set <name>` | Set the default remote |
diff --git a/cmd/preset/root.go b/cmd/preset/root.go
new file mode 100644
index 00000000..9ae0d531
--- /dev/null
+++ b/cmd/preset/root.go
@@ -0,0 +1,40 @@
+package preset
+
+import (
+	"fmt"
+	"sort"
+
+	"github.com/calypr/git-drs/internal/presets"
+	"github.com/spf13/cobra"
+)
+
+var Cmd = &cobra.Command{Use: "preset", Short: "Inspect built-in DRS server presets"}
+
+var listCmd = &cobra.Command{Use: "list", Short: "List built-in presets", Args: cobra.NoArgs, RunE: func(cmd *cobra.Command, _ []string) error {
+	items, err := presets.List()
+	if err != nil {
+		return err
+	}
+	sort.Slice(items, func(i, j int) bool { return items[i].Alias < items[j].Alias })
+	for _, p := range items {
+		fmt.Fprintf(cmd.OutOrStdout(), "%-10s %-8s %s  built-in v%d\n", p.Alias, p.Provider, p.Endpoint, presets.CatalogVersion)
+	}
+	return nil
+}}
+
+var showCmd = &cobra.Command{Use: "show <alias>", Short: "Show a built-in preset", Args: cobra.ExactArgs(1), RunE: func(cmd *cobra.Command, args []string) error {
+	p, ok, err := presets.Lookup(args[0])
+	if err != nil {
+		return err
+	}
+	if !ok {
+		return fmt.Errorf("preset %q not found", args[0])
+	}
+	fmt.Fprintf(cmd.OutOrStdout(), "alias: %s\nendpoint: %s\nprovider: %s\nauth: %s\nsource: built-in\ncatalog-version: %d\n", p.Alias, p.Endpoint, p.Provider, p.Auth, presets.CatalogVersion)
+	if p.RegistryServiceID != "" {
+		fmt.Fprintf(cmd.OutOrStdout(), "registry-service-id: %s\n", p.RegistryServiceID)
+	}
+	return nil
+}}
+
+func init() { Cmd.AddCommand(listCmd, showCmd) }
diff --git a/cmd/remote/add/init.go b/cmd/remote/add/init.go
index 514a01e7..616a6328 100644
--- a/cmd/remote/add/init.go
+++ b/cmd/remote/add/init.go
@@ -17,24 +17,38 @@ var (
 // Cmd line declaration
 var Cmd = &cobra.Command{
 	Use:   "add",
-	Short: "add server access for git-drs",
+	Short: "Add a DRS server using an endpoint or built-in preset",
+	Args:  cobra.RangeArgs(1, 2),
+	RunE:  runUnified,
 }
 
 func init() {
+	Cmd.PersistentFlags().StringVar(&scopeFlag, "scope", "", "Provider-specific organization/project scope")
+	Cmd.PersistentFlags().StringVar(&authFlag, "auth", "auto", "Authentication method")
+	Cmd.PersistentFlags().StringVar(&credentialFlag, "credential", "", "Credential source (never an inline secret)")
+	Cmd.PersistentFlags().StringVar(&providerFlag, "provider", "auto", "DRS provider adapter")
+	Cmd.PersistentFlags().StringVar(&storageFlag, "storage", "", "Advanced publishing bucket/prefix")
+	Cmd.PersistentFlags().StringVar(&checkoutFlag, "checkout", "", "Checkout mode: pointers or hydrate")
 	Gen3Cmd.Flags().StringVar(&credFile, "cred", "", "[gen3] Import a Gen3 credential file into this profile")
 	Gen3Cmd.Flags().StringVar(&fenceToken, "token", "", "[gen3] Use a temporary bearer token issued from fence")
 	Gen3Cmd.Flags().StringVar(&selectedBucket, "bucket", "", "[gen3] Select a specific visible bucket when multiple buckets match the scope")
 	Gen3Cmd.Flags().BoolVar(&noSkipSmudge, "no-skip-smudge", false, "Disable skipping smudge filter (force downloading file contents during checkout)")
 
 	Cmd.AddCommand(Gen3Cmd)
+	Gen3Cmd.Deprecated = "use 'git drs remote add <endpoint> --provider gen3 --scope <organization/project> --credential <source>'"
+	Gen3Cmd.Hidden = true
 	LocalCmd.Flags().StringVar(&selectedBucket, "bucket", "", "Select a specific visible bucket when multiple buckets match the scope")
 	LocalCmd.Flags().StringVar(&localUsername, "username", "", "Username for local DRS HTTP basic auth")
 	LocalCmd.Flags().StringVar(&localPassword, "password", "", "Password for local DRS HTTP basic auth")
 	LocalCmd.Flags().BoolVar(&noSkipSmudge, "no-skip-smudge", false, "Disable skipping smudge filter (force downloading file contents during checkout)")
 	Cmd.AddCommand(LocalCmd)
+	LocalCmd.Deprecated = "use the unified endpoint form"
+	LocalCmd.Hidden = true
 
 	TerraCmd.Flags().StringVar(&terraEndpoint, "drs-endpoint", "", "Terra DRS service base URL")
 	TerraCmd.Flags().StringVar(&terraAuth, "auth", "", "Terra authentication method (google-adc)")
 	TerraCmd.Flags().StringVar(&terraMode, "mode", "", "Terra remote mode (read-only)")
 	Cmd.AddCommand(TerraCmd)
+	TerraCmd.Deprecated = "use 'git drs remote add terra'"
+	TerraCmd.Hidden = true
 }
diff --git a/cmd/remote/add/terra.go b/cmd/remote/add/terra.go
index c3da6892..07c53f4b 100644
--- a/cmd/remote/add/terra.go
+++ b/cmd/remote/add/terra.go
@@ -14,8 +14,11 @@ import (
 var TerraCmd = &cobra.Command{
 	Use:   "terra <remote-name>",
 	Short: "Add a read-only Terra DRS remote",
-	Args:  cobra.ExactArgs(1),
+	Args:  cobra.MaximumNArgs(1),
 	RunE: func(cmd *cobra.Command, args []string) error {
+		if len(args) == 0 {
+			return runUnified(cmd, []string{"terra"})
+		}
 		remoteName := strings.TrimSpace(args[0])
 		if remoteName == "" {
 			return fmt.Errorf("remote name is required")
diff --git a/cmd/remote/add/unified.go b/cmd/remote/add/unified.go
new file mode 100644
index 00000000..b887c24e
--- /dev/null
+++ b/cmd/remote/add/unified.go
@@ -0,0 +1,141 @@
+package add
+
+import (
+	"fmt"
+	"net/url"
+	"regexp"
+	"strings"
+
+	"github.com/calypr/git-drs/cmd/initialize"
+	"github.com/calypr/git-drs/internal/config"
+	"github.com/calypr/git-drs/internal/drslog"
+	"github.com/calypr/git-drs/internal/gitrepo"
+	"github.com/calypr/git-drs/internal/presets"
+	"github.com/spf13/cobra"
+)
+
+var (
+	scopeFlag, authFlag, credentialFlag, providerFlag string
+	storageFlag, checkoutFlag                         string
+)
+
+func runUnified(cmd *cobra.Command, args []string) error {
+	if len(args) < 1 || len(args) > 2 {
+		return fmt.Errorf("expected <endpoint-or-alias> or <name> <endpoint-or-alias>")
+	}
+	name, selector := "", args[0]
+	if len(args) == 2 {
+		name, selector = strings.TrimSpace(args[0]), args[1]
+	}
+	if strings.HasPrefix(selector, "registry:") {
+		return fmt.Errorf("registry selector %q requires registry discovery, which is unavailable; pass the service HTTPS URL explicitly", selector)
+	}
+
+	preset, isPreset, err := presets.Lookup(selector)
+	if err != nil {
+		return err
+	}
+	endpoint, provider, auth, presetName, registryID, version := selector, "auto", "auto", "", "", 0
+	if isPreset {
+		endpoint, provider, auth = preset.Endpoint, preset.Provider, preset.Auth
+		presetName, registryID, version = preset.Alias, preset.RegistryServiceID, presets.CatalogVersion
+	}
+	if providerFlag != "" && providerFlag != "auto" {
+		provider = providerFlag
+	}
+	if authFlag != "" && authFlag != "auto" {
+		auth = authFlag
+	}
+	if !validChoice(provider, "auto", "ga4gh", "gen3", "terra", "cgc", "synapse") {
+		return fmt.Errorf("unsupported provider %q", provider)
+	}
+	if !validAuth(auth) {
+		return fmt.Errorf("unsupported authentication method %q", auth)
+	}
+	u, err := url.ParseRequestURI(strings.TrimSpace(endpoint))
+	if err != nil || u.Scheme != "https" || u.Host == "" || u.User != nil {
+		return fmt.Errorf("endpoint must be an HTTPS URL without credentials, or a built-in alias")
+	}
+	if name == "" {
+		name = deriveRemoteName(presetName, u.Hostname())
+	}
+	if name == "" {
+		return fmt.Errorf("could not derive a remote name; use the explicit-name form")
+	}
+	if !regexp.MustCompile(`^[A-Za-z0-9][A-Za-z0-9._-]*$`).MatchString(name) {
+		return fmt.Errorf("invalid remote name %q", name)
+	}
+	if scopeFlag != "" {
+		if _, _, err := parseScopeArg(scopeFlag); err != nil {
+			return err
+		}
+	}
+	if credentialFlag != "" && !validCredentialSource(credentialFlag) {
+		return fmt.Errorf("invalid credential source %q; use env:, file:, helper:, profile:, or stdin", credentialFlag)
+	}
+	if checkoutFlag != "" && !validChoice(checkoutFlag, "pointers", "hydrate") {
+		return fmt.Errorf("--checkout must be pointers or hydrate")
+	}
+
+	if err := initialize.EnsureInitialized(drslog.GetLogger()); err != nil {
+		return fmt.Errorf("failed to initialize repository: %w", err)
+	}
+	if cfg, loadErr := config.LoadConfig(); loadErr == nil {
+		if _, exists := cfg.Remotes[config.Remote(name)]; exists {
+			return fmt.Errorf("remote %q already exists; choose an explicit name or remove it first", name)
+		}
+	}
+	r := &config.GenericRemote{Endpoint: u.String(), Provider: provider, Auth: auth, Credential: credentialFlag, Scope: scopeFlag, Storage: storageFlag, Checkout: checkoutFlag, Preset: presetName, PresetVersion: version, RegistryServiceID: registryID}
+	fmt.Fprintf(cmd.OutOrStdout(), "Remote: %s\nEndpoint: %s\nProvider: %s\nAuth: %s\n", name, r.Endpoint, r.Provider, r.Auth)
+	if r.Preset != "" {
+		fmt.Fprintf(cmd.OutOrStdout(), "Preset: %s (built-in catalog v%d)\n", r.Preset, r.PresetVersion)
+	}
+	if _, err := config.UpdateRemote(config.Remote(name), config.RemoteSelect{Generic: r}); err != nil {
+		return fmt.Errorf("save remote: %w", err)
+	}
+	if err := configureRepoRemote(name, r.Endpoint); err != nil {
+		return err
+	}
+	if checkoutFlag != "" {
+		skip := "true"
+		if checkoutFlag == "hydrate" {
+			skip = "false"
+		}
+		if err := gitrepo.SetGitConfigOptions(map[string]string{"drs.skipsmudge": skip}); err != nil {
+			return err
+		}
+	}
+	fmt.Fprintln(cmd.OutOrStdout(), "Remote saved.")
+	return nil
+}
+
+func deriveRemoteName(alias, host string) string {
+	if alias != "" {
+		return alias
+	}
+	host = strings.ToLower(strings.TrimSpace(host))
+	host = strings.TrimPrefix(host, "www.")
+	return regexp.MustCompile(`[^a-z0-9._-]+`).ReplaceAllString(host, "-")
+}
+func validChoice(v string, choices ...string) bool {
+	for _, c := range choices {
+		if v == c {
+			return true
+		}
+	}
+	return false
+}
+func validAuth(v string) bool {
+	return validChoice(v, "auto", "none", "bearer", "basic", "google-adc", "provider-helper") || strings.HasPrefix(v, "provider-helper:")
+}
+func validCredentialSource(v string) bool {
+	if v == "stdin" {
+		return true
+	}
+	for _, p := range []string{"env:", "file:", "helper:", "profile:"} {
+		if strings.HasPrefix(v, p) && len(v) > len(p) {
+			return true
+		}
+	}
+	return false
+}
diff --git a/cmd/remote/add/unified_test.go b/cmd/remote/add/unified_test.go
new file mode 100644
index 00000000..3710e0ce
--- /dev/null
+++ b/cmd/remote/add/unified_test.go
@@ -0,0 +1,57 @@
+package add
+
+import (
+	"bytes"
+	"testing"
+
+	"github.com/calypr/git-drs/internal/config"
+	"github.com/calypr/git-drs/internal/testutils"
+)
+
+func TestUnifiedAddExpandsPreset(t *testing.T) {
+	testutils.SetupTestGitRepo(t)
+	resetUnifiedFlags(t)
+	credentialFlag = "env:CGC_TOKEN"
+	var out bytes.Buffer
+	Cmd.SetOut(&out)
+	if err := runUnified(Cmd, []string{"cgc"}); err != nil {
+		t.Fatal(err)
+	}
+	cfg, err := config.LoadConfig()
+	if err != nil {
+		t.Fatal(err)
+	}
+	r := cfg.Remotes["cgc"].Generic
+	if r == nil || r.Provider != "cgc" || r.Auth != "bearer" || r.PresetVersion != 1 || r.Credential != "env:CGC_TOKEN" {
+		t.Fatalf("unexpected remote: %+v", r)
+	}
+	if out.String() == "" {
+		t.Fatal("expected effective configuration output")
+	}
+}
+
+func TestUnifiedAddDerivesURLNameAndRejectsHTTP(t *testing.T) {
+	testutils.SetupTestGitRepo(t)
+	resetUnifiedFlags(t)
+	if err := runUnified(Cmd, []string{"http://drs.example.org"}); err == nil {
+		t.Fatal("expected HTTP rejection")
+	}
+	if err := runUnified(Cmd, []string{"https://drs.example.org"}); err != nil {
+		t.Fatal(err)
+	}
+	cfg, err := config.LoadConfig()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if cfg.Remotes["drs.example.org"].Generic == nil {
+		t.Fatal("derived remote not persisted")
+	}
+}
+
+func resetUnifiedFlags(t *testing.T) {
+	old := []string{scopeFlag, authFlag, credentialFlag, providerFlag, storageFlag, checkoutFlag}
+	scopeFlag, authFlag, credentialFlag, providerFlag, storageFlag, checkoutFlag = "", "auto", "", "auto", "", ""
+	t.Cleanup(func() {
+		scopeFlag, authFlag, credentialFlag, providerFlag, storageFlag, checkoutFlag = old[0], old[1], old[2], old[3], old[4], old[5]
+	})
+}
diff --git a/cmd/remote/list.go b/cmd/remote/list.go
index a7a3035d..b7e2911e 100644
--- a/cmd/remote/list.go
+++ b/cmd/remote/list.go
@@ -54,6 +54,12 @@ var ListCmd = &cobra.Command{
 			} else if remoteSelect.Local != nil {
 				remoteType = string(config.LocalServerType)
 				remote = remoteSelect.Local
+			} else if remoteSelect.Terra != nil {
+				remoteType = string(config.TerraServerType)
+				remote = remoteSelect.Terra
+			} else if remoteSelect.Generic != nil {
+				remoteType = remoteSelect.Generic.Provider
+				remote = remoteSelect.Generic
 			} else {
 				remoteType = "unknown"
 			}
diff --git a/cmd/root.go b/cmd/root.go
index 320592f8..bd78ef18 100644
--- a/cmd/root.go
+++ b/cmd/root.go
@@ -14,6 +14,7 @@ import (
 	"github.com/calypr/git-drs/cmd/lsfiles"
 	"github.com/calypr/git-drs/cmd/ping"
 	"github.com/calypr/git-drs/cmd/precommit"
+	"github.com/calypr/git-drs/cmd/preset"
 	"github.com/calypr/git-drs/cmd/pull"
 	"github.com/calypr/git-drs/cmd/push"
 	"github.com/calypr/git-drs/cmd/query"
@@ -50,6 +51,7 @@ func init() {
 	RootCmd.AddCommand(pull.Cmd)
 	RootCmd.AddCommand(push.Cmd)
 	RootCmd.AddCommand(precommit.Cmd)
+	RootCmd.AddCommand(preset.Cmd)
 	RootCmd.AddCommand(addref.Cmd)
 	RootCmd.AddCommand(addurl.Cmd)
 	RootCmd.AddCommand(deleteCmd.Cmd)
diff --git a/docs/commands.md b/docs/commands.md
index fe371139..a8b52276 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -35,6 +35,38 @@ Use this when you want explicit initialization or to repair repo-local hooks/con
 
 ## Remote Configuration
 
+### `git drs remote add <endpoint-or-alias> [flags]`
+
+Add a DRS server with the unified remote command. The built-in aliases are
+`calypr`, `terra`, `synapse`, and `cgc`; inspect their non-secret defaults with
+`git drs preset list` or `git drs preset show <alias>`.
+
+```bash
+git drs remote add cgc --credential env:CGC_TOKEN
+git drs remote add synapse --credential helper:synapse
+git drs remote add https://drs.example.org --provider ga4gh --auth none
+git drs remote add research https://gen3.example.org \
+  --provider gen3 --scope PROGRAM/PROJECT \
+  --auth provider-helper:gen3-profile --credential profile:research
+```
+
+For a URL, the local name is derived from the host. Use the two-argument form
+to choose a name explicitly. `--credential` accepts `env:`, `file:`, `helper:`,
+`profile:`, or `stdin`; it never accepts an inline secret. Other options are
+`--scope`, `--auth`, `--provider`, `--storage`, and `--checkout`. Presets are
+expanded once and the resolved endpoint, provider, authentication method, and
+catalog version are saved, so a later release cannot silently redirect an
+existing remote. Only HTTPS endpoints without embedded credentials are
+accepted.
+
+The older `gen3`, `local`, and `terra` command shapes are deprecated, hidden
+compatibility forms. New scripts should use the unified command.
+
+### `git drs preset list` / `git drs preset show <alias>`
+
+Display the presets embedded in this release. Presets contain endpoints and
+authentication methods but never credentials or secret values.
+
 ### `git drs remote add gen3 [remote-name] <organization/project>`
 
 Add or refresh a Gen3-backed Syfon remote.
diff --git a/docs/remote-cli-design.md b/docs/remote-cli-design.md
index 93f4b870..1175fca6 100644
--- a/docs/remote-cli-design.md
+++ b/docs/remote-cli-design.md
@@ -2,8 +2,9 @@
 
 ## Status
 
-Proposed. This document describes a migration target rather than the current
-command-line contract.
+Implemented for built-in presets and unified endpoint configuration. Registry
+discovery, custom user/system preset catalogs, capability probing, and remote
+migration remain future work.
 
 ## Problem
 
@@ -86,10 +87,9 @@ absent or ambiguous, and should normally remain `auto`.
 
 ### Preset catalog and overrides
 
-**Implementation status:** this section is a proposal. There is currently no
-`internal/presets/presets.yaml`, preset-loading code, or `git drs preset`
-command. The implemented `remote add` commands remain the legacy `gen3`,
-`local`, and `terra` forms listed in the Problem section.
+The built-in catalog is embedded from `internal/presets/presets.yaml` and can
+be inspected with `git drs preset list` and `git drs preset show <alias>`.
+Legacy provider-specific add commands remain hidden compatibility shims.
 
 When this proposal is implemented, the built-in preset list should be
 maintained in a reviewed, version-controlled catalog in this repository. The
diff --git a/internal/config/config.go b/internal/config/config.go
index 52922e22..9acaf783 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -9,6 +9,7 @@ import (
 	"os/exec"
 	"path/filepath"
 	"sort"
+	"strconv"
 	"strings"
 
 	"github.com/calypr/git-drs/internal/gitrepo"
@@ -26,6 +27,7 @@ const (
 	Gen3ServerType  RemoteType = "gen3"
 	LocalServerType RemoteType = "local"
 	TerraServerType RemoteType = "terra"
+	GA4GHServerType RemoteType = "ga4gh"
 
 	configSection          = "drs"
 	remoteSubsectionPrefix = "remote."
@@ -50,6 +52,8 @@ func (c Config) GetRemote(remote Remote) DRSRemote {
 		return x.Local
 	} else if x.Terra != nil {
 		return x.Terra
+	} else if x.Generic != nil {
+		return x.Generic
 	}
 	return nil
 }
@@ -162,6 +166,20 @@ func UpdateRemote(name Remote, remote RemoteSelect) (*Config, error) {
 		if remote.Local.StoragePrefix != "" {
 			remoteSubsection.SetOption("storage_prefix", remote.Local.StoragePrefix)
 		}
+	} else if remote.Generic != nil {
+		r := remote.Generic
+		remoteSubsection.SetOption("type", "ga4gh")
+		remoteSubsection.SetOption("endpoint", r.Endpoint)
+		remoteSubsection.SetOption("provider", r.Provider)
+		remoteSubsection.SetOption("auth", r.Auth)
+		for key, value := range map[string]string{"credential": r.Credential, "scope": r.Scope, "storage": r.Storage, "checkout": r.Checkout, "preset": r.Preset, "registry-service-id": r.RegistryServiceID} {
+			if value != "" {
+				remoteSubsection.SetOption(key, value)
+			}
+		}
+		if r.PresetVersion > 0 {
+			remoteSubsection.SetOption("preset-version", fmt.Sprint(r.PresetVersion))
+		}
 	}
 
 	// Set default remote if not set
@@ -214,6 +232,16 @@ func parseAndAddRemote(cfg *Config, subsectionName string, remoteType string, en
 	cfg.Remotes[remoteName] = rs
 }
 
+func addGenericRemote(cfg *Config, name Remote, opts map[string]string) {
+	version, _ := strconv.Atoi(opts["preset-version"])
+	cfg.Remotes[name] = RemoteSelect{Generic: &GenericRemote{
+		Endpoint: opts["endpoint"], Provider: opts["provider"], Auth: opts["auth"],
+		Credential: opts["credential"], Scope: opts["scope"], Storage: opts["storage"],
+		Checkout: opts["checkout"], Preset: opts["preset"], PresetVersion: version,
+		RegistryServiceID: opts["registry-service-id"],
+	}}
+}
+
 func loadGitConfigOverrides(cfg *Config) error {
 	cmd := exec.Command("git", "config", "--local", "--get-regexp", `^drs\.`)
 	out, err := cmd.Output()
@@ -256,6 +284,10 @@ func loadGitConfigOverrides(cfg *Config) error {
 	}
 
 	for name, opts := range remoteOptions {
+		if opts["type"] == "ga4gh" {
+			addGenericRemote(cfg, name, opts)
+			continue
+		}
 		parseAndAddRemote(
 			cfg,
 			remoteSubsectionPrefix+string(name),
@@ -307,6 +339,14 @@ func LoadConfig() (*Config, error) {
 			if !strings.HasPrefix(subsection.Name, remoteSubsectionPrefix) {
 				continue
 			}
+			if subsection.Option("type") == "ga4gh" {
+				opts := make(map[string]string)
+				for _, key := range []string{"endpoint", "provider", "auth", "credential", "scope", "storage", "checkout", "preset", "preset-version", "registry-service-id"} {
+					opts[key] = subsection.Option(key)
+				}
+				addGenericRemote(cfg, Remote(strings.TrimPrefix(subsection.Name, remoteSubsectionPrefix)), opts)
+				continue
+			}
 			parseAndAddRemote(
 				cfg,
 				subsection.Name,
@@ -377,6 +417,14 @@ func RemoveRemote(name Remote) (*Config, error) {
 		fmt.Sprintf("drs.remote.%s.storage_prefix", name),
 		fmt.Sprintf("drs.remote.%s.auth", name),
 		fmt.Sprintf("drs.remote.%s.mode", name),
+		fmt.Sprintf("drs.remote.%s.provider", name),
+		fmt.Sprintf("drs.remote.%s.credential", name),
+		fmt.Sprintf("drs.remote.%s.scope", name),
+		fmt.Sprintf("drs.remote.%s.storage", name),
+		fmt.Sprintf("drs.remote.%s.checkout", name),
+		fmt.Sprintf("drs.remote.%s.preset", name),
+		fmt.Sprintf("drs.remote.%s.preset-version", name),
+		fmt.Sprintf("drs.remote.%s.registry-service-id", name),
 		fmt.Sprintf("drs.remote.%s.token", name),
 		fmt.Sprintf("drs.remote.%s.username", name),
 		fmt.Sprintf("drs.remote.%s.password", name),
diff --git a/internal/config/remote.go b/internal/config/remote.go
index 000e8bf9..a7b5fd40 100644
--- a/internal/config/remote.go
+++ b/internal/config/remote.go
@@ -1,5 +1,7 @@
 package config
 
+import "strings"
+
 type DRSRemote interface {
 	GetProjectId() string
 	GetOrganization() string
@@ -9,11 +11,26 @@ type DRSRemote interface {
 }
 
 type RemoteSelect struct {
-	Gen3  *Gen3Remote
-	Local *LocalRemote
-	Terra *TerraRemote
+	Gen3    *Gen3Remote
+	Local   *LocalRemote
+	Terra   *TerraRemote
+	Generic *GenericRemote
+}
+
+// GenericRemote is the compositional configuration produced by the unified
+// remote-add command. Credential contains a source identifier, never a secret.
+type GenericRemote struct {
+	Endpoint, Provider, Auth, Credential, Scope, Storage, Checkout string
+	Preset, RegistryServiceID                                      string
+	PresetVersion                                                  int
 }
 
+func (r GenericRemote) GetProjectId() string     { _, p, _ := strings.Cut(r.Scope, "/"); return p }
+func (r GenericRemote) GetOrganization() string  { o, _, _ := strings.Cut(r.Scope, "/"); return o }
+func (r GenericRemote) GetEndpoint() string      { return r.Endpoint }
+func (r GenericRemote) GetBucketName() string    { b, _, _ := strings.Cut(r.Storage, "/"); return b }
+func (r GenericRemote) GetStoragePrefix() string { _, p, _ := strings.Cut(r.Storage, "/"); return p }
+
 type Gen3Remote struct {
 	Endpoint      string `yaml:"endpoint"`
 	ProjectID     string `yaml:"project_id"`
diff --git a/internal/presets/presets.go b/internal/presets/presets.go
new file mode 100644
index 00000000..fcc0b9db
--- /dev/null
+++ b/internal/presets/presets.go
@@ -0,0 +1,54 @@
+// Package presets exposes the non-secret remote defaults shipped with git-drs.
+package presets
+
+import (
+	_ "embed"
+	"fmt"
+	"strings"
+
+	"gopkg.in/yaml.v3"
+)
+
+// CatalogVersion is persisted when a preset is expanded.
+const CatalogVersion = 1
+
+type Preset struct {
+	Alias             string `yaml:"alias"`
+	Endpoint          string `yaml:"endpoint"`
+	Provider          string `yaml:"provider"`
+	Auth              string `yaml:"auth"`
+	RegistryServiceID string `yaml:"registry_service_id,omitempty"`
+}
+
+type catalog struct {
+	Version int      `yaml:"version"`
+	Presets []Preset `yaml:"presets"`
+}
+
+//go:embed presets.yaml
+var builtIn []byte
+
+func List() ([]Preset, error) {
+	var c catalog
+	if err := yaml.Unmarshal(builtIn, &c); err != nil {
+		return nil, fmt.Errorf("decode built-in preset catalog: %w", err)
+	}
+	if c.Version != CatalogVersion {
+		return nil, fmt.Errorf("unsupported built-in preset catalog version %d", c.Version)
+	}
+	return append([]Preset(nil), c.Presets...), nil
+}
+
+func Lookup(alias string) (Preset, bool, error) {
+	alias = strings.TrimPrefix(strings.ToLower(strings.TrimSpace(alias)), "built-in:")
+	items, err := List()
+	if err != nil {
+		return Preset{}, false, err
+	}
+	for _, item := range items {
+		if item.Alias == alias {
+			return item, true, nil
+		}
+	}
+	return Preset{}, false, nil
+}
diff --git a/internal/presets/presets.yaml b/internal/presets/presets.yaml
new file mode 100644
index 00000000..4d3a6bfe
--- /dev/null
+++ b/internal/presets/presets.yaml
@@ -0,0 +1,20 @@
+version: 1
+presets:
+  - alias: calypr
+    endpoint: https://calypr.org
+    provider: gen3
+    auth: provider-helper:gen3-profile
+  - alias: terra
+    endpoint: https://data.terra.bio
+    provider: terra
+    auth: google-adc
+  - alias: synapse
+    endpoint: https://repo-prod.prod.sagebase.org/ga4gh/drs/v1
+    provider: synapse
+    auth: bearer
+    registry_service_id: org.sagebase.prod.repo-prod
+  - alias: cgc
+    endpoint: https://cgc-ga4gh-api.sbgenomics.com/ga4gh/drs/v1
+    provider: cgc
+    auth: bearer
+    registry_service_id: com.sb.cgc.drs
diff --git a/internal/presets/presets_test.go b/internal/presets/presets_test.go
new file mode 100644
index 00000000..af58f419
--- /dev/null
+++ b/internal/presets/presets_test.go
@@ -0,0 +1,19 @@
+package presets
+
+import "testing"
+
+func TestBuiltInCatalog(t *testing.T) {
+	items, err := List()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(items) != 4 {
+		t.Fatalf("got %d presets, want 4", len(items))
+	}
+	for _, alias := range []string{"calypr", "terra", "synapse", "cgc"} {
+		p, ok, err := Lookup(alias)
+		if err != nil || !ok || p.Endpoint == "" || p.Provider == "" || p.Auth == "" {
+			t.Fatalf("invalid %s preset: %+v, %v", alias, p, err)
+		}
+	}
+}
diff --git a/internal/remoteruntime/runtime.go b/internal/remoteruntime/runtime.go
index 009fbda2..baf8b298 100644
--- a/internal/remoteruntime/runtime.go
+++ b/internal/remoteruntime/runtime.go
@@ -52,6 +52,12 @@ func New(cfg *config.Config, remote config.Remote, logger *slog.Logger) (*GitCon
 	if x.Terra != nil {
 		return terraClient(*x.Terra, logger)
 	}
+	if x.Generic != nil {
+		if x.Generic.Provider == "terra" {
+			return terraClient(config.TerraRemote{Endpoint: x.Generic.Endpoint, Auth: x.Generic.Auth, Mode: "read-only"}, logger)
+		}
+		return &GitContext{RemoteType: config.GA4GHServerType, Endpoint: x.Generic.Endpoint, Organization: x.Generic.GetOrganization(), ProjectId: x.Generic.GetProjectId(), Logger: logger, Credential: &syconf.Credential{APIEndpoint: x.Generic.Endpoint}}, nil
+	}
 	return nil, fmt.Errorf("no valid remote configuration found for current remote: %s", remote)
 }
 

From d598b8d2b7108027f6c675f4f18748a9137c7021 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 22 Jul 2026 16:29:08 -0700
Subject: [PATCH 41/66] Update user docs for unified remote presets

---
 docs/commands.md        | 83 ++++++++++++++++-------------------------
 docs/getting-started.md | 47 ++++++++++++++++++-----
 docs/quickstart.md      | 31 +++++++++++++--
 3 files changed, 97 insertions(+), 64 deletions(-)

diff --git a/docs/commands.md b/docs/commands.md
index a8b52276..369ac9eb 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -35,7 +35,7 @@ Use this when you want explicit initialization or to repair repo-local hooks/con
 
 ## Remote Configuration
 
-### `git drs remote add <endpoint-or-alias> [flags]`
+### `git drs remote add [name] <endpoint-or-alias> [flags]`
 
 Add a DRS server with the unified remote command. The built-in aliases are
 `calypr`, `terra`, `synapse`, and `cgc`; inspect their non-secret defaults with
@@ -44,16 +44,23 @@ Add a DRS server with the unified remote command. The built-in aliases are
 ```bash
 git drs remote add cgc --credential env:CGC_TOKEN
 git drs remote add synapse --credential helper:synapse
+git drs remote add terra --scope my-billing-project/my-workspace
 git drs remote add https://drs.example.org --provider ga4gh --auth none
 git drs remote add research https://gen3.example.org \
   --provider gen3 --scope PROGRAM/PROJECT \
   --auth provider-helper:gen3-profile --credential profile:research
 ```
 
-For a URL, the local name is derived from the host. Use the two-argument form
-to choose a name explicitly. `--credential` accepts `env:`, `file:`, `helper:`,
-`profile:`, or `stdin`; it never accepts an inline secret. Other options are
-`--scope`, `--auth`, `--provider`, `--storage`, and `--checkout`. Presets are
+For a preset, its alias becomes the default local name; for a URL, the name is
+derived from the host. Use the two-argument form to choose a name explicitly.
+`--credential` accepts `env:VARIABLE`, `file:PATH`, `helper:NAME`,
+`profile:NAME`, or `stdin`; it never accepts an inline secret. Other options
+are `--scope`, `--auth`, `--provider`, `--storage`, and `--checkout`. Checkout
+mode is `pointers` or `hydrate`.
+
+Provider values are `auto`, `ga4gh`, `gen3`, `terra`, `cgc`, and `synapse`.
+Authentication values are `auto`, `none`, `bearer`, `basic`, `google-adc`,
+`provider-helper`, or `provider-helper:<name>`. Presets are
 expanded once and the resolved endpoint, provider, authentication method, and
 catalog version are saved, so a later release cannot silently redirect an
 existing remote. Only HTTPS endpoints without embedded credentials are
@@ -64,40 +71,21 @@ compatibility forms. New scripts should use the unified command.
 
 ### `git drs preset list` / `git drs preset show <alias>`
 
-Display the presets embedded in this release. Presets contain endpoints and
-authentication methods but never credentials or secret values.
-
-### `git drs remote add gen3 [remote-name] <organization/project>`
-
-Add or refresh a Gen3-backed Syfon remote.
-
-```bash
-git drs remote add gen3 [remote-name] <organization/project> --cred <credentials-file>
-git drs remote add gen3 [remote-name] <organization/project> --token <bearer-token>
-```
-
-Notes:
+Display the presets embedded in this release. `list` shows each alias,
+provider, endpoint, and catalog version. `show` also displays its authentication
+default and, when present, registry service ID. Presets contain no credential
+or secret values.
 
-- `remote-name` is optional; if omitted, the default remote name is used
-- scope is always one positional argument: `organization/project`
-- `--cred` imports a Gen3 credential file
-- `--token` uses a temporary bearer token
-- if repo-local `git-drs` setup is missing, this command bootstraps it
-- bucket resolution is scope-driven; users normally do not provide `--bucket`
-
-### `git drs remote add local <remote-name> <url> <organization/project>`
-
-Add or refresh a local Syfon/DRS remote.
-
-```bash
-git drs remote add local local-dev http://localhost:8080 HTAN_INT/BForePC
-git drs remote add local local-dev http://localhost:8080 HTAN_INT/BForePC --username drs-user --password drs-pass
-```
-
-Notes:
+| Alias | Provider | Authentication default |
+| --- | --- | --- |
+| `calypr` | Gen3 | Gen3 profile provider helper |
+| `terra` | Terra | Google Application Default Credentials |
+| `synapse` | Synapse | bearer token |
+| `cgc` | Cancer Genomics Cloud | bearer token |
 
-- local mode can store HTTP basic auth for helper flows
-- repo-local `git-drs` setup is also bootstrapped here when missing
+The legacy provider-specific `remote add gen3`, `remote add local`, and
+`remote add terra` forms remain only as hidden, deprecated compatibility
+commands. Do not use them in new instructions or scripts.
 
 ### `git drs remote list`
 
@@ -124,24 +112,20 @@ What it checks:
 - for Terra/AnVIL TDR-hosted data in production, use `https://data.terra.bio` as the endpoint; Terra also uses DRSHub for DRS URI resolution, but DRSHub is a resolver service rather than the GA4GH DRS service-info host
 - for scoped Syfon-style remotes, verifies that the configured organization/project and bucket are visible and readable
 
-Example Terra configuration and ping:
+Example Terra preset configuration and ping:
 
 ```bash
-git config drs.default-remote anvil
-git config drs.remote.anvil.type terra
-git config drs.remote.anvil.endpoint https://data.terra.bio
-git config drs.remote.anvil.auth google-adc
-git config drs.remote.anvil.mode read-only
+git drs remote add anvil terra --scope my-billing-project/my-workspace
 git drs ping anvil
 ```
 
 Terra credential configuration:
 
-- `drs.remote.<name>.auth` records the credential source that the Terra resolver should use. The currently documented mode is `google-adc`, which means Application Default Credentials from the local Google Cloud environment.
-- Do not store Google access tokens, refresh tokens, service-account JSON, or other secrets in repo-local `git config`. The Terra remote stores only the endpoint, credential-source name, and mode.
+- The `terra` preset selects `google-adc`, which means Application Default Credentials from the local Google Cloud environment.
+- Do not put Google access tokens, refresh tokens, service-account JSON, or other secrets in repo-local Git configuration or in `--credential`.
 - Configure ADC outside `git-drs`, for example with `gcloud auth application-default login` for an interactive user credential or by setting `GOOGLE_APPLICATION_CREDENTIALS` to a service-account key path in automation.
-- At runtime, `git-drs` loads the Terra remote from `drs.remote.<name>.*`, records the Terra endpoint in the remote context, and Terra-aware resolution/download code should obtain Google credentials from the configured source and attach them to outbound Terra/DRSHub/DRS requests as bearer tokens. The credential material is therefore passed through the process environment or ADC provider chain, not through committed repository files.
-- `git drs ping` validates the Terra DRS service-info endpoint and prints `auth: none` today because service-info is checked without creating a Syfon bearer/basic credential. Future Terra resolver operations should still honor `drs.remote.<name>.auth` when making authenticated object-resolution or access-url requests.
+- At runtime, Terra-aware resolution obtains Google credentials from the ADC provider chain; credential material is not written to committed repository files.
+- `git drs ping` checks the public DRS service-info endpoint without sending the ADC credential. Authenticated object resolution and access requests still use ADC.
 
 A successful Terra ping includes:
 
@@ -154,9 +138,8 @@ health: ok
 
 Troubleshooting:
 
-- `no remote configuration found`: run `git drs remote list` and pass an existing remote name, or configure the Terra remote with the `git config` commands above.
-- `terra endpoint is empty`: set `drs.remote.<name>.endpoint` to the Terra DRS base URL, for example `https://data.terra.bio` for the production Terra Data Repository DRS service.
-- `terra endpoint must be an absolute URL`: include the URL scheme, for example `https://data.terra.bio` instead of `data.terra.bio`.
+- `no remote configuration found`: run `git drs remote list` and pass an existing remote name, or add one with `git drs remote add anvil terra`.
+- endpoint errors: remove the remote and add it again with the `terra` preset or a complete HTTPS URL.
 - `terra DRS service-info returned ...`: verify the server is up and that the base endpoint is correct. You can test the exact URL with `curl -i https://data.terra.bio/ga4gh/drs/v1/service-info`.
 - network, DNS, or TLS errors: check VPN/proxy/firewall settings and retry with `GIT_CURL_VERBOSE=1 git drs ping <remote-name>` for additional HTTP diagnostics from Git-adjacent workflows.
 
diff --git a/docs/getting-started.md b/docs/getting-started.md
index da9d724e..dcf0a698 100644
--- a/docs/getting-started.md
+++ b/docs/getting-started.md
@@ -16,20 +16,39 @@ The most important distinction is:
 - `git pull` updates commits and checkout state
 - `git drs pull` hydrates tracked pointer files already present in the checkout
 
-## The Setup Command
+## Connect A Remote
 
-The standard setup command is:
+List and inspect the presets shipped with the current release:
 
 ```bash
-git drs remote add gen3 production <organization/project> --cred ~/.gen3/credentials.json
+git drs preset list
+git drs preset show calypr
 ```
 
-That command:
+Then add a named remote from a preset. For example, a scoped Calypr/Gen3
+remote using a credential file is:
 
-- stores the remote configuration
-- imports or refreshes credentials
+```bash
+git drs remote add production calypr --scope <organization/project> \
+  --credential file:~/.gen3/credentials.json
+```
+
+This command:
+
+- expands the preset into a pinned endpoint, provider, authentication method,
+  and preset catalog version
+- stores only the credential source, not an inline secret
 - bootstraps repo-local `git-drs` wiring when it is missing
 
+The built-in presets are `calypr`, `terra`, `synapse`, and `cgc`. The local
+remote name is optional: `git drs remote add calypr ...` derives the name
+`calypr`. You can also connect an unlisted HTTPS endpoint directly:
+
+```bash
+git drs remote add research https://drs.example.org \
+  --provider ga4gh --auth none
+```
+
 ## The Two Common Workflows
 
 ### Existing Repository
@@ -37,7 +56,8 @@ That command:
 ```bash
 git clone <repo-url>
 cd <repo-name>
-git drs remote add gen3 production <organization/project> --cred ~/.gen3/credentials.json
+git drs remote add production calypr --scope <organization/project> \
+  --credential file:~/.gen3/credentials.json
 git drs pull
 ```
 
@@ -47,7 +67,8 @@ git drs pull
 mkdir my-data-repo
 cd my-data-repo
 git init
-git drs remote add gen3 production <organization/project> --cred ~/.gen3/credentials.json
+git drs remote add production calypr --scope <organization/project> \
+  --credential file:~/.gen3/credentials.json
 git drs track "*.bam"
 git add .gitattributes
 git commit -m "Configure tracked files"
@@ -127,12 +148,18 @@ git drs push
 
 That is the supported delete flow for tracked `git-drs` objects. For the fuller decision tree, see [Removing Files](remove-files.md).
 
-### Refresh credentials
+### Change a credential source
 
 ```bash
-git drs remote add gen3 production <organization/project> --cred /path/to/new-credentials.json
+git drs remote remove production
+git drs remote add production calypr --scope <organization/project> \
+  --credential file:/path/to/new-credentials.json
 ```
 
+The unified command refuses to overwrite an existing remote. Remove and add it
+again when its endpoint, preset, or credential source must change. Prefer a
+refreshing helper or profile source when the provider supports one.
+
 ## Read Next
 
 - [Commands Reference](commands.md) for exact command syntax
diff --git a/docs/quickstart.md b/docs/quickstart.md
index f8411aed..ce40be96 100644
--- a/docs/quickstart.md
+++ b/docs/quickstart.md
@@ -56,9 +56,21 @@ Verify:
 git-drs version
 ```
 
-## 2. Get Credentials
+## 2. Choose A Preset And Credential Source
 
-Download your Gen3 API credentials JSON from your commons profile page and save it somewhere stable, for example:
+See the non-secret server defaults included with your installed release:
+
+```bash
+git drs preset list
+git drs preset show calypr
+```
+
+The built-in aliases are `calypr`, `terra`, `synapse`, and `cgc`. Presets supply
+the endpoint, provider adapter, and usual authentication method; they never
+contain credentials.
+
+For the Calypr/Gen3 workflow below, download your Gen3 API credentials JSON
+from your commons profile page and save it somewhere stable, for example:
 
 ```bash
 ~/.gen3/credentials.json
@@ -72,12 +84,18 @@ Typical flow:
 4. Download the JSON file.
 5. Save it somewhere stable.
 
+On the command line, refer to the file as `file:~/.gen3/credentials.json`.
+Other supported credential sources are `env:VARIABLE`, `helper:NAME`,
+`profile:NAME`, and `stdin`. Do not put a token or password directly in
+`--credential`.
+
 ## 3. Connect An Existing Repository
 
 ```bash
 git clone <repo-url>
 cd <repo-name>
-git drs remote add gen3 production <organization/project> --cred ~/.gen3/credentials.json
+git drs remote add production calypr --scope <organization/project> \
+  --credential file:~/.gen3/credentials.json
 git drs pull
 ```
 
@@ -89,12 +107,17 @@ Use this path when the repository already contains tracked pointers and you want
 mkdir my-data-repo
 cd my-data-repo
 git init
-git drs remote add gen3 production <organization/project> --cred ~/.gen3/credentials.json
+git drs remote add production calypr --scope <organization/project> \
+  --credential file:~/.gen3/credentials.json
 git drs track "*.bam"
 git add .gitattributes
 git commit -m "Configure tracked files"
 ```
 
+`production` is the local remote name and `calypr` is the preset. If the preset
+name is also a suitable local name, the shorter form is
+`git drs remote add calypr ...`.
+
 ## 5. Day-One Commands
 
 Update Git history:

From 16d5e9102b8d6c1bca425264cbc1a2af35c887f4 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 27 Jul 2026 10:15:57 -0700
Subject: [PATCH 42/66] listed preset includes auth type

---
 cmd/preset/root.go               |  2 +-
 cmd/preset/root_test.go          | 37 ++++++++++++++++++++++++++++++++
 docs/commands.md                 |  6 +++---
 internal/presets/presets.go      | 15 ++++++++++++-
 internal/presets/presets_test.go | 21 +++++++++++++++++-
 5 files changed, 75 insertions(+), 6 deletions(-)
 create mode 100644 cmd/preset/root_test.go

diff --git a/cmd/preset/root.go b/cmd/preset/root.go
index 9ae0d531..47cca59c 100644
--- a/cmd/preset/root.go
+++ b/cmd/preset/root.go
@@ -17,7 +17,7 @@ var listCmd = &cobra.Command{Use: "list", Short: "List built-in presets", Args:
 	}
 	sort.Slice(items, func(i, j int) bool { return items[i].Alias < items[j].Alias })
 	for _, p := range items {
-		fmt.Fprintf(cmd.OutOrStdout(), "%-10s %-8s %s  built-in v%d\n", p.Alias, p.Provider, p.Endpoint, presets.CatalogVersion)
+		fmt.Fprintf(cmd.OutOrStdout(), "%-10s %-8s %-30s %s  built-in v%d\n", p.Alias, p.Provider, p.Auth, p.Endpoint, presets.CatalogVersion)
 	}
 	return nil
 }}
diff --git a/cmd/preset/root_test.go b/cmd/preset/root_test.go
new file mode 100644
index 00000000..df7019c2
--- /dev/null
+++ b/cmd/preset/root_test.go
@@ -0,0 +1,37 @@
+package preset
+
+import (
+	"bytes"
+	"strings"
+	"testing"
+)
+
+func TestListIncludesAuthenticationType(t *testing.T) {
+	var out bytes.Buffer
+	listCmd.SetOut(&out)
+	t.Cleanup(func() { listCmd.SetOut(nil) })
+
+	if err := listCmd.RunE(listCmd, nil); err != nil {
+		t.Fatal(err)
+	}
+
+	for _, want := range []string{
+		"calypr gen3 provider-helper:gen3-profile",
+		"cgc cgc bearer",
+		"synapse synapse bearer",
+		"terra terra google-adc",
+	} {
+		if fields := strings.Fields(out.String()); !containsConsecutive(fields, strings.Fields(want)) {
+			t.Errorf("preset list output does not include %q:\n%s", want, out.String())
+		}
+	}
+}
+
+func containsConsecutive(values, want []string) bool {
+	for i := 0; i+len(want) <= len(values); i++ {
+		if strings.Join(values[i:i+len(want)], " ") == strings.Join(want, " ") {
+			return true
+		}
+	}
+	return false
+}
diff --git a/docs/commands.md b/docs/commands.md
index 369ac9eb..91e2783a 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -72,9 +72,9 @@ compatibility forms. New scripts should use the unified command.
 ### `git drs preset list` / `git drs preset show <alias>`
 
 Display the presets embedded in this release. `list` shows each alias,
-provider, endpoint, and catalog version. `show` also displays its authentication
-default and, when present, registry service ID. Presets contain no credential
-or secret values.
+provider, authentication default, endpoint, and catalog version. `show` displays
+the same details vertically and, when present, the registry service ID. Presets
+contain no credential or secret values.
 
 | Alias | Provider | Authentication default |
 | --- | --- | --- |
diff --git a/internal/presets/presets.go b/internal/presets/presets.go
index fcc0b9db..891ddb44 100644
--- a/internal/presets/presets.go
+++ b/internal/presets/presets.go
@@ -29,13 +29,26 @@ type catalog struct {
 var builtIn []byte
 
 func List() ([]Preset, error) {
+	return loadCatalog(builtIn)
+}
+
+func loadCatalog(data []byte) ([]Preset, error) {
 	var c catalog
-	if err := yaml.Unmarshal(builtIn, &c); err != nil {
+	if err := yaml.Unmarshal(data, &c); err != nil {
 		return nil, fmt.Errorf("decode built-in preset catalog: %w", err)
 	}
 	if c.Version != CatalogVersion {
 		return nil, fmt.Errorf("unsupported built-in preset catalog version %d", c.Version)
 	}
+	for i, preset := range c.Presets {
+		if strings.TrimSpace(preset.Auth) == "" {
+			name := strings.TrimSpace(preset.Alias)
+			if name == "" {
+				name = fmt.Sprintf("at index %d", i)
+			}
+			return nil, fmt.Errorf("preset %q does not specify an authentication type", name)
+		}
+	}
 	return append([]Preset(nil), c.Presets...), nil
 }
 
diff --git a/internal/presets/presets_test.go b/internal/presets/presets_test.go
index af58f419..a58c118f 100644
--- a/internal/presets/presets_test.go
+++ b/internal/presets/presets_test.go
@@ -1,6 +1,9 @@
 package presets
 
-import "testing"
+import (
+	"strings"
+	"testing"
+)
 
 func TestBuiltInCatalog(t *testing.T) {
 	items, err := List()
@@ -17,3 +20,19 @@ func TestBuiltInCatalog(t *testing.T) {
 		}
 	}
 }
+
+func TestCatalogRequiresPresetAuthenticationType(t *testing.T) {
+	_, err := loadCatalog([]byte(`
+version: 1
+presets:
+  - alias: unauthenticated
+    endpoint: https://drs.example.org
+    provider: ga4gh
+`))
+	if err == nil {
+		t.Fatal("expected a preset without an authentication type to be rejected")
+	}
+	if !strings.Contains(err.Error(), `preset "unauthenticated" does not specify an authentication type`) {
+		t.Fatalf("unexpected error: %v", err)
+	}
+}

From 55ac90a8d7adb912eeb2261f86dbdbd4fa962da6 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 27 Jul 2026 15:18:30 -0700
Subject: [PATCH 43/66] Complete generic remote runtime boundary

---
 README.md                                     |  2 +-
 cmd/addref/add-ref.go                         | 19 ++--
 cmd/ping/main.go                              | 13 +--
 cmd/pull/main.go                              | 15 ++--
 cmd/pull/pull_test.go                         | 13 ---
 cmd/push/main.go                              | 14 +--
 docs/anvil-terra-poc-presentation.md          | 17 ++--
 docs/anvil-terra-poc.md                       | 66 +++++---------
 docs/anvil.md                                 | 26 ++----
 docs/commands.md                              |  4 +
 docs/getting-started.md                       |  4 +-
 docs/quickstart.md                            |  4 +-
 internal/config/config.go                     | 89 -------------------
 internal/config/config_test.go                | 18 ++++
 internal/config/repository_config_test.go     | 51 -----------
 .../config/terra_remote_acceptance_test.go    | 36 --------
 internal/remoteruntime/runtime.go             | 38 ++++++--
 internal/remoteruntime/runtime_test.go        | 26 ++++++
 18 files changed, 141 insertions(+), 314 deletions(-)
 delete mode 100644 internal/config/repository_config_test.go
 delete mode 100644 internal/config/terra_remote_acceptance_test.go

diff --git a/README.md b/README.md
index 16cf9056..3a51ed6c 100644
--- a/README.md
+++ b/README.md
@@ -93,7 +93,7 @@ Push and pull depend on server-side bucket mapping for the requested scope. That
 | --- | --- |
 | `git drs install` | Install global `git-drs` filter config |
 | `git drs init` | Explicitly initialize or repair repository-local `git-drs` state |
-| `git drs remote add <endpoint-or-alias>` | Add a DRS remote (built-ins: calypr, terra, synapse, cgc) |
+| `git drs remote add <endpoint-or-alias>` | Add a DRS remote (operational: Calypr/Gen3 and Terra; catalog-only: Synapse and CGC) |
 | `git drs preset list` | List the non-secret presets embedded in this release |
 | `git drs remote list` | List configured remotes |
 | `git drs remote remove <name>` | Remove a configured DRS remote |
diff --git a/cmd/addref/add-ref.go b/cmd/addref/add-ref.go
index 86e271ed..c7cecb80 100644
--- a/cmd/addref/add-ref.go
+++ b/cmd/addref/add-ref.go
@@ -68,17 +68,6 @@ var Cmd = &cobra.Command{
 		if selected == nil {
 			return fmt.Errorf("remote %q is not configured", remoteName)
 		}
-		if remoteType != "" {
-			actual := "gen3"
-			if _, ok := cfg.Remotes[remoteName]; ok && cfg.Remotes[remoteName].Terra != nil {
-				actual = "terra"
-			} else if cfg.Remotes[remoteName].Local != nil {
-				actual = "local"
-			}
-			if remoteType != actual {
-				return fmt.Errorf("--remote-type %q conflicts with configured remote %q type %q", remoteType, remoteName, actual)
-			}
-		}
 		dstPath, err = safeDestination(dstPath)
 		if err != nil {
 			return err
@@ -88,6 +77,12 @@ var Cmd = &cobra.Command{
 		if err != nil {
 			return err
 		}
+		if !client.CanResolve() {
+			return fmt.Errorf("remote %q cannot resolve DRS objects", remoteName)
+		}
+		if remoteType != "" && remoteType != string(client.RemoteType) {
+			return fmt.Errorf("--remote-type %q conflicts with configured remote %q type %q", remoteType, remoteName, client.RemoteType)
+		}
 
 		obj, err := resolveAddRefObject(context.Background(), cfg, remoteName, client, drsUri)
 		if err != nil {
@@ -105,7 +100,7 @@ var Cmd = &cobra.Command{
 		}
 
 		oid := addRefLocalOID(drsUri, remoteName, &obj)
-		if client.RemoteType == config.TerraServerType {
+		if client.IsReadOnly() {
 			if err := lfs.CreateDRSPointer(&obj, dstPath, drsUri); err != nil {
 				return err
 			}
diff --git a/cmd/ping/main.go b/cmd/ping/main.go
index 72625975..d17a4760 100644
--- a/cmd/ping/main.go
+++ b/cmd/ping/main.go
@@ -35,7 +35,7 @@ type healthInfo struct {
 }
 
 var pingHealth = func(ctx context.Context, gc *remoteruntime.GitContext) (healthInfo, error) {
-	if gc != nil && gc.RemoteType == config.TerraServerType {
+	if gc != nil && gc.IsReadOnly() {
 		serviceInfo, err := pingTerraServiceInfo(ctx, gc.Endpoint)
 		return healthInfo{ServiceInfo: serviceInfo}, err
 	}
@@ -136,16 +136,7 @@ func resolveStatus(args []string, logger *slog.Logger) (statusInfo, *remoterunti
 		Bucket:        gc.BucketName,
 		StoragePrefix: gc.StoragePrefix,
 		AuthMode:      authMode(gc),
-	}
-	switch remoteCfg.(type) {
-	case *config.Gen3Remote:
-		status.RemoteType = string(config.Gen3ServerType)
-	case *config.LocalRemote:
-		status.RemoteType = string(config.LocalServerType)
-	case *config.TerraRemote:
-		status.RemoteType = string(config.TerraServerType)
-	default:
-		status.RemoteType = "unknown"
+		RemoteType:    string(gc.RemoteType),
 	}
 
 	return status, gc, nil
diff --git a/cmd/pull/main.go b/cmd/pull/main.go
index c2e01c0b..b69e41b8 100644
--- a/cmd/pull/main.go
+++ b/cmd/pull/main.go
@@ -95,7 +95,10 @@ var Cmd = &cobra.Command{
 			return err
 		}
 		var anvil resolver.Resolver
-		if drsCtx.RemoteType == config.TerraServerType {
+		if !drsCtx.CanDownload() || !drsCtx.CanResolve() {
+			return fmt.Errorf("remote %q does not support resolving and downloading DRS objects", remote)
+		}
+		if drsCtx.IsReadOnly() {
 			anvil, err = resolver.NewAnVIL(cmd.Context(), drsCtx.Endpoint)
 			if err != nil {
 				return err
@@ -218,7 +221,7 @@ var Cmd = &cobra.Command{
 			logg.Debug("no missing pointer objects to download")
 		}
 
-		readOnly := remoteIsReadOnly(cfg, remote)
+		readOnly := drsCtx.IsReadOnly()
 		if err := checkoutDownloadedFiles(pointers, progress, readOnly); err != nil {
 			return err
 		}
@@ -440,14 +443,6 @@ func globToRegexp(pattern string) string {
 	return b.String()
 }
 
-func remoteIsReadOnly(cfg *config.Config, remote config.Remote) bool {
-	selected, ok := cfg.Remotes[remote]
-	// Terra remotes are resolver-only and therefore always read-only. Match the
-	// push command's capability check rather than relying on optional legacy
-	// configuration fields being present.
-	return ok && selected.Terra != nil
-}
-
 func checkoutDownloadedFiles(files []pointerFile, progress *internaltransfer.PullProgressRenderer, readOnly bool) error {
 	for _, f := range files {
 		if strings.TrimSpace(f.Name) == "" || strings.TrimSpace(f.Oid) == "" {
diff --git a/cmd/pull/pull_test.go b/cmd/pull/pull_test.go
index eeab5df6..fb45fb11 100644
--- a/cmd/pull/pull_test.go
+++ b/cmd/pull/pull_test.go
@@ -361,19 +361,6 @@ func TestCheckoutDownloadedFilesFromReadOnlyRemoteSetsReadOnlyPermission(t *test
 	}
 }
 
-func TestRemoteIsReadOnly(t *testing.T) {
-	cfg := &config.Config{Remotes: map[config.Remote]config.RemoteSelect{
-		"anvil": {Terra: &config.TerraRemote{Mode: "read-only"}},
-		"local": {Local: &config.LocalRemote{}},
-	}}
-	if !remoteIsReadOnly(cfg, "anvil") {
-		t.Fatal("expected read-only Terra remote to be detected")
-	}
-	if remoteIsReadOnly(cfg, "local") {
-		t.Fatal("did not expect local remote to be read-only")
-	}
-}
-
 func TestRefreshGitIndexForHydratedFilesClearsDirtyStatus(t *testing.T) {
 	repo := t.TempDir()
 	gitDRS := buildGitDRSBinaryForTest(t)
diff --git a/cmd/push/main.go b/cmd/push/main.go
index e61aa8a3..afabd710 100644
--- a/cmd/push/main.go
+++ b/cmd/push/main.go
@@ -58,20 +58,20 @@ var Cmd = &cobra.Command{
 				return err
 			}
 		}
-		if selected, ok := cfg.Remotes[remote]; ok && selected.Terra != nil {
+		drsClient, err := remoteruntime.New(cfg, remote, myLogger)
+		if err != nil {
+			myLogger.DebugContext(ctx, "create remote client failed", "error", err)
+			return err
+		}
+		if drsClient.IsReadOnly() || !drsClient.CanUpload() || !drsClient.CanRegister() {
 			return fmt.Errorf(
-				"remote %q is read-only: git drs push cannot upload files to Terra\n"+
+				"remote %q is read-only: git drs push cannot upload or register files\n"+
 					"no files were uploaded, and you do not need to back out a commit that references existing Terra data\n"+
 					"to publish the commit and its DRS references, use ordinary git push to a Git remote; this pushes only Git metadata and does not upload files to Terra",
 				remote,
 			)
 		}
 
-		drsClient, err := remoteruntime.New(cfg, remote, myLogger)
-		if err != nil {
-			myLogger.DebugContext(ctx, "create remote client failed", "error", err)
-			return err
-		}
 		drsClient.ForceUpload = pushForceUpload
 		state, err := resolveSyncRefState(ctx, string(remote))
 		if err != nil {
diff --git a/docs/anvil-terra-poc-presentation.md b/docs/anvil-terra-poc-presentation.md
index 3de78a23..915099e4 100644
--- a/docs/anvil-terra-poc-presentation.md
+++ b/docs/anvil-terra-poc-presentation.md
@@ -217,20 +217,13 @@ The DRS URI stays canonical. A checksum describes content; it does not identify
 </div>
 <div>
 
-### Tracked `.git-drs/config.yaml`
-
-```yaml
-version: 1
-default_remote: anvil
-remotes:
-  anvil:
-    type: terra
-    endpoint: https://data.terra.bio
-    auth: google-adc
-    mode: read-only
+### Repository-local Git configuration
+
+```bash
+git drs remote add anvil terra --checkout hydrate
 ```
 
-Only allowlisted public settings load. Secret-like or unknown sensitive fields fail closed.
+Remote metadata has one authoritative representation in `.git/config`; credentials remain in the provider store.
 </div>
 </div>
 
diff --git a/docs/anvil-terra-poc.md b/docs/anvil-terra-poc.md
index 2de8e546..55fbfcb8 100644
--- a/docs/anvil-terra-poc.md
+++ b/docs/anvil-terra-poc.md
@@ -85,20 +85,13 @@ Both users need:
 - a Google identity authorized for the referenced AnVIL data;
 - working Google ADC, initially established with the supported Google authentication tooling.
 
-The repository contains a non-secret `.git-drs/config.yaml` file:
-
-```yaml
-version: 1
-default_remote: anvil
-remotes:
-  anvil:
-    type: terra
-    endpoint: https://data.terra.bio
-    auth: google-adc
-    mode: read-only
+Each clone configures its remote in the repository-local Git config:
+
+```bash
+git drs remote add anvil terra --checkout hydrate
 ```
 
-Local Git configuration may override repository configuration, but secrets are never permitted in `.git-drs/config.yaml`.
+Repository-local Git config is authoritative. It is not tracked, and credential material remains in the provider credential store.
 
 ### First user: add and publish references
 
@@ -115,7 +108,7 @@ git drs add-ref --remote anvil \
 git drs add-ref --remote anvil \
   drs://<authority>/<object-id-2> data/sample-2.cram
 
-git add .git-drs/config.yaml .gitattributes data/
+git add .gitattributes data/
 git commit -m "Add AnVIL data references"
 git push
 ```
@@ -124,7 +117,7 @@ For multiple objects, the preferred POC workflow is a manifest:
 
 ```bash
 git drs add-ref --remote anvil --manifest references.tsv
-git add .git-drs/config.yaml .gitattributes data/
+git add .gitattributes data/
 git commit -m "Add AnVIL data references"
 git push
 ```
@@ -376,40 +369,28 @@ The implementation must:
 
 The batch operation is a wrapper over the same single-reference primitive, not an independent resolution system.
 
-### Phase 8: Commit non-secret repository configuration
+### Phase 8: Configure each clone
 
-Adopt Option B: commit `.git-drs/config.yaml` so a clone carries the public information required to select the correct resolver.
+Use the remote command to write the single authoritative repository-local Git configuration after cloning.
 
 Initial schema:
 
-```yaml
-version: 1
-default_remote: anvil
-remotes:
-  anvil:
-    type: terra
-    endpoint: https://data.terra.bio
-    auth: google-adc
-    mode: read-only
+```bash
+git drs remote add anvil terra --checkout hydrate
 ```
 
 Configuration rules:
 
-- only an allowlisted schema may be loaded from tracked configuration;
-- credentials, tokens, arbitrary headers, signed URLs, and local paths are forbidden;
-- local Git configuration may override public endpoint or remote selection;
-- secret-bearing configuration remains local and takes precedence;
-- commands must identify whether an effective setting came from repository or local configuration;
-- invalid or secret-like tracked fields must fail closed with an actionable error.
-
-With this configuration committed, the second user's desired flow is reduced to authentication, clone, and pull.
+- Git config is the only remote configuration representation;
+- credentials remain in environment variables or provider credential stores;
+- every clone runs `git drs remote add` before pulling.
 
 ## Git Push Semantics for This Prototype
 
 AnVIL data already exists and the configured Terra remote is read-only. Publishing references therefore uses ordinary Git:
 
 ```bash
-git add .git-drs/config.yaml .gitattributes data/
+git add .gitattributes data/
 git commit -m "Add AnVIL data references"
 git push
 ```
@@ -419,7 +400,6 @@ git push
 - pointer files;
 - repository paths and Git history;
 - `.gitattributes` rules;
-- non-secret `.git-drs/config.yaml`;
 - an optional reference manifest when the repository chooses to track it.
 
 It does not:
@@ -516,12 +496,11 @@ Verify that:
 
 ### 11. Repository configuration safety
 
-Verify that tracked configuration:
+Verify that repository-local Git configuration:
 
-- loads after a fresh clone;
-- can be safely overridden locally;
-- rejects secret-bearing or unknown sensitive fields;
-- never shadows explicit local credentials with repository-controlled secrets.
+- is created by `git drs remote add` after a fresh clone;
+- is the only source of remote metadata;
+- contains credential source identifiers but never credential values.
 
 ## Backlog in Priority Order
 
@@ -535,7 +514,7 @@ Verify that tracked configuration:
 6. Add explicit DRS URI, cache OID, and content checksum identities.
 7. Refactor pull to use `AnVILResolver` rather than a Syfon client.
 8. Validate size and SHA256 and atomically manage cache content.
-9. Implement and safely load `.git-drs/config.yaml`.
+9. Implement and safely load repository-local Git configuration.
 10. Reject `git drs push` for read-only Terra remotes.
 11. Add a real or contract-faithful two-user clone-and-pull acceptance test.
 
@@ -546,7 +525,7 @@ Verify that tracked configuration:
 3. Add safe retry, cancellation, and expired-URL re-resolution.
 4. Add `git drs doctor` checks for ADC, configuration, endpoint health, resolution, authorization, and pointer validity.
 5. Improve errors for absent credentials, denied access, missing records, invalid manifests, and integrity failures.
-6. Add CI coverage for clean-clone portability, authorization isolation, and repository configuration safety.
+6. Add CI coverage for clean-clone setup, authorization isolation, and repository configuration safety.
 7. Publish versioned binaries and a compatibility matrix for the tested AnVIL contract.
 
 ### P2: explicitly deferred
@@ -568,7 +547,7 @@ The AnVIL/Terra reference POC is functional when:
 - Each generated pointer commits the normalized canonical DRS URI.
 - Pointers also preserve expected size and SHA256 when available.
 - The Git repository contains no payload bytes, credentials, authorization headers, or signed URLs.
-- The repository commits a validated, non-secret `.git-drs/config.yaml` selecting the read-only AnVIL remote.
+- Each clone configures the read-only AnVIL remote in repository-local Git configuration.
 - Ordinary `git push` publishes the references without contacting AnVIL.
 - `git drs push` refuses to operate on the read-only Terra remote.
 - User B can clone without receiving any User A clone-local metadata, cache, or credentials.
@@ -579,4 +558,3 @@ The AnVIL/Terra reference POC is functional when:
 - Interrupted, expired-URL, and integrity-failure paths do not poison the cache or overwrite pointers with invalid content.
 - Repeated pulls are idempotent and reuse verified cache entries.
 - The complete two-user flow runs as a documented acceptance test in a clean environment.
-
diff --git a/docs/anvil.md b/docs/anvil.md
index 36a30f44..6795e8ce 100644
--- a/docs/anvil.md
+++ b/docs/anvil.md
@@ -19,24 +19,13 @@ ADC is local user state. Never copy the ADC JSON file into the repository.
 
 ## Configure an AnVIL repository
 
-Create and commit `.git-drs/config.yaml`:
-
-```yaml
-version: 1
-default_remote: anvil
-remotes:
-  anvil:
-    type: terra
-    endpoint: https://data.terra.bio
-    auth: google-adc
-    mode: read-only
+Configure the remote in repository-local Git config:
+
+```bash
+git drs remote add anvil terra --checkout hydrate
 ```
 
-The tracked schema intentionally permits only the public Terra endpoint,
-Google ADC authentication selection, and read-only mode. Tokens, arbitrary
-headers, credential paths, signed URLs, unknown fields, non-HTTPS endpoints,
-and embedded URL credentials are rejected. Clone-local Git configuration can
-override public settings when an organization uses another trusted resolver.
+The command stores only public remote metadata in `.git/config`. Google ADC remains local user state. Each clone must run the command because `.git/config` is not tracked.
 
 ## Publish one reference
 
@@ -46,7 +35,7 @@ Use the configured remote and choose the path that the data should occupy:
 git drs add-ref --remote anvil \
   drs://<authority>/<object-id> data/sample.cram
 # Run this only after add-ref finishes successfully.
-git add .git-drs/config.yaml .gitattributes data/sample.cram
+git add .gitattributes data/sample.cram
 git commit -m "Reference AnVIL sample"
 git push
 ```
@@ -140,9 +129,6 @@ references. Do not use `git drs push` for a Terra remote.
   access to the controlled dataset. Do not ask another user to share ADC files.
 * `AnVIL DRS object not found`: verify the committed URI and that the configured
   resolver supports its authority.
-* Repository configuration errors are intentionally strict. Remove secret or
-  unknown fields from `.git-drs/config.yaml`; place supported local overrides
-  in Git configuration instead.
 * Do not commit `.git/drs`, `.git/lfs`, Google credential files, bearer tokens,
   request headers, or resolved access URLs. Access URLs are temporary and are
   resolved again at download time.
diff --git a/docs/commands.md b/docs/commands.md
index 91e2783a..b4b5ccd8 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -41,6 +41,10 @@ Add a DRS server with the unified remote command. The built-in aliases are
 `calypr`, `terra`, `synapse`, and `cgc`; inspect their non-secret defaults with
 `git drs preset list` or `git drs preset show <alias>`.
 
+Calypr/Gen3 and Terra currently have operational runtime adapters. Synapse and
+CGC are catalog-only; execution commands reject them explicitly rather than
+constructing a partially authenticated client.
+
 ```bash
 git drs remote add cgc --credential env:CGC_TOKEN
 git drs remote add synapse --credential helper:synapse
diff --git a/docs/getting-started.md b/docs/getting-started.md
index dcf0a698..c36d3c37 100644
--- a/docs/getting-started.md
+++ b/docs/getting-started.md
@@ -40,7 +40,9 @@ This command:
 - stores only the credential source, not an inline secret
 - bootstraps repo-local `git-drs` wiring when it is missing
 
-The built-in presets are `calypr`, `terra`, `synapse`, and `cgc`. The local
+The built-in presets are `calypr`, `terra`, `synapse`, and `cgc`. Calypr/Gen3
+and Terra have operational runtime adapters; Synapse and CGC are catalog-only
+and execution commands reject them until their adapters are implemented. The local
 remote name is optional: `git drs remote add calypr ...` derives the name
 `calypr`. You can also connect an unlisted HTTPS endpoint directly:
 
diff --git a/docs/quickstart.md b/docs/quickstart.md
index ce40be96..97074351 100644
--- a/docs/quickstart.md
+++ b/docs/quickstart.md
@@ -65,7 +65,9 @@ git drs preset list
 git drs preset show calypr
 ```
 
-The built-in aliases are `calypr`, `terra`, `synapse`, and `cgc`. Presets supply
+The built-in aliases are `calypr`, `terra`, `synapse`, and `cgc`. Only
+Calypr/Gen3 and Terra currently have operational runtime adapters; Synapse and
+CGC are catalog-only presets. Presets supply
 the endpoint, provider adapter, and usual authentication method; they never
 contain credentials.
 
diff --git a/internal/config/config.go b/internal/config/config.go
index 9acaf783..24a95a27 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -3,18 +3,13 @@ package config
 import (
 	"errors"
 	"fmt"
-	"io"
-	"net/url"
-	"os"
 	"os/exec"
-	"path/filepath"
 	"sort"
 	"strconv"
 	"strings"
 
 	"github.com/calypr/git-drs/internal/gitrepo"
 	"github.com/go-git/go-git/v5"
-	"gopkg.in/yaml.v3"
 )
 
 // RemoteType represents the type of server being initialized
@@ -106,10 +101,6 @@ func getRepo() (*git.Repository, error) {
 	return gitrepo.GetRepo()
 }
 
-func (c Config) ConfigPath() (string, error) {
-	return getConfigPath()
-}
-
 // updates and git adds a Git DRS config file
 // this should handle three cases:
 // 1. create a new config file if it does not exist / is empty
@@ -319,10 +310,6 @@ func LoadConfig() (*Config, error) {
 	cfg := &Config{
 		Remotes: make(map[Remote]RemoteSelect),
 	}
-	if err := loadRepositoryConfig(cfg); err != nil {
-		return nil, err
-	}
-
 	// Iterate over all sections to find 'drs' and its subsections
 	for _, section := range conf.Raw.Sections {
 		if section.Name != configSection {
@@ -463,79 +450,3 @@ func firstRemote(cfg *Config) Remote {
 	sort.Strings(names)
 	return Remote(names[0])
 }
-
-// GetGitConfigInt reads an integer value from git config
-// getGitConfigValue retrieves a value from git config by key
-func getConfigPath() (string, error) {
-	topLevel, err := gitrepo.GitTopLevel()
-	if err != nil {
-		return "", err
-	}
-
-	configPath := filepath.Join(topLevel, gitrepo.RepoDRSDir, gitrepo.ConfigYAML)
-	return configPath, nil
-}
-
-type repositoryConfig struct {
-	Version       int                               `yaml:"version"`
-	DefaultRemote string                            `yaml:"default_remote"`
-	Remotes       map[string]repositoryRemoteConfig `yaml:"remotes"`
-}
-
-type repositoryRemoteConfig struct {
-	Type     string `yaml:"type"`
-	Endpoint string `yaml:"endpoint"`
-	Auth     string `yaml:"auth"`
-	Mode     string `yaml:"mode"`
-}
-
-// loadRepositoryConfig loads only the public, allowlisted clone-portable
-// configuration. KnownFields deliberately fails closed for tokens, headers,
-// credential paths, and future fields until they receive a security review.
-func loadRepositoryConfig(cfg *Config) error {
-	path, err := getConfigPath()
-	if err != nil {
-		return err
-	}
-	f, err := os.Open(path)
-	if os.IsNotExist(err) {
-		return nil
-	}
-	if err != nil {
-		return fmt.Errorf("open repository git-drs config: %w", err)
-	}
-	defer f.Close()
-	var raw repositoryConfig
-	dec := yaml.NewDecoder(io.LimitReader(f, 1<<20))
-	dec.KnownFields(true)
-	if err := dec.Decode(&raw); err != nil {
-		return fmt.Errorf("invalid repository config %s: %w", path, err)
-	}
-	if raw.Version != 1 {
-		return fmt.Errorf("invalid repository config %s: unsupported version %d", path, raw.Version)
-	}
-	if strings.TrimSpace(raw.DefaultRemote) != "" {
-		cfg.DefaultRemote = Remote(strings.TrimSpace(raw.DefaultRemote))
-	}
-	for name, r := range raw.Remotes {
-		name = strings.TrimSpace(name)
-		if name == "" {
-			return fmt.Errorf("invalid repository config %s: remote name cannot be empty", path)
-		}
-		if r.Type != "terra" {
-			return fmt.Errorf("invalid repository config %s: remote %q type must be terra", path, name)
-		}
-		if r.Auth != "google-adc" {
-			return fmt.Errorf("invalid repository config %s: remote %q auth must be google-adc", path, name)
-		}
-		if r.Mode != "read-only" {
-			return fmt.Errorf("invalid repository config %s: remote %q mode must be read-only", path, name)
-		}
-		u, err := url.ParseRequestURI(strings.TrimSpace(r.Endpoint))
-		if err != nil || u.Scheme != "https" || u.Host == "" || u.User != nil {
-			return fmt.Errorf("invalid repository config %s: remote %q endpoint must be an HTTPS URL without credentials", path, name)
-		}
-		cfg.Remotes[Remote(name)] = RemoteSelect{Terra: &TerraRemote{Endpoint: u.String(), Auth: r.Auth, Mode: r.Mode}}
-	}
-	return nil
-}
diff --git a/internal/config/config_test.go b/internal/config/config_test.go
index 33d8cf50..739135f5 100644
--- a/internal/config/config_test.go
+++ b/internal/config/config_test.go
@@ -3,9 +3,27 @@ package config
 import (
 	"os"
 	"os/exec"
+	"path/filepath"
 	"testing"
 )
 
+func TestLoadConfigIgnoresFormerRepositoryYAMLPath(t *testing.T) {
+	dir := setupTestRepo(t)
+	if err := os.MkdirAll(filepath.Join(dir, ".git-drs"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(dir, ".git-drs", "config.yaml"), []byte("not: [valid"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	cfg, err := LoadConfig()
+	if err != nil {
+		t.Fatalf("former repository YAML path must not be loaded: %v", err)
+	}
+	if len(cfg.Remotes) != 0 {
+		t.Fatalf("unexpected remotes loaded from former YAML path: %+v", cfg.Remotes)
+	}
+}
+
 func setupTestRepo(t *testing.T) string {
 	t.Helper()
 
diff --git a/internal/config/repository_config_test.go b/internal/config/repository_config_test.go
deleted file mode 100644
index 212dc46e..00000000
--- a/internal/config/repository_config_test.go
+++ /dev/null
@@ -1,51 +0,0 @@
-package config
-
-import (
-	"os"
-	"path/filepath"
-	"strings"
-	"testing"
-)
-
-func TestRepositoryConfigLoadsAndLocalGitOverrides(t *testing.T) {
-	repo := setupTestRepo(t)
-	dir := filepath.Join(repo, ".git-drs")
-	if err := os.Mkdir(dir, 0o755); err != nil {
-		t.Fatal(err)
-	}
-	data := "version: 1\ndefault_remote: anvil\nremotes:\n  anvil:\n    type: terra\n    endpoint: https://data.terra.bio\n    auth: google-adc\n    mode: read-only\n"
-	if err := os.WriteFile(filepath.Join(dir, "config.yaml"), []byte(data), 0o644); err != nil {
-		t.Fatal(err)
-	}
-	if err := os.WriteFile(filepath.Join(repo, ".git/config"), append(mustRead(t, filepath.Join(repo, ".git/config")), []byte("\n[drs]\n\tdefault-remote = local-choice\n")...), 0o644); err != nil {
-		t.Fatal(err)
-	}
-	cfg, err := LoadConfig()
-	if err != nil {
-		t.Fatal(err)
-	}
-	if cfg.GetRemote("anvil") == nil || cfg.DefaultRemote != "local-choice" {
-		t.Fatalf("repository remote or local override missing: %+v", cfg)
-	}
-}
-
-func TestRepositoryConfigRejectsSecretFields(t *testing.T) {
-	repo := setupTestRepo(t)
-	dir := filepath.Join(repo, ".git-drs")
-	_ = os.Mkdir(dir, 0o755)
-	data := "version: 1\nremotes:\n  anvil:\n    type: terra\n    endpoint: https://data.terra.bio\n    auth: google-adc\n    mode: read-only\n    token: do-not-load\n"
-	_ = os.WriteFile(filepath.Join(dir, "config.yaml"), []byte(data), 0o644)
-	_, err := LoadConfig()
-	if err == nil || !strings.Contains(err.Error(), "field token not found") {
-		t.Fatalf("expected fail-closed secret rejection, got %v", err)
-	}
-}
-
-func mustRead(t *testing.T, path string) []byte {
-	t.Helper()
-	b, err := os.ReadFile(path)
-	if err != nil {
-		t.Fatal(err)
-	}
-	return b
-}
diff --git a/internal/config/terra_remote_acceptance_test.go b/internal/config/terra_remote_acceptance_test.go
deleted file mode 100644
index e5a6ea81..00000000
--- a/internal/config/terra_remote_acceptance_test.go
+++ /dev/null
@@ -1,36 +0,0 @@
-package config
-
-import (
-	"os/exec"
-	"testing"
-)
-
-func TestAcceptanceLoadTerraRemoteConfig(t *testing.T) {
-	repo := setupTestRepo(t)
-	runGitConfig := func(args ...string) {
-		t.Helper()
-		cmd := exec.Command("git", append([]string{"config"}, args...)...)
-		cmd.Dir = repo
-		if out, err := cmd.CombinedOutput(); err != nil {
-			t.Fatalf("git config %v failed: %v: %s", args, err, string(out))
-		}
-	}
-
-	runGitConfig("drs.default-remote", "anvil")
-	runGitConfig("drs.remote.anvil.type", "terra")
-	runGitConfig("drs.remote.anvil.endpoint", "https://data.terra.bio")
-	runGitConfig("drs.remote.anvil.auth", "google-adc")
-	runGitConfig("drs.remote.anvil.mode", "read-only")
-
-	cfg, err := LoadConfig()
-	if err != nil {
-		t.Fatalf("LoadConfig error: %v", err)
-	}
-	remote := cfg.GetRemote(Remote("anvil"))
-	if remote == nil {
-		t.Fatalf("expected terra remote to load as a DRS remote")
-	}
-	if got := remote.GetEndpoint(); got != "https://data.terra.bio" {
-		t.Fatalf("unexpected terra endpoint: %q", got)
-	}
-}
diff --git a/internal/remoteruntime/runtime.go b/internal/remoteruntime/runtime.go
index baf8b298..d6fd3f55 100644
--- a/internal/remoteruntime/runtime.go
+++ b/internal/remoteruntime/runtime.go
@@ -32,8 +32,21 @@ type GitContext struct {
 	UploadConcurrency  int
 	Logger             *slog.Logger
 	Credential         *syconf.Credential
+	Capabilities       Capabilities
 }
 
+// Capabilities is the command-facing contract for a resolved remote. Commands
+// must use this contract rather than infer behaviour from configuration types.
+type Capabilities struct {
+	Resolve, Download, Upload, Register, ReadOnly bool
+}
+
+func (g *GitContext) CanResolve() bool  { return g != nil && g.Capabilities.Resolve }
+func (g *GitContext) CanDownload() bool { return g != nil && g.Capabilities.Download }
+func (g *GitContext) CanUpload() bool   { return g != nil && g.Capabilities.Upload }
+func (g *GitContext) CanRegister() bool { return g != nil && g.Capabilities.Register }
+func (g *GitContext) IsReadOnly() bool  { return g != nil && g.Capabilities.ReadOnly }
+
 func New(cfg *config.Config, remote config.Remote, logger *slog.Logger) (*GitContext, error) {
 	x, ok := cfg.Remotes[remote]
 	if !ok {
@@ -53,10 +66,20 @@ func New(cfg *config.Config, remote config.Remote, logger *slog.Logger) (*GitCon
 		return terraClient(*x.Terra, logger)
 	}
 	if x.Generic != nil {
-		if x.Generic.Provider == "terra" {
+		switch x.Generic.Provider {
+		case "terra":
 			return terraClient(config.TerraRemote{Endpoint: x.Generic.Endpoint, Auth: x.Generic.Auth, Mode: "read-only"}, logger)
+		case "gen3":
+			return gen3Client(string(remote), config.Gen3Remote{
+				Endpoint: x.Generic.Endpoint, Organization: x.Generic.GetOrganization(),
+				ProjectID: x.Generic.GetProjectId(), Bucket: x.Generic.GetBucketName(),
+				StoragePrefix: x.Generic.GetStoragePrefix(),
+			}, logger)
+		case "ga4gh", "auto", "cgc", "synapse":
+			return nil, fmt.Errorf("provider %q does not yet have an operational remote adapter", x.Generic.Provider)
+		default:
+			return nil, fmt.Errorf("unsupported remote provider %q", x.Generic.Provider)
 		}
-		return &GitContext{RemoteType: config.GA4GHServerType, Endpoint: x.Generic.Endpoint, Organization: x.Generic.GetOrganization(), ProjectId: x.Generic.GetProjectId(), Logger: logger, Credential: &syconf.Credential{APIEndpoint: x.Generic.Endpoint}}, nil
 	}
 	return nil, fmt.Errorf("no valid remote configuration found for current remote: %s", remote)
 }
@@ -69,10 +92,11 @@ func terraClient(remote config.TerraRemote, logger *slog.Logger) (*GitContext, e
 		return nil, err
 	}
 	return &GitContext{
-		RemoteType: config.TerraServerType,
-		Endpoint:   remote.Endpoint,
-		Logger:     logger,
-		Credential: &syconf.Credential{APIEndpoint: remote.Endpoint},
+		RemoteType:   config.TerraServerType,
+		Endpoint:     remote.Endpoint,
+		Logger:       logger,
+		Credential:   &syconf.Credential{APIEndpoint: remote.Endpoint},
+		Capabilities: Capabilities{Resolve: true, Download: true, ReadOnly: true},
 	}, nil
 }
 
@@ -140,6 +164,7 @@ func localClient(remoteName string, remote config.LocalRemote, logger *slog.Logg
 		StoragePrefix: storagePrefix,
 		Logger:        logger,
 		Credential:    cred,
+		Capabilities:  Capabilities{Resolve: true, Download: true, Upload: true, Register: true},
 	}, nil
 }
 
@@ -189,6 +214,7 @@ func newGitContext(profileConfig syconf.Credential, remote config.Gen3Remote, lo
 		UploadConcurrency:  uploadConcurrency,
 		Logger:             logger,
 		Credential:         &profileConfig,
+		Capabilities:       Capabilities{Resolve: true, Download: true, Upload: true, Register: true},
 	}, nil
 }
 
diff --git a/internal/remoteruntime/runtime_test.go b/internal/remoteruntime/runtime_test.go
index db4c6644..3b13c195 100644
--- a/internal/remoteruntime/runtime_test.go
+++ b/internal/remoteruntime/runtime_test.go
@@ -86,6 +86,32 @@ func TestNewTerraRemoteContext(t *testing.T) {
 	if gitCtx.Client != nil {
 		t.Fatalf("Terra runtime should not create a Syfon client, got %+v", gitCtx.Client)
 	}
+	if !gitCtx.CanResolve() || !gitCtx.CanDownload() || !gitCtx.IsReadOnly() || gitCtx.CanUpload() || gitCtx.CanRegister() {
+		t.Fatalf("unexpected Terra capabilities: %+v", gitCtx.Capabilities)
+	}
+}
+
+func TestNewGenericTerraUsesProviderAdapter(t *testing.T) {
+	setupTestRepo(t)
+	cfg := &config.Config{Remotes: map[config.Remote]config.RemoteSelect{
+		"anvil": {Generic: &config.GenericRemote{Endpoint: "https://data.terra.bio", Provider: "terra", Auth: "google-adc"}},
+	}}
+	gitCtx, err := New(cfg, "anvil", drslog.GetLogger())
+	if err != nil {
+		t.Fatal(err)
+	}
+	if gitCtx.RemoteType != config.TerraServerType || !gitCtx.IsReadOnly() || !gitCtx.CanDownload() {
+		t.Fatalf("generic Terra did not resolve through Terra adapter: %+v", gitCtx)
+	}
+}
+
+func TestNewRejectsProviderWithoutOperationalAdapter(t *testing.T) {
+	cfg := &config.Config{Remotes: map[config.Remote]config.RemoteSelect{
+		"cgc": {Generic: &config.GenericRemote{Endpoint: "https://example.test", Provider: "cgc", Auth: "bearer"}},
+	}}
+	if _, err := New(cfg, "cgc", drslog.GetLogger()); err == nil {
+		t.Fatal("expected unimplemented provider adapter to fail explicitly")
+	}
 }
 
 func TestLocalClientResolvesBucketScopeMappings(t *testing.T) {

From c8ebbdd5760c329ba9e31f9bd98076eb9ba1a228 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Mon, 27 Jul 2026 15:40:46 -0700
Subject: [PATCH 44/66] Clarify read-only Terra push error

---
 cmd/push/main.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cmd/push/main.go b/cmd/push/main.go
index afabd710..9b52f60e 100644
--- a/cmd/push/main.go
+++ b/cmd/push/main.go
@@ -65,7 +65,7 @@ var Cmd = &cobra.Command{
 		}
 		if drsClient.IsReadOnly() || !drsClient.CanUpload() || !drsClient.CanRegister() {
 			return fmt.Errorf(
-				"remote %q is read-only: git drs push cannot upload or register files\n"+
+				"remote %q is read-only: git drs push cannot upload files to Terra or register DRS objects\n"+
 					"no files were uploaded, and you do not need to back out a commit that references existing Terra data\n"+
 					"to publish the commit and its DRS references, use ordinary git push to a Git remote; this pushes only Git metadata and does not upload files to Terra",
 				remote,

From 001ac7308f3f2c59eff882c2cbd71ed998fe9483 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 28 Jul 2026 11:59:59 -0700
Subject: [PATCH 45/66] Support inline and non-first DRS access methods

---
 internal/resolver/resolver.go      | 26 +++++++++----
 internal/resolver/resolver_test.go | 59 ++++++++++++++++++++++++++++++
 2 files changed, 78 insertions(+), 7 deletions(-)

diff --git a/internal/resolver/resolver.go b/internal/resolver/resolver.go
index 7d356d88..6b665bf8 100644
--- a/internal/resolver/resolver.go
+++ b/internal/resolver/resolver.go
@@ -36,12 +36,23 @@ func DownloadToCache(ctx context.Context, r Resolver, drsURI, destination string
 	if err != nil {
 		return err
 	}
-	if len(obj.AccessMethods) == 0 || obj.AccessMethods[0].AccessID == "" {
-		return fmt.Errorf("AnVIL DRS object has no supported access method")
+	var access *ResolvedAccess
+	for _, method := range obj.AccessMethods {
+		switch {
+		case method.AccessURL != nil && strings.TrimSpace(method.AccessURL.URL) != "":
+			access = method.AccessURL
+		case strings.TrimSpace(method.AccessID) != "":
+			access, err = r.GetAccess(ctx, drsURI, method.AccessID)
+			if err != nil {
+				return err
+			}
+		}
+		if access != nil {
+			break
+		}
 	}
-	access, err := r.GetAccess(ctx, drsURI, obj.AccessMethods[0].AccessID)
-	if err != nil {
-		return err
+	if access == nil {
+		return fmt.Errorf("AnVIL DRS object has no supported access method")
 	}
 	if err := os.MkdirAll(filepath.Dir(destination), 0o755); err != nil {
 		return err
@@ -97,8 +108,9 @@ func DownloadToCache(ctx context.Context, r Resolver, drsURI, destination string
 }
 
 type AccessMethod struct {
-	Type     string `json:"type"`
-	AccessID string `json:"access_id"`
+	Type      string          `json:"type"`
+	AccessID  string          `json:"access_id,omitempty"`
+	AccessURL *ResolvedAccess `json:"access_url,omitempty"`
 }
 
 type ResolvedObject struct {
diff --git a/internal/resolver/resolver_test.go b/internal/resolver/resolver_test.go
index b8ac9a33..b80226ea 100644
--- a/internal/resolver/resolver_test.go
+++ b/internal/resolver/resolver_test.go
@@ -74,6 +74,65 @@ func TestDownloadToCacheUsesAccessURLHeaders(t *testing.T) {
 	}
 }
 
+func TestDownloadToCacheUsesInlineAccessURL(t *testing.T) {
+	const body = "data"
+	download := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if got := r.Header.Get("X-Inline-Token"); got != "inline-secret" {
+			t.Errorf("unexpected inline access header: %q", got)
+		}
+		_, _ = w.Write([]byte(body))
+	}))
+	defer download.Close()
+
+	resolverServer := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.URL.Path != "/ga4gh/drs/v1/objects/object-1" {
+			t.Errorf("inline access URL should not require an access endpoint request: %s", r.URL.Path)
+			http.NotFound(w, r)
+			return
+		}
+		_, _ = fmt.Fprintf(w, `{"id":"object-1","size":4,"access_methods":[{"type":"https","access_url":{"url":%q,"headers":["X-Inline-Token: inline-secret"]}}]}`, download.URL)
+	}))
+	defer resolverServer.Close()
+
+	r, err := NewAnVILWithClient(resolverServer.URL, resolverServer.Client())
+	if err != nil {
+		t.Fatal(err)
+	}
+	destination := filepath.Join(t.TempDir(), "cache", "object-1")
+	if err := DownloadToCache(context.Background(), r, "drs://example.org/object-1", destination); err != nil {
+		t.Fatalf("DownloadToCache returned error: %v", err)
+	}
+}
+
+func TestDownloadToCacheSelectsUsableAccessMethodAfterFirst(t *testing.T) {
+	const body = "data"
+	download := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		_, _ = w.Write([]byte(body))
+	}))
+	defer download.Close()
+
+	resolverServer := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		switch r.URL.Path {
+		case "/ga4gh/drs/v1/objects/object-1":
+			_, _ = w.Write([]byte(`{"id":"object-1","size":4,"access_methods":[{"type":"ftp"},{"type":"https","access_id":"a2"}]}`))
+		case "/ga4gh/drs/v1/objects/object-1/access/a2":
+			_, _ = fmt.Fprintf(w, `{"url":%q}`, download.URL)
+		default:
+			http.NotFound(w, r)
+		}
+	}))
+	defer resolverServer.Close()
+
+	r, err := NewAnVILWithClient(resolverServer.URL, resolverServer.Client())
+	if err != nil {
+		t.Fatal(err)
+	}
+	destination := filepath.Join(t.TempDir(), "cache", "object-1")
+	if err := DownloadToCache(context.Background(), r, "drs://example.org/object-1", destination); err != nil {
+		t.Fatalf("DownloadToCache returned error: %v", err)
+	}
+}
+
 func TestAnVILResolverAcceptsCompactDRSURI(t *testing.T) {
 	const compactURI = "drs://drs.anv0:v2_e68887be-c583-375a-a773-48771192c8fa"
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {

From 6221437bb5eea37b7880ae1cb4cb726a378a39f9 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 28 Jul 2026 12:12:25 -0700
Subject: [PATCH 46/66] Resolve unified Gen3 credential sources at runtime

---
 internal/remoteruntime/runtime.go      | 84 ++++++++++++++++++++++--
 internal/remoteruntime/runtime_test.go | 88 ++++++++++++++++++++++++++
 2 files changed, 168 insertions(+), 4 deletions(-)

diff --git a/internal/remoteruntime/runtime.go b/internal/remoteruntime/runtime.go
index d6fd3f55..0949e4fa 100644
--- a/internal/remoteruntime/runtime.go
+++ b/internal/remoteruntime/runtime.go
@@ -5,6 +5,9 @@ import (
 	"fmt"
 	"log/slog"
 	"net/url"
+	"os"
+	"os/exec"
+	"path/filepath"
 	"strings"
 	"time"
 
@@ -70,7 +73,7 @@ func New(cfg *config.Config, remote config.Remote, logger *slog.Logger) (*GitCon
 		case "terra":
 			return terraClient(config.TerraRemote{Endpoint: x.Generic.Endpoint, Auth: x.Generic.Auth, Mode: "read-only"}, logger)
 		case "gen3":
-			return gen3Client(string(remote), config.Gen3Remote{
+			return gen3ClientWithCredential(string(remote), x.Generic.Credential, config.Gen3Remote{
 				Endpoint: x.Generic.Endpoint, Organization: x.Generic.GetOrganization(),
 				ProjectID: x.Generic.GetProjectId(), Bucket: x.Generic.GetBucketName(),
 				StoragePrefix: x.Generic.GetStoragePrefix(),
@@ -101,8 +104,12 @@ func terraClient(remote config.TerraRemote, logger *slog.Logger) (*GitContext, e
 }
 
 func gen3Client(remoteName string, remote config.Gen3Remote, logger *slog.Logger) (*GitContext, error) {
+	return gen3ClientWithCredential(remoteName, "", remote, logger)
+}
+
+func gen3ClientWithCredential(remoteName, source string, remote config.Gen3Remote, logger *slog.Logger) (*GitContext, error) {
 	manager := calyprconf.NewConfigure(logger)
-	cred, err := manager.Load(remoteName)
+	cred, saveRefreshed, err := resolveGen3Credential(manager, source, remoteName, remote.Endpoint)
 	if err != nil {
 		return nil, err
 	}
@@ -111,12 +118,81 @@ func gen3Client(remoteName string, remote config.Gen3Remote, logger *slog.Logger
 	if err := credentials.EnsureValidCredential(ctx, cred, logger); err != nil {
 		return nil, WrapCredentialValidationError(remoteName, err)
 	}
-	if err := manager.Save(cred); err != nil {
-		return nil, fmt.Errorf("save refreshed credential for remote %q: %w", remoteName, err)
+	if saveRefreshed {
+		if err := manager.Save(cred); err != nil {
+			return nil, fmt.Errorf("save refreshed credential for remote %q: %w", remoteName, err)
+		}
 	}
 	return newGitContext(*cred, remote, logger)
 }
 
+type gen3CredentialManager interface {
+	Import(filePath, fenceToken string) (*calyprconf.Credential, error)
+	Load(profile string) (*calyprconf.Credential, error)
+}
+
+// resolveGen3Credential turns the clone-local source selector into credential
+// material. The configured remote endpoint remains authoritative: a credential
+// source must not be able to redirect requests to another host.
+func resolveGen3Credential(manager gen3CredentialManager, source, remoteName, endpoint string) (*calyprconf.Credential, bool, error) {
+	source = strings.TrimSpace(source)
+	if source == "" {
+		cred, err := manager.Load(remoteName)
+		return cred, true, err
+	}
+
+	var cred *calyprconf.Credential
+	var err error
+	switch {
+	case strings.HasPrefix(source, "profile:"):
+		profile := strings.TrimSpace(strings.TrimPrefix(source, "profile:"))
+		cred, err = manager.Load(profile)
+		if err == nil {
+			cred.Profile = profile
+		}
+		if err != nil {
+			return nil, false, fmt.Errorf("load Gen3 credential profile %q: %w", profile, err)
+		}
+		cred.APIEndpoint = endpoint
+		return cred, true, nil
+	case strings.HasPrefix(source, "file:"):
+		fileName := strings.TrimSpace(strings.TrimPrefix(source, "file:"))
+		if strings.HasPrefix(fileName, "~/") {
+			if home, homeErr := os.UserHomeDir(); homeErr == nil {
+				fileName = filepath.Join(home, strings.TrimPrefix(fileName, "~/"))
+			}
+		}
+		cred, err = manager.Import(fileName, "")
+		if err != nil {
+			return nil, false, fmt.Errorf("import Gen3 credential file %q: %w", fileName, err)
+		}
+	case strings.HasPrefix(source, "env:"):
+		name := strings.TrimSpace(strings.TrimPrefix(source, "env:"))
+		token, ok := os.LookupEnv(name)
+		if !ok || strings.TrimSpace(token) == "" {
+			return nil, false, fmt.Errorf("Gen3 credential environment variable %q is empty or unset", name)
+		}
+		cred = &calyprconf.Credential{AccessToken: strings.TrimSpace(token)}
+	case strings.HasPrefix(source, "helper:"):
+		name := strings.TrimSpace(strings.TrimPrefix(source, "helper:"))
+		output, helperErr := exec.Command(name).Output()
+		if helperErr != nil {
+			return nil, false, fmt.Errorf("run Gen3 credential helper %q: %w", name, helperErr)
+		}
+		token := strings.TrimSpace(string(output))
+		if token == "" {
+			return nil, false, fmt.Errorf("Gen3 credential helper %q returned an empty token", name)
+		}
+		cred = &calyprconf.Credential{AccessToken: token}
+	default:
+		return nil, false, fmt.Errorf("unsupported Gen3 credential source %q", source)
+	}
+
+	cred.Profile = remoteName
+	cred.APIEndpoint = endpoint
+	return cred, false, nil
+}
+
 func localClient(remoteName string, remote config.LocalRemote, logger *slog.Logger) (*GitContext, error) {
 	if username, password, err := gitrepo.GetRemoteBasicAuth(remoteName); err == nil && username != "" && password != "" {
 		remote.BasicUsername = username
diff --git a/internal/remoteruntime/runtime_test.go b/internal/remoteruntime/runtime_test.go
index 3b13c195..8d3cefd9 100644
--- a/internal/remoteruntime/runtime_test.go
+++ b/internal/remoteruntime/runtime_test.go
@@ -1,8 +1,10 @@
 package remoteruntime
 
 import (
+	"errors"
 	"os"
 	"os/exec"
+	"path/filepath"
 	"testing"
 
 	"github.com/calypr/git-drs/internal/config"
@@ -11,6 +13,31 @@ import (
 	syconf "github.com/calypr/syfon/client/config"
 )
 
+type fakeGen3CredentialManager struct {
+	importPath string
+	loadName   string
+	imported   *syconf.Credential
+	loaded     *syconf.Credential
+}
+
+func (m *fakeGen3CredentialManager) Import(filePath, _ string) (*syconf.Credential, error) {
+	m.importPath = filePath
+	if m.imported == nil {
+		return nil, errors.New("unexpected import")
+	}
+	copy := *m.imported
+	return &copy, nil
+}
+
+func (m *fakeGen3CredentialManager) Load(profile string) (*syconf.Credential, error) {
+	m.loadName = profile
+	if m.loaded == nil {
+		return nil, errors.New("unexpected load")
+	}
+	copy := *m.loaded
+	return &copy, nil
+}
+
 func setupTestRepo(t *testing.T) string {
 	t.Helper()
 
@@ -105,6 +132,67 @@ func TestNewGenericTerraUsesProviderAdapter(t *testing.T) {
 	}
 }
 
+func TestResolveGen3CredentialUsesSelectedProfile(t *testing.T) {
+	manager := &fakeGen3CredentialManager{loaded: &syconf.Credential{
+		Profile: "research", APIEndpoint: "https://old.example", APIKey: "key",
+	}}
+	cred, save, err := resolveGen3Credential(manager, "profile:research", "production", "https://gen3.example")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if manager.loadName != "research" || cred.Profile != "research" {
+		t.Fatalf("selected profile was not loaded: name=%q credential=%+v", manager.loadName, cred)
+	}
+	if cred.APIEndpoint != "https://gen3.example" {
+		t.Fatalf("APIEndpoint = %q, want configured remote endpoint", cred.APIEndpoint)
+	}
+	if !save {
+		t.Fatal("a refreshed profile credential should be saved to its source profile")
+	}
+}
+
+func TestResolveGen3CredentialImportsFile(t *testing.T) {
+	t.Setenv("HOME", t.TempDir())
+	manager := &fakeGen3CredentialManager{imported: &syconf.Credential{APIKey: "key"}}
+	cred, save, err := resolveGen3Credential(manager, "file:~/.gen3/credentials.json", "production", "https://gen3.example")
+	if err != nil {
+		t.Fatal(err)
+	}
+	wantPath := filepath.Join(os.Getenv("HOME"), ".gen3", "credentials.json")
+	if manager.importPath != wantPath {
+		t.Fatalf("import path = %q, want %q", manager.importPath, wantPath)
+	}
+	if cred.Profile != "production" || cred.APIEndpoint != "https://gen3.example" || save {
+		t.Fatalf("unexpected imported credential: credential=%+v save=%v", cred, save)
+	}
+}
+
+func TestResolveGen3CredentialReadsEnvironment(t *testing.T) {
+	t.Setenv("GEN3_TOKEN", " token-from-env \n")
+	cred, save, err := resolveGen3Credential(&fakeGen3CredentialManager{}, "env:GEN3_TOKEN", "production", "https://gen3.example")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if cred.AccessToken != "token-from-env" || cred.APIEndpoint != "https://gen3.example" || save {
+		t.Fatalf("unexpected environment credential: credential=%+v save=%v", cred, save)
+	}
+}
+
+func TestResolveGen3CredentialRunsHelper(t *testing.T) {
+	dir := t.TempDir()
+	helper := filepath.Join(dir, "gen3-token-helper")
+	if err := os.WriteFile(helper, []byte("#!/bin/sh\nprintf 'token-from-helper\\n'\n"), 0o700); err != nil {
+		t.Fatal(err)
+	}
+	cred, save, err := resolveGen3Credential(&fakeGen3CredentialManager{}, "helper:"+helper, "production", "https://gen3.example")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if cred.AccessToken != "token-from-helper" || cred.APIEndpoint != "https://gen3.example" || save {
+		t.Fatalf("unexpected helper credential: credential=%+v save=%v", cred, save)
+	}
+}
+
 func TestNewRejectsProviderWithoutOperationalAdapter(t *testing.T) {
 	cfg := &config.Config{Remotes: map[config.Remote]config.RemoteSelect{
 		"cgc": {Generic: &config.GenericRemote{Endpoint: "https://example.test", Provider: "cgc", Auth: "bearer"}},

From 6b899fa5b021ddf89e6aab49c5eb748630fd627d Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 28 Jul 2026 12:27:57 -0700
Subject: [PATCH 47/66] Resolve scoped Gen3 buckets at runtime

---
 internal/remoteruntime/bucket_lookup.go | 90 +++++++++++++++++++++++++
 internal/remoteruntime/runtime.go       | 14 +++-
 internal/remoteruntime/runtime_test.go  | 32 +++++++++
 3 files changed, 135 insertions(+), 1 deletion(-)
 create mode 100644 internal/remoteruntime/bucket_lookup.go

diff --git a/internal/remoteruntime/bucket_lookup.go b/internal/remoteruntime/bucket_lookup.go
new file mode 100644
index 00000000..2994519c
--- /dev/null
+++ b/internal/remoteruntime/bucket_lookup.go
@@ -0,0 +1,90 @@
+package remoteruntime
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"slices"
+	"strings"
+
+	"github.com/calypr/git-drs/internal/gitrepo"
+	bucketapi "github.com/calypr/syfon/apigen/client/bucketapi"
+	syfoncommon "github.com/calypr/syfon/common"
+)
+
+// resolveBucketScopeFromServer discovers the bucket exposed for a Gen3 scope.
+// This is the runtime fallback for remotes configured with a scope but without
+// an explicit storage location or repository-local bucket mapping.
+func resolveBucketScopeFromServer(ctx context.Context, endpoint, token, organization, project, preferredBucket string) (gitrepo.ResolvedBucketScope, error) {
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, strings.TrimRight(endpoint, "/")+"/data/buckets", nil)
+	if err != nil {
+		return gitrepo.ResolvedBucketScope{}, fmt.Errorf("build bucket list request: %w", err)
+	}
+	req.Header.Set("Authorization", "Bearer "+strings.TrimSpace(token))
+
+	resp, err := http.DefaultClient.Do(req)
+	if err != nil {
+		return gitrepo.ResolvedBucketScope{}, fmt.Errorf("request bucket list: %w", err)
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode != http.StatusOK {
+		return gitrepo.ResolvedBucketScope{}, fmt.Errorf("bucket list failed with status %d", resp.StatusCode)
+	}
+
+	var payload bucketapi.BucketsResponse
+	if err := json.NewDecoder(resp.Body).Decode(&payload); err != nil {
+		return gitrepo.ResolvedBucketScope{}, fmt.Errorf("decode bucket list response: %w", err)
+	}
+
+	bucket, err := resolveBucketFromPayload(payload, organization, project, preferredBucket)
+	if err != nil {
+		return gitrepo.ResolvedBucketScope{}, err
+	}
+	return gitrepo.ResolvedBucketScope{Bucket: bucket}, nil
+}
+
+func resolveBucketFromPayload(payload bucketapi.BucketsResponse, organization, project, preferredBucket string) (string, error) {
+	projectResource, err := syfoncommon.ResourcePath(organization, project)
+	if err != nil {
+		return "", err
+	}
+	orgResource, err := syfoncommon.ResourcePath(organization, "")
+	if err != nil {
+		return "", err
+	}
+
+	for _, resource := range []string{projectResource, orgResource} {
+		matches := make([]string, 0)
+		for bucket, meta := range payload.S3BUCKETS {
+			if meta.Programs == nil {
+				continue
+			}
+			for _, candidate := range *meta.Programs {
+				if syfoncommon.NormalizeAccessResource(candidate) == syfoncommon.NormalizeAccessResource(resource) {
+					matches = append(matches, bucket)
+					break
+				}
+			}
+		}
+		slices.Sort(matches)
+		matches = slices.Compact(matches)
+		if len(matches) == 0 {
+			continue
+		}
+		if preferredBucket != "" {
+			for _, bucket := range matches {
+				if strings.EqualFold(bucket, strings.TrimSpace(preferredBucket)) {
+					return bucket, nil
+				}
+			}
+			return "", fmt.Errorf("selected bucket %q does not match resource %q; choose one of: %s", preferredBucket, resource, strings.Join(matches, ", "))
+		}
+		if len(matches) == 1 {
+			return matches[0], nil
+		}
+		return "", fmt.Errorf("multiple visible server buckets matched resource %q: %s", resource, strings.Join(matches, ", "))
+	}
+
+	return "", fmt.Errorf("no visible server bucket matched organization=%q project=%q", organization, project)
+}
diff --git a/internal/remoteruntime/runtime.go b/internal/remoteruntime/runtime.go
index 0949e4fa..4ac6b44e 100644
--- a/internal/remoteruntime/runtime.go
+++ b/internal/remoteruntime/runtime.go
@@ -260,7 +260,19 @@ func newGitContext(profileConfig syconf.Credential, remote config.Gen3Remote, lo
 		remote.GetStoragePrefix(),
 	)
 	if err != nil {
-		return nil, err
+		ctx, cancel := context.WithTimeout(context.Background(), 60*time.Second)
+		defer cancel()
+		scope, err = resolveBucketScopeFromServer(
+			ctx,
+			profileConfig.APIEndpoint,
+			profileConfig.AccessToken,
+			remote.GetOrganization(),
+			projectID,
+			remote.GetBucketName(),
+		)
+		if err != nil {
+			return nil, fmt.Errorf("failed resolving bucket mapping for organization=%q project=%q: %w", remote.GetOrganization(), projectID, err)
+		}
 	}
 
 	raw, err := syclient.New(profileConfig.APIEndpoint, syclient.WithBearerToken(profileConfig.AccessToken))
diff --git a/internal/remoteruntime/runtime_test.go b/internal/remoteruntime/runtime_test.go
index 8d3cefd9..1dfa18eb 100644
--- a/internal/remoteruntime/runtime_test.go
+++ b/internal/remoteruntime/runtime_test.go
@@ -2,6 +2,8 @@ package remoteruntime
 
 import (
 	"errors"
+	"net/http"
+	"net/http/httptest"
 	"os"
 	"os/exec"
 	"path/filepath"
@@ -257,3 +259,33 @@ func TestNewGitContextReadsLFSConcurrentTransfers(t *testing.T) {
 		t.Fatalf("UploadConcurrency = %d, want 7", gitCtx.UploadConcurrency)
 	}
 }
+
+func TestNewGitContextDiscoversBucketForScopeOnlyRemote(t *testing.T) {
+	setupTestRepo(t)
+
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.URL.Path != "/data/buckets" {
+			t.Fatalf("request path = %q, want /data/buckets", r.URL.Path)
+		}
+		if got := r.Header.Get("Authorization"); got != "Bearer token" {
+			t.Fatalf("Authorization = %q, want bearer token", got)
+		}
+		_, _ = w.Write([]byte(`{"S3_BUCKETS":{"scope-bucket":{"programs":["/organization/org1/project/proj1"]}}}`))
+	}))
+	defer server.Close()
+
+	gitCtx, err := newGitContext(syconf.Credential{
+		APIEndpoint: server.URL,
+		AccessToken: "token",
+	}, config.Gen3Remote{
+		Endpoint:     server.URL,
+		Organization: "org1",
+		ProjectID:    "proj1",
+	}, drslog.GetLogger())
+	if err != nil {
+		t.Fatalf("newGitContext failed: %v", err)
+	}
+	if gitCtx.BucketName != "scope-bucket" {
+		t.Fatalf("BucketName = %q, want scope-bucket", gitCtx.BucketName)
+	}
+}

From 76098af6190ad3254afdcd00af01dd6f87c905b6 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 28 Jul 2026 12:40:52 -0700
Subject: [PATCH 48/66] Preserve source routing in add-ref pointers

---
 cmd/addref/add-ref.go      | 26 ++++++++------------------
 cmd/addref/add-ref_test.go | 22 ++++++++++++++++++++++
 2 files changed, 30 insertions(+), 18 deletions(-)

diff --git a/cmd/addref/add-ref.go b/cmd/addref/add-ref.go
index c7cecb80..5273f4dd 100644
--- a/cmd/addref/add-ref.go
+++ b/cmd/addref/add-ref.go
@@ -100,15 +100,7 @@ var Cmd = &cobra.Command{
 		}
 
 		oid := addRefLocalOID(drsUri, remoteName, &obj)
-		if client.IsReadOnly() {
-			if err := lfs.CreateDRSPointer(&obj, dstPath, drsUri); err != nil {
-				return err
-			}
-		} else if hasContentSHA256(&obj) {
-			if err := lfs.CreateLfsPointerWithOID(&obj, dstPath, oid); err != nil {
-				return err
-			}
-		} else if err := lfs.CreateDRSPointer(&obj, dstPath, drsUri); err != nil {
+		if err := createAddRefPointer(&obj, dstPath, drsUri); err != nil {
 			return err
 		}
 		if _, err := gitrepo.TrackReadOnly(cmd.Context(), args[1]); err != nil {
@@ -283,13 +275,7 @@ func runManifest(cmd *cobra.Command, filename string) error {
 		if err := os.MkdirAll(filepath.Dir(e.destination), 0o755); err != nil {
 			return err
 		}
-		if runtime.RemoteType == config.TerraServerType {
-			err = lfs.CreateDRSPointer(&e.object, e.destination, e.uri)
-		} else if hasContentSHA256(&e.object) {
-			err = lfs.CreateLfsPointerWithOID(&e.object, e.destination, addRefLocalOID(e.uri, remoteName, &e.object))
-		} else {
-			err = lfs.CreateDRSPointer(&e.object, e.destination, e.uri)
-		}
+		err = createAddRefPointer(&e.object, e.destination, e.uri)
 		if err != nil {
 			return err
 		}
@@ -301,8 +287,12 @@ func runManifest(cmd *cobra.Command, filename string) error {
 	return nil
 }
 
-func hasContentSHA256(obj *drsapi.DrsObject) bool {
-	return obj != nil && drsobject.NormalizeChecksum(hash.ConvertDrsChecksumsToHashInfo(obj.Checksums).SHA256) != ""
+// createAddRefPointer keeps the source authority in Git. The metadata written
+// under .git/drs is only a local cache, so a checksum-only pointer would leave
+// another clone unable to route hydration back to the authority that resolved
+// the reference.
+func createAddRefPointer(obj *drsapi.DrsObject, dst, sourceURI string) error {
+	return lfs.CreateDRSPointer(obj, dst, sourceURI)
 }
 
 func addRefLocalOID(sourceURI string, remoteName config.Remote, obj *drsapi.DrsObject) string {
diff --git a/cmd/addref/add-ref_test.go b/cmd/addref/add-ref_test.go
index 52c4e270..8996ea23 100644
--- a/cmd/addref/add-ref_test.go
+++ b/cmd/addref/add-ref_test.go
@@ -124,6 +124,28 @@ func TestCreateDRSPointerPreservesSourceURI(t *testing.T) {
 	}
 }
 
+func TestAddRefPointerPreservesSourceURIWhenObjectHasSHA256(t *testing.T) {
+	obj := &drsapi.DrsObject{
+		Size:      42,
+		Checksums: []drsapi.Checksum{{Type: "sha256", Checksum: strings.Repeat("a", 64)}},
+	}
+	path := filepath.Join(t.TempDir(), "pointer")
+	if err := createAddRefPointer(obj, path, "drs://source.example/object-1"); err != nil {
+		t.Fatalf("createAddRefPointer error: %v", err)
+	}
+	data, err := os.ReadFile(path)
+	if err != nil {
+		t.Fatalf("read pointer: %v", err)
+	}
+	want := "version https://calypr.github.io/spec/v1\n" +
+		"oid drs://source.example/object-1\n" +
+		"size 42\n" +
+		"sha256 " + strings.Repeat("a", 64) + "\n"
+	if string(data) != want {
+		t.Fatalf("pointer mismatch:\n got: %q\nwant: %q", data, want)
+	}
+}
+
 func TestAddRefTrackingMakesDRSPointerDiscoverable(t *testing.T) {
 	repo := t.TempDir()
 	runGitCmd(t, repo, "init")

From 48c83ab762a1e9b6a40e6950ce18f6622c150141 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 28 Jul 2026 12:57:44 -0700
Subject: [PATCH 49/66] Validate AnVIL checksums before caching downloads

---
 internal/resolver/resolver.go      | 25 ++++++++++-
 internal/resolver/resolver_test.go | 66 ++++++++++++++++++++++++++++++
 2 files changed, 90 insertions(+), 1 deletion(-)

diff --git a/internal/resolver/resolver.go b/internal/resolver/resolver.go
index 6b665bf8..2cea6340 100644
--- a/internal/resolver/resolver.go
+++ b/internal/resolver/resolver.go
@@ -3,6 +3,9 @@ package resolver
 
 import (
 	"context"
+	"crypto/sha256"
+	"crypto/subtle"
+	"encoding/hex"
 	"encoding/json"
 	"errors"
 	"fmt"
@@ -87,7 +90,8 @@ func DownloadToCache(ctx context.Context, r Resolver, drsURI, destination string
 		tmp.Close()
 		return fmt.Errorf("AnVIL data download returned HTTP %d", resp.StatusCode)
 	}
-	_, copyErr := io.Copy(tmp, resp.Body)
+	hasher := sha256.New()
+	_, copyErr := io.Copy(io.MultiWriter(tmp, hasher), resp.Body)
 	closeErr := tmp.Close()
 	if copyErr != nil {
 		return fmt.Errorf("AnVIL data download interrupted: %w", copyErr)
@@ -104,6 +108,25 @@ func DownloadToCache(ctx context.Context, r Resolver, drsURI, destination string
 			return fmt.Errorf("AnVIL data size mismatch: expected %d, got %d", obj.Size, info.Size())
 		}
 	}
+	for _, checksum := range obj.Checksums {
+		checksumType := strings.ToLower(strings.TrimSpace(checksum.Type))
+		if checksumType != "sha256" && checksumType != "sha-256" {
+			continue
+		}
+		expected := strings.TrimSpace(checksum.Checksum)
+		if prefix, value, ok := strings.Cut(expected, ":"); ok &&
+			(strings.EqualFold(strings.TrimSpace(prefix), "sha256") || strings.EqualFold(strings.TrimSpace(prefix), "sha-256")) {
+			expected = strings.TrimSpace(value)
+		}
+		expectedBytes, decodeErr := hex.DecodeString(expected)
+		if decodeErr != nil || len(expectedBytes) != sha256.Size {
+			return fmt.Errorf("AnVIL DRS object has an invalid %s checksum", checksumType)
+		}
+		actual := hasher.Sum(nil)
+		if subtle.ConstantTimeCompare(actual, expectedBytes) != 1 {
+			return fmt.Errorf("AnVIL data checksum mismatch for %s", checksumType)
+		}
+	}
 	return os.Rename(tmpName, destination)
 }
 
diff --git a/internal/resolver/resolver_test.go b/internal/resolver/resolver_test.go
index b80226ea..42585b13 100644
--- a/internal/resolver/resolver_test.go
+++ b/internal/resolver/resolver_test.go
@@ -2,10 +2,13 @@ package resolver
 
 import (
 	"context"
+	"crypto/sha256"
+	"encoding/hex"
 	"errors"
 	"fmt"
 	"net/http"
 	"net/http/httptest"
+	"os"
 	"path/filepath"
 	"strings"
 	"testing"
@@ -133,6 +136,69 @@ func TestDownloadToCacheSelectsUsableAccessMethodAfterFirst(t *testing.T) {
 	}
 }
 
+func TestDownloadToCacheValidatesSHA256BeforePromotion(t *testing.T) {
+	const body = "data"
+	correctSum := sha256.Sum256([]byte(body))
+	incorrectSum := sha256.Sum256([]byte("oops")) // Same length as body.
+
+	for _, test := range []struct {
+		name        string
+		checksum    string
+		wantErr     bool
+		wantContent string
+	}{
+		{name: "matching", checksum: hex.EncodeToString(correctSum[:]), wantContent: body},
+		{name: "mismatching same-size payload", checksum: hex.EncodeToString(incorrectSum[:]), wantErr: true, wantContent: "previous"},
+	} {
+		t.Run(test.name, func(t *testing.T) {
+			download := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+				_, _ = w.Write([]byte(body))
+			}))
+			defer download.Close()
+
+			resolverServer := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+				if r.URL.Path != "/ga4gh/drs/v1/objects/object-1" {
+					http.NotFound(w, r)
+					return
+				}
+				_, _ = fmt.Fprintf(w, `{"id":"object-1","size":4,"checksums":[{"type":"sha256","checksum":%q}],"access_methods":[{"type":"https","access_url":{"url":%q}}]}`, test.checksum, download.URL)
+			}))
+			defer resolverServer.Close()
+
+			r, err := NewAnVILWithClient(resolverServer.URL, resolverServer.Client())
+			if err != nil {
+				t.Fatal(err)
+			}
+			cacheDir := filepath.Join(t.TempDir(), "cache")
+			if err := os.MkdirAll(cacheDir, 0o755); err != nil {
+				t.Fatal(err)
+			}
+			destination := filepath.Join(cacheDir, "object-1")
+			if err := os.WriteFile(destination, []byte("previous"), 0o644); err != nil {
+				t.Fatal(err)
+			}
+
+			err = DownloadToCache(context.Background(), r, "drs://example.org/object-1", destination)
+			if test.wantErr && (err == nil || !strings.Contains(err.Error(), "checksum mismatch")) {
+				t.Fatalf("expected checksum mismatch, got %v", err)
+			}
+			if !test.wantErr && err != nil {
+				t.Fatalf("DownloadToCache returned error: %v", err)
+			}
+			content, readErr := os.ReadFile(destination)
+			if readErr != nil {
+				t.Fatal(readErr)
+			}
+			if string(content) != test.wantContent {
+				t.Fatalf("cached content = %q, want %q", content, test.wantContent)
+			}
+			if temporary, globErr := filepath.Glob(filepath.Join(cacheDir, ".git-drs-download-*")); globErr != nil || len(temporary) != 0 {
+				t.Fatalf("temporary downloads remain after validation: %v (glob error: %v)", temporary, globErr)
+			}
+		})
+	}
+}
+
 func TestAnVILResolverAcceptsCompactDRSURI(t *testing.T) {
 	const compactURI = "drs://drs.anv0:v2_e68887be-c583-375a-a773-48771192c8fa"
 	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {

From be4a0c67ee051ff311dfeed073549aee5e08ddcf Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 28 Jul 2026 13:12:11 -0700
Subject: [PATCH 50/66] Hydrate DRS OIDs through the URI downloader

---
 internal/transfer/download.go      |  5 +++++
 internal/transfer/download_test.go | 32 ++++++++++++++++++++++++++++++
 2 files changed, 37 insertions(+)

diff --git a/internal/transfer/download.go b/internal/transfer/download.go
index 33407a16..9bc95b2e 100644
--- a/internal/transfer/download.go
+++ b/internal/transfer/download.go
@@ -10,6 +10,7 @@ import (
 	"strings"
 
 	"github.com/calypr/git-drs/internal/drsobject"
+	"github.com/calypr/git-drs/internal/lfs"
 	"github.com/calypr/git-drs/internal/lookup"
 	"github.com/calypr/git-drs/internal/remoteruntime"
 	drsapi "github.com/calypr/syfon/apigen/client/drs"
@@ -76,6 +77,10 @@ func DownloadDRSURIToCachePath(ctx context.Context, drsCtx *remoteruntime.GitCon
 }
 
 func DownloadToCachePath(ctx context.Context, drsCtx *remoteruntime.GitContext, oid, cachePath string) error {
+	if lfs.IsDRSURI(oid) {
+		return DownloadDRSURIToCachePath(ctx, drsCtx, oid, cachePath)
+	}
+
 	if err := os.MkdirAll(filepath.Dir(cachePath), 0o755); err != nil {
 		return fmt.Errorf("mkdir for cache path: %w", err)
 	}
diff --git a/internal/transfer/download_test.go b/internal/transfer/download_test.go
index f88a5f8e..52d58755 100644
--- a/internal/transfer/download_test.go
+++ b/internal/transfer/download_test.go
@@ -20,6 +20,38 @@ type downloadRoundTripFunc func(*http.Request) (*http.Response, error)
 
 func (f downloadRoundTripFunc) RoundTrip(r *http.Request) (*http.Response, error) { return f(r) }
 
+func TestDownloadToCachePathDispatchesDRSOIDToURIResolver(t *testing.T) {
+	t.Parallel()
+
+	for _, oid := range []string{"drs://example.test/object-1", "//example.test/object-1"} {
+		oid := oid
+		t.Run(oid, func(t *testing.T) {
+			t.Parallel()
+
+			var requestPath string
+			httpClient := &http.Client{Transport: downloadRoundTripFunc(func(r *http.Request) (*http.Response, error) {
+				requestPath = r.URL.Path
+				return nil, io.EOF
+			})}
+			raw, err := syclient.New("http://example.test", syclient.WithHTTPClient(httpClient))
+			if err != nil {
+				t.Fatalf("syclient.New: %v", err)
+			}
+
+			err = DownloadToCachePath(context.Background(), &remoteruntime.GitContext{Client: raw.(*syclient.Client)}, oid, filepath.Join(t.TempDir(), "object"))
+			if err == nil {
+				t.Fatal("DownloadToCachePath unexpectedly succeeded")
+			}
+			if strings.Contains(requestPath, "/checksum/") {
+				t.Fatalf("DRS OID was sent to checksum lookup: %s", requestPath)
+			}
+			if !strings.Contains(requestPath, "/objects/drs://example.test/object-1") {
+				t.Fatalf("DRS OID was not sent to URI lookup: %s", requestPath)
+			}
+		})
+	}
+}
+
 func TestBulkAccessURLsForObjects(t *testing.T) {
 	accessID := "s3"
 	methods := []drsapi.AccessMethod{{Type: drsapi.AccessMethodTypeS3, AccessId: &accessID}}

From a9c249e8b0409eec7748736b239921bb185472ad Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 28 Jul 2026 19:53:09 -0700
Subject: [PATCH 51/66] Skip DRS URI references during push sync

---
 internal/transfer/push.go      |  8 ++++++++
 internal/transfer/push_test.go | 27 +++++++++++++++++++++++++++
 2 files changed, 35 insertions(+)

diff --git a/internal/transfer/push.go b/internal/transfer/push.go
index 30c96b35..94c5b0fa 100644
--- a/internal/transfer/push.go
+++ b/internal/transfer/push.go
@@ -108,6 +108,14 @@ func (s *batchSyncSession) normalizeFiles(files map[string]lfs.LfsFileInfo) {
 		if oid == "" {
 			continue
 		}
+		// DRS URI pointers identify an existing remote object; they are not
+		// SHA-256 checksums. Leave them to the URI-aware fetch path rather than
+		// sending the authority/object value through checksum lookup,
+		// registration, or upload synchronization.
+		if lfs.IsDRSURI(oid) {
+			s.debug("skipping DRS URI pointer during checksum push synchronization", "oid", oid)
+			continue
+		}
 		if _, exists := s.filesByOID[oid]; exists {
 			continue
 		}
diff --git a/internal/transfer/push_test.go b/internal/transfer/push_test.go
index f64e6899..8a65afd7 100644
--- a/internal/transfer/push_test.go
+++ b/internal/transfer/push_test.go
@@ -39,6 +39,33 @@ func TestBatchSyncSessionNormalizeFilesDeduplicatesByOID(t *testing.T) {
 	}
 }
 
+func TestBatchSyncSessionNormalizeFilesExcludesDRSURIReferences(t *testing.T) {
+	session := &batchSyncSession{}
+	checksum := "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+
+	session.normalizeFiles(map[string]lfs.LfsFileInfo{
+		"data/checksum.dat": {
+			Name: "data/checksum.dat",
+			Oid:  checksum,
+		},
+		"data/parsed-reference.dat": {
+			Name: "data/parsed-reference.dat",
+			Oid:  "//authority.example/object-with-sha256",
+		},
+		"data/canonical-reference.dat": {
+			Name: "data/canonical-reference.dat",
+			Oid:  "drs://authority.example/another-object",
+		},
+	})
+
+	if len(session.oids) != 1 || session.oids[0] != checksum {
+		t.Fatalf("expected only checksum OID in push synchronization, got %+v", session.oids)
+	}
+	if len(session.filesByOID) != 1 {
+		t.Fatalf("expected only checksum file in push synchronization, got %+v", session.filesByOID)
+	}
+}
+
 func TestAddURLObjectRegistersWithoutLocalPayloadUpload(t *testing.T) {
 	t.Chdir(t.TempDir())
 	oid := "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"

From 3018371b7e7a097c4cd004c604f72bdd067379b4 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Tue, 28 Jul 2026 20:30:38 -0700
Subject: [PATCH 52/66] Reject unresolved providers during remote add

---
 cmd/remote/add/unified.go      |  3 +++
 cmd/remote/add/unified_test.go | 22 ++++++++++++++++++++++
 docs/commands.md               |  2 ++
 3 files changed, 27 insertions(+)

diff --git a/cmd/remote/add/unified.go b/cmd/remote/add/unified.go
index b887c24e..f9977a92 100644
--- a/cmd/remote/add/unified.go
+++ b/cmd/remote/add/unified.go
@@ -49,6 +49,9 @@ func runUnified(cmd *cobra.Command, args []string) error {
 	if !validChoice(provider, "auto", "ga4gh", "gen3", "terra", "cgc", "synapse") {
 		return fmt.Errorf("unsupported provider %q", provider)
 	}
+	if provider == "auto" {
+		return fmt.Errorf("cannot determine provider for endpoint %q; specify --provider", endpoint)
+	}
 	if !validAuth(auth) {
 		return fmt.Errorf("unsupported authentication method %q", auth)
 	}
diff --git a/cmd/remote/add/unified_test.go b/cmd/remote/add/unified_test.go
index 3710e0ce..21ba9256 100644
--- a/cmd/remote/add/unified_test.go
+++ b/cmd/remote/add/unified_test.go
@@ -2,6 +2,7 @@ package add
 
 import (
 	"bytes"
+	"os"
 	"testing"
 
 	"github.com/calypr/git-drs/internal/config"
@@ -36,6 +37,7 @@ func TestUnifiedAddDerivesURLNameAndRejectsHTTP(t *testing.T) {
 	if err := runUnified(Cmd, []string{"http://drs.example.org"}); err == nil {
 		t.Fatal("expected HTTP rejection")
 	}
+	providerFlag = "ga4gh"
 	if err := runUnified(Cmd, []string{"https://drs.example.org"}); err != nil {
 		t.Fatal(err)
 	}
@@ -48,6 +50,26 @@ func TestUnifiedAddDerivesURLNameAndRejectsHTTP(t *testing.T) {
 	}
 }
 
+func TestUnifiedAddRejectsURLWithoutProviderBeforeInitializing(t *testing.T) {
+	repo := testutils.SetupTestGitRepo(t)
+	resetUnifiedFlags(t)
+
+	err := runUnified(Cmd, []string{"https://drs.example.org"})
+	if err == nil {
+		t.Fatal("expected provider auto rejection")
+	}
+	if _, statErr := os.Stat(repo + "/.git-drs"); !os.IsNotExist(statErr) {
+		t.Fatalf("remote validation modified repository state: .git-drs stat error = %v", statErr)
+	}
+	cfg, loadErr := config.LoadConfig()
+	if loadErr != nil {
+		t.Fatal(loadErr)
+	}
+	if len(cfg.Remotes) != 0 {
+		t.Fatalf("remote validation persisted configuration: %+v", cfg.Remotes)
+	}
+}
+
 func resetUnifiedFlags(t *testing.T) {
 	old := []string{scopeFlag, authFlag, credentialFlag, providerFlag, storageFlag, checkoutFlag}
 	scopeFlag, authFlag, credentialFlag, providerFlag, storageFlag, checkoutFlag = "", "auto", "", "auto", "", ""
diff --git a/docs/commands.md b/docs/commands.md
index b4b5ccd8..e59a9530 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -63,6 +63,8 @@ are `--scope`, `--auth`, `--provider`, `--storage`, and `--checkout`. Checkout
 mode is `pointers` or `hydrate`.
 
 Provider values are `auto`, `ga4gh`, `gen3`, `terra`, `cgc`, and `synapse`.
+Built-in aliases resolve `auto` to their catalog provider; a raw HTTPS endpoint
+must specify a concrete `--provider` before any repository state is modified.
 Authentication values are `auto`, `none`, `bearer`, `basic`, `google-adc`,
 `provider-helper`, or `provider-helper:<name>`. Presets are
 expanded once and the resolved endpoint, provider, authentication method, and

From 3f294a08df96ef6b021311f6eb6f2a665515f6f8 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 09:16:00 -0700
Subject: [PATCH 53/66] Validate generic Gen3 authentication modes

---
 cmd/remote/add/unified.go              | 12 ++++++++++++
 cmd/remote/add/unified_test.go         | 19 +++++++++++++++++++
 internal/remoteruntime/runtime.go      | 15 ++++++++++-----
 internal/remoteruntime/runtime_test.go | 16 ++++++++++++++++
 4 files changed, 57 insertions(+), 5 deletions(-)

diff --git a/cmd/remote/add/unified.go b/cmd/remote/add/unified.go
index f9977a92..0831b34c 100644
--- a/cmd/remote/add/unified.go
+++ b/cmd/remote/add/unified.go
@@ -55,6 +55,9 @@ func runUnified(cmd *cobra.Command, args []string) error {
 	if !validAuth(auth) {
 		return fmt.Errorf("unsupported authentication method %q", auth)
 	}
+	if err := validateProviderAuth(provider, auth); err != nil {
+		return err
+	}
 	u, err := url.ParseRequestURI(strings.TrimSpace(endpoint))
 	if err != nil || u.Scheme != "https" || u.Host == "" || u.User != nil {
 		return fmt.Errorf("endpoint must be an HTTPS URL without credentials, or a built-in alias")
@@ -131,6 +134,15 @@ func validChoice(v string, choices ...string) bool {
 func validAuth(v string) bool {
 	return validChoice(v, "auto", "none", "bearer", "basic", "google-adc", "provider-helper") || strings.HasPrefix(v, "provider-helper:")
 }
+func validateProviderAuth(provider, auth string) error {
+	if provider != "gen3" {
+		return nil
+	}
+	if validChoice(auth, "bearer", "provider-helper", "provider-helper:gen3-profile") {
+		return nil
+	}
+	return fmt.Errorf("authentication method %q is not supported by the Gen3 remote adapter; use bearer or provider-helper:gen3-profile", auth)
+}
 func validCredentialSource(v string) bool {
 	if v == "stdin" {
 		return true
diff --git a/cmd/remote/add/unified_test.go b/cmd/remote/add/unified_test.go
index 21ba9256..42086c66 100644
--- a/cmd/remote/add/unified_test.go
+++ b/cmd/remote/add/unified_test.go
@@ -70,6 +70,25 @@ func TestUnifiedAddRejectsURLWithoutProviderBeforeInitializing(t *testing.T) {
 	}
 }
 
+func TestUnifiedAddRejectsUnsupportedGen3AuthenticationBeforeInitializing(t *testing.T) {
+	for _, auth := range []string{"auto", "none", "basic", "google-adc", "provider-helper:other"} {
+		t.Run(auth, func(t *testing.T) {
+			repo := testutils.SetupTestGitRepo(t)
+			resetUnifiedFlags(t)
+			providerFlag = "gen3"
+			authFlag = auth
+
+			err := runUnified(Cmd, []string{"https://gen3.example"})
+			if err == nil {
+				t.Fatalf("expected Gen3 authentication method %q to be rejected", auth)
+			}
+			if _, statErr := os.Stat(repo + "/.git-drs"); !os.IsNotExist(statErr) {
+				t.Fatalf("remote validation modified repository state: .git-drs stat error = %v", statErr)
+			}
+		})
+	}
+}
+
 func resetUnifiedFlags(t *testing.T) {
 	old := []string{scopeFlag, authFlag, credentialFlag, providerFlag, storageFlag, checkoutFlag}
 	scopeFlag, authFlag, credentialFlag, providerFlag, storageFlag, checkoutFlag = "", "auto", "", "auto", "", ""
diff --git a/internal/remoteruntime/runtime.go b/internal/remoteruntime/runtime.go
index 4ac6b44e..b0832fc1 100644
--- a/internal/remoteruntime/runtime.go
+++ b/internal/remoteruntime/runtime.go
@@ -73,11 +73,16 @@ func New(cfg *config.Config, remote config.Remote, logger *slog.Logger) (*GitCon
 		case "terra":
 			return terraClient(config.TerraRemote{Endpoint: x.Generic.Endpoint, Auth: x.Generic.Auth, Mode: "read-only"}, logger)
 		case "gen3":
-			return gen3ClientWithCredential(string(remote), x.Generic.Credential, config.Gen3Remote{
-				Endpoint: x.Generic.Endpoint, Organization: x.Generic.GetOrganization(),
-				ProjectID: x.Generic.GetProjectId(), Bucket: x.Generic.GetBucketName(),
-				StoragePrefix: x.Generic.GetStoragePrefix(),
-			}, logger)
+			switch x.Generic.Auth {
+			case "bearer", "provider-helper", "provider-helper:gen3-profile":
+				return gen3ClientWithCredential(string(remote), x.Generic.Credential, config.Gen3Remote{
+					Endpoint: x.Generic.Endpoint, Organization: x.Generic.GetOrganization(),
+					ProjectID: x.Generic.GetProjectId(), Bucket: x.Generic.GetBucketName(),
+					StoragePrefix: x.Generic.GetStoragePrefix(),
+				}, logger)
+			default:
+				return nil, fmt.Errorf("authentication method %q is not supported by the Gen3 remote adapter", x.Generic.Auth)
+			}
 		case "ga4gh", "auto", "cgc", "synapse":
 			return nil, fmt.Errorf("provider %q does not yet have an operational remote adapter", x.Generic.Provider)
 		default:
diff --git a/internal/remoteruntime/runtime_test.go b/internal/remoteruntime/runtime_test.go
index 1dfa18eb..ee19fa25 100644
--- a/internal/remoteruntime/runtime_test.go
+++ b/internal/remoteruntime/runtime_test.go
@@ -204,6 +204,22 @@ func TestNewRejectsProviderWithoutOperationalAdapter(t *testing.T) {
 	}
 }
 
+func TestNewGenericGen3RejectsUnsupportedAuthentication(t *testing.T) {
+	for _, auth := range []string{"auto", "none", "basic", "google-adc", "provider-helper:other"} {
+		t.Run(auth, func(t *testing.T) {
+			cfg := &config.Config{Remotes: map[config.Remote]config.RemoteSelect{
+				"gen3": {Generic: &config.GenericRemote{
+					Endpoint: "https://gen3.example", Provider: "gen3", Auth: auth,
+					Scope: "program/project", Credential: "profile:stored",
+				}},
+			}}
+			if _, err := New(cfg, "gen3", drslog.GetLogger()); err == nil {
+				t.Fatalf("expected Gen3 authentication method %q to fail explicitly", auth)
+			}
+		})
+	}
+}
+
 func TestLocalClientResolvesBucketScopeMappings(t *testing.T) {
 	setupTestRepo(t)
 

From 191c38e03017519c02c84097c244d9250387291e Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 09:23:55 -0700
Subject: [PATCH 54/66] Track add-ref destinations from repository root

---
 internal/gitrepo/gitattributes_tracking.go    | 26 +++++++++-----
 .../gitrepo/gitattributes_tracking_test.go    | 35 +++++++++++++++++++
 2 files changed, 52 insertions(+), 9 deletions(-)

diff --git a/internal/gitrepo/gitattributes_tracking.go b/internal/gitrepo/gitattributes_tracking.go
index 9180a42c..f14c7aed 100644
--- a/internal/gitrepo/gitattributes_tracking.go
+++ b/internal/gitrepo/gitattributes_tracking.go
@@ -12,10 +12,14 @@ import (
 )
 
 func TrackPatterns(_ context.Context, patterns []string, verbose bool, dryRun bool) (string, error) {
+	return trackPatternsAtPath(patterns, verbose, dryRun, ".gitattributes")
+}
+
+func trackPatternsAtPath(patterns []string, verbose bool, dryRun bool, attributesPath string) (string, error) {
 	changedAttribLines := make(map[string]string, len(patterns))
 	var output strings.Builder
 
-	attribContents, err := readLocalGitAttributes()
+	attribContents, err := readGitAttributes(attributesPath)
 	if err != nil {
 		return "", fmt.Errorf("git drs track failed: %w", err)
 	}
@@ -43,7 +47,7 @@ func TrackPatterns(_ context.Context, patterns []string, verbose bool, dryRun bo
 	}
 
 	if !dryRun {
-		if err := writeMergedGitAttributes(attribContents, changedAttribLines, false); err != nil {
+		if err := writeMergedGitAttributes(attributesPath, attribContents, changedAttribLines, false); err != nil {
 			return "", fmt.Errorf("git drs track failed: %w", err)
 		}
 	}
@@ -143,16 +147,16 @@ func UntrackPatterns(_ context.Context, patterns []string, _ bool, dryRun bool)
 }
 
 func TrackReadOnly(ctx context.Context, path string) (bool, error) {
-	if _, err := TrackPatterns(ctx, []string{path}, false, false); err != nil {
-		return false, fmt.Errorf("git lfs track failed: %w", err)
-	}
-
 	repoRoot, err := GitTopLevel()
 	if err != nil {
 		return false, err
 	}
 
 	attrPath := filepath.Join(repoRoot, ".gitattributes")
+	if _, err := trackPatternsAtPath([]string{path}, false, false, attrPath); err != nil {
+		return false, fmt.Errorf("git lfs track failed: %w", err)
+	}
+
 	changed, err := UpsertDRSRouteLines(attrPath, "ro", []string{path})
 	if err != nil {
 		return false, err
@@ -162,7 +166,11 @@ func TrackReadOnly(ctx context.Context, path string) (bool, error) {
 }
 
 func readLocalGitAttributes() ([]byte, error) {
-	data, err := os.ReadFile(".gitattributes")
+	return readGitAttributes(".gitattributes")
+}
+
+func readGitAttributes(attributesPath string) ([]byte, error) {
+	data, err := os.ReadFile(attributesPath)
 	if err != nil {
 		if os.IsNotExist(err) {
 			return nil, nil
@@ -189,7 +197,7 @@ func parseKnownLFSPatterns(content []byte) map[string]string {
 	return known
 }
 
-func writeMergedGitAttributes(existing []byte, changed map[string]string, dryRun bool) error {
+func writeMergedGitAttributes(attributesPath string, existing []byte, changed map[string]string, dryRun bool) error {
 	if dryRun {
 		return nil
 	}
@@ -223,7 +231,7 @@ func writeMergedGitAttributes(existing []byte, changed map[string]string, dryRun
 	if content != "" {
 		content += "\n"
 	}
-	if err := os.WriteFile(".gitattributes", []byte(content), 0o644); err != nil {
+	if err := os.WriteFile(attributesPath, []byte(content), 0o644); err != nil {
 		return fmt.Errorf("write .gitattributes: %w", err)
 	}
 	return nil
diff --git a/internal/gitrepo/gitattributes_tracking_test.go b/internal/gitrepo/gitattributes_tracking_test.go
index cc9ca3df..82d237eb 100644
--- a/internal/gitrepo/gitattributes_tracking_test.go
+++ b/internal/gitrepo/gitattributes_tracking_test.go
@@ -3,6 +3,7 @@ package gitrepo
 import (
 	"context"
 	"os"
+	"os/exec"
 	"path/filepath"
 	"strings"
 	"testing"
@@ -51,6 +52,40 @@ func TestTrackPatternsDryRunDoesNotWrite(t *testing.T) {
 	}
 }
 
+func TestTrackReadOnlyWritesRootAttributesFromSubdirectory(t *testing.T) {
+	repo := t.TempDir()
+	cmd := exec.Command("git", "init")
+	cmd.Dir = repo
+	if output, err := cmd.CombinedOutput(); err != nil {
+		t.Fatalf("git init: %v: %s", err, output)
+	}
+	subdir := filepath.Join(repo, "nested")
+	if err := os.Mkdir(subdir, 0o755); err != nil {
+		t.Fatal(err)
+	}
+	oldwd := mustChdirTrackTest(t, subdir)
+	t.Cleanup(func() { _ = os.Chdir(oldwd) })
+
+	const path = "data/pointer"
+	if _, err := TrackReadOnly(context.Background(), path); err != nil {
+		t.Fatalf("TrackReadOnly: %v", err)
+	}
+	if _, err := os.Stat(filepath.Join(subdir, ".gitattributes")); !os.IsNotExist(err) {
+		t.Fatalf("expected no nested .gitattributes, stat err=%v", err)
+	}
+	contents, err := os.ReadFile(filepath.Join(repo, ".gitattributes"))
+	if err != nil {
+		t.Fatalf("read root .gitattributes: %v", err)
+	}
+	got := string(contents)
+	if !strings.Contains(got, "data/pointer filter=drs diff=drs merge=drs -text") {
+		t.Fatalf("root .gitattributes does not track pointer: %q", got)
+	}
+	if !strings.Contains(got, "data/pointer drs=ro") {
+		t.Fatalf("root .gitattributes does not mark pointer read-only: %q", got)
+	}
+}
+
 func TestListTrackedPatternsReadsGitattributes(t *testing.T) {
 	repo := t.TempDir()
 	oldwd := mustChdirTrackTest(t, repo)

From dca5d1172e3d5088b715766ae6d955464ac907a4 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 09:46:39 -0700
Subject: [PATCH 55/66] Fix read-only gitattributes marker

---
 internal/gitrepo/gitattributes_routes.go      |  9 ++++++---
 internal/gitrepo/gitattributes_routes_test.go | 10 +++++-----
 2 files changed, 11 insertions(+), 8 deletions(-)

diff --git a/internal/gitrepo/gitattributes_routes.go b/internal/gitrepo/gitattributes_routes.go
index 9f954138..d7aa2d17 100644
--- a/internal/gitrepo/gitattributes_routes.go
+++ b/internal/gitrepo/gitattributes_routes.go
@@ -53,7 +53,7 @@ func UpsertDRSRouteLines(gitattributesPath string, mode string, patterns []strin
 	}
 
 	for _, pat := range order {
-		newLine := fmt.Sprintf("%s drs.route=%s", pat, mode)
+		newLine := fmt.Sprintf("%s drs=%s", pat, mode)
 		if idx, ok := seen[pat]; ok {
 			if strings.TrimSpace(lines[idx]) != newLine {
 				lines[idx] = newLine
@@ -96,8 +96,11 @@ func parseRouteLine(line string) (pattern string, mode string, ok bool) {
 
 	pat := parts[0]
 	for _, tok := range parts[1:] {
-		if strings.HasPrefix(tok, "drs.route=") {
-			val := strings.TrimPrefix(tok, "drs.route=")
+		// Accept the former drs.route spelling so existing rules are updated to
+		// the canonical drs attribute rather than duplicated.
+		if strings.HasPrefix(tok, "drs=") || strings.HasPrefix(tok, "drs.route=") {
+			val := strings.TrimPrefix(tok, "drs=")
+			val = strings.TrimPrefix(val, "drs.route=")
 			val = strings.ToLower(strings.TrimSpace(val))
 			if val == "ro" || val == "rw" {
 				return pat, val, true
diff --git a/internal/gitrepo/gitattributes_routes_test.go b/internal/gitrepo/gitattributes_routes_test.go
index c855c03a..d58717ad 100644
--- a/internal/gitrepo/gitattributes_routes_test.go
+++ b/internal/gitrepo/gitattributes_routes_test.go
@@ -20,7 +20,7 @@ func TestUpsertDRSRouteLinesAddNew(t *testing.T) {
 
 	b, _ := os.ReadFile(p)
 	got := string(b)
-	want := "scratch/** drs.route=rw\n"
+	want := "scratch/** drs=rw\n"
 	if got != want {
 		t.Fatalf("got:\n%q\nwant:\n%q", got, want)
 	}
@@ -30,7 +30,7 @@ func TestUpsertDRSRouteLinesUpdateExisting(t *testing.T) {
 	dir := t.TempDir()
 	p := filepath.Join(dir, ".gitattributes")
 
-	if err := os.WriteFile(p, []byte("# hi\nscratch/** drs.route=ro\n"), 0o644); err != nil {
+	if err := os.WriteFile(p, []byte("# hi\nscratch/** drs=ro\n"), 0o644); err != nil {
 		t.Fatal(err)
 	}
 
@@ -44,7 +44,7 @@ func TestUpsertDRSRouteLinesUpdateExisting(t *testing.T) {
 
 	b, _ := os.ReadFile(p)
 	got := string(b)
-	want := "# hi\nscratch/** drs.route=rw\n"
+	want := "# hi\nscratch/** drs=rw\n"
 	if got != want {
 		t.Fatalf("got:\n%q\nwant:\n%q", got, want)
 	}
@@ -54,7 +54,7 @@ func TestUpsertDRSRouteLinesIdempotent(t *testing.T) {
 	dir := t.TempDir()
 	p := filepath.Join(dir, ".gitattributes")
 
-	if err := os.WriteFile(p, []byte("scratch/** drs.route=rw\n"), 0o644); err != nil {
+	if err := os.WriteFile(p, []byte("scratch/** drs=rw\n"), 0o644); err != nil {
 		t.Fatal(err)
 	}
 
@@ -68,7 +68,7 @@ func TestUpsertDRSRouteLinesIdempotent(t *testing.T) {
 }
 
 func TestParseRouteLine(t *testing.T) {
-	p, m, ok := parseRouteLine("scratch/** drs.route=rw")
+	p, m, ok := parseRouteLine("scratch/** drs=rw")
 	if !ok || p != "scratch/**" || m != "rw" {
 		t.Fatalf("unexpected: ok=%v p=%q m=%q", ok, p, m)
 	}

From 7252e01e4ffd800dfda04a030da1e51358a83205 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 10:06:22 -0700
Subject: [PATCH 56/66] Persist local DRS metadata for manifest references

---
 cmd/addref/add-ref.go      | 16 ++++++----
 cmd/addref/add-ref_test.go | 60 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 71 insertions(+), 5 deletions(-)

diff --git a/cmd/addref/add-ref.go b/cmd/addref/add-ref.go
index 5273f4dd..868ef673 100644
--- a/cmd/addref/add-ref.go
+++ b/cmd/addref/add-ref.go
@@ -99,17 +99,13 @@ var Cmd = &cobra.Command{
 			os.MkdirAll(dirPath, os.ModePerm)
 		}
 
-		oid := addRefLocalOID(drsUri, remoteName, &obj)
 		if err := createAddRefPointer(&obj, dstPath, drsUri); err != nil {
 			return err
 		}
 		if _, err := gitrepo.TrackReadOnly(cmd.Context(), args[1]); err != nil {
 			return fmt.Errorf("track add-ref destination %s: %w", args[1], err)
 		}
-		if obj.SelfUri == "" {
-			obj.SelfUri = drsUri
-		}
-		if err := drsobject.WriteObject(gitrepo.DRSObjectsPath, &obj, oid); err != nil {
+		if err := persistAddRefObject(&obj, drsUri, remoteName); err != nil {
 			return fmt.Errorf("write source DRS metadata: %w", err)
 		}
 		return nil
@@ -282,11 +278,21 @@ func runManifest(cmd *cobra.Command, filename string) error {
 		if _, err := gitrepo.TrackReadOnly(cmd.Context(), e.path); err != nil {
 			return fmt.Errorf("track add-ref destination %s: %w", e.path, err)
 		}
+		if err := persistAddRefObject(&e.object, e.uri, remoteName); err != nil {
+			return fmt.Errorf("write source DRS metadata for %s: %w", e.path, err)
+		}
 	}
 	fmt.Fprintf(cmd.OutOrStdout(), "%d reference(s) %s\n", len(entries), map[bool]string{true: "validated", false: "added"}[dryRun])
 	return nil
 }
 
+func persistAddRefObject(obj *drsapi.DrsObject, sourceURI string, remoteName config.Remote) error {
+	if obj.SelfUri == "" {
+		obj.SelfUri = sourceURI
+	}
+	return drsobject.WriteObject(gitrepo.DRSObjectsPath, obj, addRefLocalOID(sourceURI, remoteName, obj))
+}
+
 // createAddRefPointer keeps the source authority in Git. The metadata written
 // under .git/drs is only a local cache, so a checksum-only pointer would leave
 // another clone unable to route hydration back to the authority that resolved
diff --git a/cmd/addref/add-ref_test.go b/cmd/addref/add-ref_test.go
index 8996ea23..93022405 100644
--- a/cmd/addref/add-ref_test.go
+++ b/cmd/addref/add-ref_test.go
@@ -1,6 +1,7 @@
 package addref
 
 import (
+	"bytes"
 	"context"
 	"net/http"
 	"net/http/httptest"
@@ -12,10 +13,12 @@ import (
 
 	"github.com/calypr/git-drs/internal/config"
 	"github.com/calypr/git-drs/internal/drslog"
+	"github.com/calypr/git-drs/internal/drsobject"
 	"github.com/calypr/git-drs/internal/gitrepo"
 	"github.com/calypr/git-drs/internal/lfs"
 	"github.com/calypr/git-drs/internal/remoteruntime"
 	drsapi "github.com/calypr/syfon/apigen/client/drs"
+	"github.com/spf13/cobra"
 )
 
 func TestCreateLfsPointer(t *testing.T) {
@@ -108,6 +111,63 @@ func TestAddRefLocalOIDUsesDerivedSourceWhenSHA256Missing(t *testing.T) {
 	}
 }
 
+func TestRunManifestPersistsResolvedObjectMetadata(t *testing.T) {
+	const checksum = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+	const sourceURI = "drs://source.example.org/object-1"
+	var resolvedEndpoint, resolvedObjectID string
+	oldGetter := newSourceDRSGetter
+	newSourceDRSGetter = func(endpoint string) (drsObjectGetter, error) {
+		resolvedEndpoint = endpoint
+		return fakeDRSObjectGetter{obj: drsapi.DrsObject{
+			Id:        "object-1",
+			Size:      42,
+			Checksums: []drsapi.Checksum{{Type: "sha256", Checksum: checksum}},
+		}, gotObjectID: &resolvedObjectID}, nil
+	}
+	t.Cleanup(func() { newSourceDRSGetter = oldGetter })
+
+	repo := t.TempDir()
+	runGitCmd(t, repo, "init")
+	runGitCmd(t, repo, "config", "drs.default-remote", "source")
+	runGitCmd(t, repo, "config", "drs.remote.source.type", "local")
+	runGitCmd(t, repo, "config", "drs.remote.source.endpoint", "https://primary.example.org")
+	manifest := filepath.Join(repo, "references.tsv")
+	if err := os.WriteFile(manifest, []byte("drs_uri\tpath\n"+sourceURI+"\tdata/reference\n"), 0o600); err != nil {
+		t.Fatal(err)
+	}
+
+	oldWD, err := os.Getwd()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := os.Chdir(repo); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = os.Chdir(oldWD) })
+	oldRemote, oldDryRun := remote, dryRun
+	remote, dryRun = "", false
+	t.Cleanup(func() { remote, dryRun = oldRemote, oldDryRun })
+
+	cmd := &cobra.Command{}
+	cmd.SetOut(&bytes.Buffer{})
+	if err := runManifest(cmd, manifest); err != nil {
+		t.Fatalf("runManifest: %v", err)
+	}
+	obj, err := drsobject.ReadObject(gitrepo.DRSObjectsPath, checksum)
+	if err != nil {
+		t.Fatalf("read persisted manifest object: %v", err)
+	}
+	if obj.Id != "object-1" || obj.SelfUri != sourceURI {
+		t.Fatalf("unexpected persisted object: %+v", obj)
+	}
+	if resolvedObjectID != "object-1" {
+		t.Fatalf("unexpected resolved object ID: %q", resolvedObjectID)
+	}
+	if resolvedEndpoint != "https://source.example.org" {
+		t.Fatalf("unexpected resolver endpoint: %q", resolvedEndpoint)
+	}
+}
+
 func TestCreateDRSPointerPreservesSourceURI(t *testing.T) {
 	obj := &drsapi.DrsObject{Size: 42}
 	path := filepath.Join(t.TempDir(), "pointer")

From 5d3f2c9690a5964aa62b56d4d23be605f1783d17 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 10:22:21 -0700
Subject: [PATCH 57/66] Update documentation for unified remote add.

---
 README.md                                |  6 ++++--
 docs/anvil-terra-poc-presentation.md     |  4 +---
 docs/anvil-terra-poc.md                  | 11 +++++++++-
 docs/anvil.md                            |  7 ++++++-
 docs/bucket-mapping.md                   |  3 ++-
 docs/developer-guide.md                  |  4 +++-
 docs/e2e-modes-and-local-setup.md        |  9 ++++++--
 docs/installation.md                     |  2 +-
 docs/terra-anvil-drs-download-gap-adr.md | 24 ++++++++++++++--------
 docs/troubleshooting.md                  | 26 ++++++++++++++++--------
 10 files changed, 68 insertions(+), 28 deletions(-)

diff --git a/README.md b/README.md
index 3a51ed6c..e51cfc20 100644
--- a/README.md
+++ b/README.md
@@ -65,12 +65,14 @@ The cleaned CLI intentionally removed legacy commands:
   - `git drs download`
 - `git drs pull` is hydration-only
 - `git drs ls-files` is the local file inventory command
-- `git drs remote add gen3` takes scope as `organization/project`
+- the unified `git drs remote add` takes scope through
+  `--scope <organization/project>`
 
 Example:
 
 ```bash
-git drs remote add gen3 production HTAN_INT/BForePC --cred /path/to/credentials.json
+git drs remote add production calypr --scope HTAN_INT/BForePC \
+  --credential file:/path/to/credentials.json
 ```
 
 Current command split:
diff --git a/docs/anvil-terra-poc-presentation.md b/docs/anvil-terra-poc-presentation.md
index 915099e4..f270938f 100644
--- a/docs/anvil-terra-poc-presentation.md
+++ b/docs/anvil-terra-poc-presentation.md
@@ -162,9 +162,7 @@ git drs pull -I "data/*.cram"
 
 ```bash
 git init
-git drs remote add terra anvil \
-  --drs-endpoint https://data.terra.bio \
-  --auth google-adc --mode read-only
+git drs remote add anvil terra --checkout hydrate
 
 # Download the TSV from AnVIL Data Explorer first.
 manifest=/tmp/anvil-manifest-38dc7537.tsv
diff --git a/docs/anvil-terra-poc.md b/docs/anvil-terra-poc.md
index 55fbfcb8..d0e83523 100644
--- a/docs/anvil-terra-poc.md
+++ b/docs/anvil-terra-poc.md
@@ -91,7 +91,12 @@ Each clone configures its remote in the repository-local Git config:
 git drs remote add anvil terra --checkout hydrate
 ```
 
-Repository-local Git config is authoritative. It is not tracked, and credential material remains in the provider credential store.
+Here `anvil` is the local remote name and `terra` is the built-in endpoint
+alias. The alias supplies the Terra provider, production DRS endpoint,
+Google ADC authentication, and read-only behavior; the unified command does
+not use the legacy `terra` subcommand, `--drs-endpoint`, or `--mode` flags.
+Repository-local Git config is authoritative. It is not tracked, and
+credential material remains in the provider credential store.
 
 ### First user: add and publish references
 
@@ -379,6 +384,10 @@ Initial schema:
 git drs remote add anvil terra --checkout hydrate
 ```
 
+This is the unified `[name] <endpoint-or-alias>` form. Do not reverse the
+arguments: `git drs remote add terra anvil` is the deprecated
+provider-specific command shape.
+
 Configuration rules:
 
 - Git config is the only remote configuration representation;
diff --git a/docs/anvil.md b/docs/anvil.md
index 6795e8ce..836f39ff 100644
--- a/docs/anvil.md
+++ b/docs/anvil.md
@@ -25,7 +25,12 @@ Configure the remote in repository-local Git config:
 git drs remote add anvil terra --checkout hydrate
 ```
 
-The command stores only public remote metadata in `.git/config`. Google ADC remains local user state. Each clone must run the command because `.git/config` is not tracked.
+`anvil` is the chosen local name and `terra` is the built-in endpoint alias.
+The alias selects the Terra provider, production endpoint, Google ADC, and
+read-only behavior, so no provider subcommand, `--drs-endpoint`, or `--mode`
+flag is needed. The command stores only public remote metadata in `.git/config`.
+Google ADC remains local user state. Each clone must run the command because
+`.git/config` is not tracked.
 
 ## Publish one reference
 
diff --git a/docs/bucket-mapping.md b/docs/bucket-mapping.md
index ef68dbe1..e4a42ab4 100644
--- a/docs/bucket-mapping.md
+++ b/docs/bucket-mapping.md
@@ -198,7 +198,8 @@ They only need:
 Then they can run:
 
 ```bash
-git drs remote add gen3 production HTAN_INT/BForePC --cred ~/.gen3/credentials.json
+git drs remote add production calypr --scope HTAN_INT/BForePC \
+  --credential file:~/.gen3/credentials.json
 ```
 
 That remote setup resolves the bucket mapping from the server-side scope configuration.
diff --git a/docs/developer-guide.md b/docs/developer-guide.md
index facce1a7..bf65b133 100644
--- a/docs/developer-guide.md
+++ b/docs/developer-guide.md
@@ -67,7 +67,9 @@ The pre-commit cache is non-authoritative and safe to rebuild. The local DRS met
 
 ### Setup path
 
-`git drs remote add gen3 ...` or `git drs remote add local ...` is the standard entrypoint for connecting a repository.
+The provider-neutral `git drs remote add [name] <endpoint-or-alias> ...` is the
+standard entrypoint for connecting a repository. Provider selection, scope,
+authentication, and credential sources are flags rather than subcommands.
 
 That path:
 
diff --git a/docs/e2e-modes-and-local-setup.md b/docs/e2e-modes-and-local-setup.md
index 36870659..593f04e5 100644
--- a/docs/e2e-modes-and-local-setup.md
+++ b/docs/e2e-modes-and-local-setup.md
@@ -81,7 +81,11 @@ TEST_STRICT_CLEANUP=true
   - HTTP basic auth via:
     - `TEST_LOCAL_USERNAME` + `TEST_LOCAL_PASSWORD`, or
     - `TEST_ADMIN_AUTH_HEADER="Authorization: Basic <base64(user:pass)>"`
-- `git drs remote add local ... --username ... --password ...` stores local basic auth in repo config for credential-helper flows.
+- The local-only harness still exercises the hidden, deprecated
+  `git drs remote add local ...` compatibility path because the unified command
+  intentionally accepts HTTPS endpoints only. `--username` and `--password`
+  in this test path store local basic auth for credential-helper flows; they
+  are not the public CLI recommended for new scripts.
 
 ## How wrapper scripts map to the main suites
 
@@ -226,7 +230,8 @@ Cause:
 Check:
 
 - `TEST_SERVER_MODE=local`
-- remote configured with `git drs remote add local ...`
+- local test remote configured through the deprecated
+  `git drs remote add local ...` compatibility path described above
 - local auth creds provided if server requires basic auth.
 
 ### `401 Unauthorized` on `/data/upload/...` in local mode
diff --git a/docs/installation.md b/docs/installation.md
index 582ce425..7941fa7d 100644
--- a/docs/installation.md
+++ b/docs/installation.md
@@ -84,7 +84,7 @@ Then move or copy the built binary somewhere on your `PATH`.
 Installing the binary does not configure a repository. Repository-local setup now normally happens when you run:
 
 ```bash
-git drs remote add gen3 ...
+git drs remote add [name] <endpoint-or-alias> [flags]
 ```
 
 ## Read Next
diff --git a/docs/terra-anvil-drs-download-gap-adr.md b/docs/terra-anvil-drs-download-gap-adr.md
index 55c84db7..737c4362 100644
--- a/docs/terra-anvil-drs-download-gap-adr.md
+++ b/docs/terra-anvil-drs-download-gap-adr.md
@@ -57,7 +57,14 @@ However, these pieces do not yet compose into a complete Terra/AnVIL workflow.
 
 ## Decision
 
-Add first-class Terra/AnVIL DRS support as an incremental extension of the existing remote and reference workflows. The primary decision is to introduce `git drs remote add terra ...` so authentication and provider behavior are known at remote configuration time. Once a pointer or reference is associated with a Terra remote, `git-drs` can use a Terra-aware resolver to translate the DRS URI into downloadable access URLs. The main unresolved design decision is how to represent DRS URL identity in pointer files while preserving the existing SHA256-oriented cache and compatibility assumptions.
+Add first-class Terra/AnVIL DRS support as an incremental extension of the
+existing remote and reference workflows. The implemented CLI uses the unified
+`git drs remote add [name] terra ...` form so authentication and provider
+behavior are known at remote configuration time. Once a pointer or reference
+is associated with a Terra remote, `git-drs` can use a Terra-aware resolver to
+translate the DRS URI into downloadable access URLs. The main unresolved
+design decision is how to represent DRS URL identity in pointer files while
+preserving the existing SHA256-oriented cache and compatibility assumptions.
 
 ## Goals
 
@@ -106,12 +113,12 @@ Current remote configuration is centered on Gen3/Syfon remotes with an `organiza
 Example target CLI:
 
 ```bash
-git drs remote add terra anvil \
-  --drs-endpoint https://data.terra.bio \
-  --auth google-adc \
-  --mode read-only
+git drs remote add anvil terra --checkout hydrate
 ```
 
+The `terra` preset pins the production endpoint, `google-adc` authentication,
+and read-only provider behavior.
+
 ### Gap 2: Terra references need a remote-aware `add-ref` path
 
 Similar reference-building behavior already exists in `add-url`, and `add-ref` already has the right conceptual role for existing DRS objects. The missing piece is a Terra-aware reference flow where the command knows which remote type owns the reference and can call the matching resolver.
@@ -263,7 +270,7 @@ Gregor/AnVIL repositories reference existing controlled-access data. They should
 Target behavior:
 
 ```bash
-git drs remote add terra anvil ... --mode read-only
+git drs remote add anvil terra --checkout hydrate
 ```
 
 In read-only mode:
@@ -290,7 +297,7 @@ Add documentation covering:
 
 ### Phase 1: Terra remote and resolver
 
-- Add `git drs remote add terra ...`.
+- Add Terra support to the unified `git drs remote add [name] terra ...` path.
 - Wire Terra auth/provider configuration at remote setup time.
 - Add a Terra-aware resolver used by reference creation and hydration.
 - Add provider-specific diagnostics for authorization failures.
@@ -329,7 +336,8 @@ Add documentation covering:
 
 ## Open questions
 
-- Should the canonical command be `git drs remote add terra` or a generic `git drs remote add ga4gh` with Terra-specific auth/resolution options?
+- The canonical command is the unified `git drs remote add [name] terra`
+  preset form; the earlier provider-subcommand alternatives are superseded.
 - Which AnVIL/Terra endpoint should be treated as canonical for Gregor DRS discovery?
 - Should Martha/Terra resolution be implemented directly or invoked through Terra Notebook Utils behavior?
 - What should the default policy be for records that lack checksums?
diff --git a/docs/troubleshooting.md b/docs/troubleshooting.md
index 63e30573..f951d23b 100644
--- a/docs/troubleshooting.md
+++ b/docs/troubleshooting.md
@@ -72,7 +72,7 @@ Those changes persist in the clone. They are not something you redo per session.
 
 Examples:
 
-- `git drs remote add gen3 ...`
+- `git drs remote add [name] <endpoint-or-alias> ...`
 - `git drs remote remove ...`
 - `git drs init`
 - `git drs track`
@@ -292,14 +292,18 @@ If needed, inspect the detailed logs:
 ls -la .git/drs/
 ```
 
-### `git drs remote add gen3` fails on bucket mapping
+### `git drs remote add` fails on bucket mapping
 
 Current shape:
 
 ```bash
-git drs remote add gen3 [remote-name] <organization/project> [--cred <file> | --token <token>]
+git drs remote add [remote-name] calypr --scope <organization/project> \
+  --credential <source>
 ```
 
+Credential sources use an explicit scheme such as `file:/path/to/key.json`,
+`env:GEN3_TOKEN`, or `profile:production`; inline secrets are not accepted.
+
 If this fails, the likely cause is missing bucket mapping for that scope.
 
 That mapping is usually steward/admin setup, not something the end user invents ad hoc.
@@ -309,7 +313,8 @@ That mapping is usually steward/admin setup, not something the end user invents
 Refresh by re-adding the remote with a new credential file or token:
 
 ```bash
-git drs remote add gen3 production HTAN_INT/BForePC --cred /path/to/new-credentials.json
+git drs remote add production calypr --scope HTAN_INT/BForePC \
+  --credential file:/path/to/new-credentials.json
 ```
 
 You do not need to run `git drs init` again.
@@ -317,14 +322,16 @@ You do not need to run `git drs init` again.
 What `git-drs` does automatically:
 
 - if the stored access token is expired but the stored API key is still valid, `git-drs` will attempt to refresh the access token
-- if the API key itself is expired, revoked, or replaced, you need to re-run `git drs remote add gen3 ...`
+- if the API key itself is expired, revoked, or replaced, re-run the unified
+  `git drs remote add ... --credential <source>` command
 
 How to think about recovery:
 
 - token expired, key still valid:
   - often automatic
 - key expired or replaced:
-  - rerun `git drs remote add gen3 ... --cred ...` or `--token ...`
+  - rerun `git drs remote add ... --credential file:<path>` or use an
+    environment credential source such as `--credential env:GEN3_TOKEN`
 
 How to check what is in use:
 
@@ -336,7 +343,9 @@ And for the underlying Gen3 profile data:
 
 - inspect `~/.gen3/gen3_client_config.ini`
 
-If you want the least surprising fix, just re-run `git drs remote add gen3 ...` with the current credential file. That updates the stored profile and repo token plumbing in one step.
+If you want the least surprising fix, re-run the unified `git drs remote add`
+command with the current `--credential file:<path>`. That updates the stored
+profile and repo token plumbing in one step.
 
 ### `git drs push` fails with upload or register errors
 
@@ -413,7 +422,8 @@ git drs pull -I "*.bam"
    If you want Git DRS to always download and hydrate all file payloads automatically during checkouts (reverting to non-skip behavior), you can:
    - Configure it during remote setup:
      ```bash
-     git drs remote add gen3 public HTAN_INT/BForePC --no-skip-smudge
+     git drs remote add public calypr --scope HTAN_INT/BForePC \
+       --credential file:~/.gen3/credentials.json --checkout hydrate
      ```
    - Or configure it directly in Git settings:
      ```bash

From 427288bff7c2785b8bfaebc7f9549b8b990fc71d Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 11:01:19 -0700
Subject: [PATCH 58/66] Fix AnVIL HTTPS access selection

---
 internal/resolver/resolver.go      | 22 ++++++++++++++++++++--
 internal/resolver/resolver_test.go | 28 +++++++++++++++++++++++++++-
 2 files changed, 47 insertions(+), 3 deletions(-)

diff --git a/internal/resolver/resolver.go b/internal/resolver/resolver.go
index 2cea6340..928217c2 100644
--- a/internal/resolver/resolver.go
+++ b/internal/resolver/resolver.go
@@ -41,21 +41,34 @@ func DownloadToCache(ctx context.Context, r Resolver, drsURI, destination string
 	}
 	var access *ResolvedAccess
 	for _, method := range obj.AccessMethods {
+		// AnVIL objects commonly advertise a Google Storage (gs://) method
+		// before their HTTPS method. The downloader uses net/http, so selecting
+		// the first non-empty URL can otherwise fail with an opaque transport
+		// error instead of trying the usable signed HTTPS URL.
+		methodType := strings.ToLower(strings.TrimSpace(method.Type))
+		if methodType != "http" && methodType != "https" {
+			continue
+		}
 		switch {
 		case method.AccessURL != nil && strings.TrimSpace(method.AccessURL.URL) != "":
-			access = method.AccessURL
+			if isHTTPAccessURL(method.AccessURL.URL) {
+				access = method.AccessURL
+			}
 		case strings.TrimSpace(method.AccessID) != "":
 			access, err = r.GetAccess(ctx, drsURI, method.AccessID)
 			if err != nil {
 				return err
 			}
+			if !isHTTPAccessURL(access.URL) {
+				access = nil
+			}
 		}
 		if access != nil {
 			break
 		}
 	}
 	if access == nil {
-		return fmt.Errorf("AnVIL DRS object has no supported access method")
+		return fmt.Errorf("AnVIL DRS object has no supported HTTP(S) access method")
 	}
 	if err := os.MkdirAll(filepath.Dir(destination), 0o755); err != nil {
 		return err
@@ -130,6 +143,11 @@ func DownloadToCache(ctx context.Context, r Resolver, drsURI, destination string
 	return os.Rename(tmpName, destination)
 }
 
+func isHTTPAccessURL(raw string) bool {
+	u, err := url.Parse(strings.TrimSpace(raw))
+	return err == nil && u.Host != "" && (u.Scheme == "http" || u.Scheme == "https") && u.User == nil
+}
+
 type AccessMethod struct {
 	Type      string          `json:"type"`
 	AccessID  string          `json:"access_id,omitempty"`
diff --git a/internal/resolver/resolver_test.go b/internal/resolver/resolver_test.go
index 42585b13..ab0c6561 100644
--- a/internal/resolver/resolver_test.go
+++ b/internal/resolver/resolver_test.go
@@ -117,7 +117,7 @@ func TestDownloadToCacheSelectsUsableAccessMethodAfterFirst(t *testing.T) {
 	resolverServer := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		switch r.URL.Path {
 		case "/ga4gh/drs/v1/objects/object-1":
-			_, _ = w.Write([]byte(`{"id":"object-1","size":4,"access_methods":[{"type":"ftp"},{"type":"https","access_id":"a2"}]}`))
+			_, _ = w.Write([]byte(`{"id":"object-1","size":4,"access_methods":[{"type":"gs","access_url":{"url":"gs://anvil-bucket/object-1"}},{"type":"https","access_id":"a2"}]}`))
 		case "/ga4gh/drs/v1/objects/object-1/access/a2":
 			_, _ = fmt.Fprintf(w, `{"url":%q}`, download.URL)
 		default:
@@ -136,6 +136,32 @@ func TestDownloadToCacheSelectsUsableAccessMethodAfterFirst(t *testing.T) {
 	}
 }
 
+func TestDownloadToCacheRejectsNonHTTPAccessURLFromHTTPSMethod(t *testing.T) {
+	r := &staticResolver{object: &ResolvedObject{
+		Size: 4,
+		AccessMethods: []AccessMethod{{
+			Type:      "https",
+			AccessURL: &ResolvedAccess{URL: "gs://anvil-bucket/object-1"},
+		}},
+	}}
+	err := DownloadToCache(context.Background(), r, "drs://example.org/object-1", filepath.Join(t.TempDir(), "cache", "object-1"))
+	if err == nil || !strings.Contains(err.Error(), "no supported HTTP(S) access method") {
+		t.Fatalf("expected unsupported access method error, got %v", err)
+	}
+}
+
+type staticResolver struct {
+	object *ResolvedObject
+}
+
+func (r *staticResolver) GetObject(context.Context, string) (*ResolvedObject, error) {
+	return r.object, nil
+}
+
+func (r *staticResolver) GetAccess(context.Context, string, string) (*ResolvedAccess, error) {
+	return nil, errors.New("unexpected GetAccess call")
+}
+
 func TestDownloadToCacheValidatesSHA256BeforePromotion(t *testing.T) {
 	const body = "data"
 	correctSum := sha256.Sum256([]byte(body))

From ff9da80a793fee3b3e06d2a8026582cc63f5bc47 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 11:20:46 -0700
Subject: [PATCH 59/66] Fix AnVIL HTTPS access selection

---
 internal/resolver/resolver.go      | 10 +++-------
 internal/resolver/resolver_test.go | 24 ++++++++++++++++++++++++
 2 files changed, 27 insertions(+), 7 deletions(-)

diff --git a/internal/resolver/resolver.go b/internal/resolver/resolver.go
index 928217c2..a856e0c5 100644
--- a/internal/resolver/resolver.go
+++ b/internal/resolver/resolver.go
@@ -42,13 +42,9 @@ func DownloadToCache(ctx context.Context, r Resolver, drsURI, destination string
 	var access *ResolvedAccess
 	for _, method := range obj.AccessMethods {
 		// AnVIL objects commonly advertise a Google Storage (gs://) method
-		// before their HTTPS method. The downloader uses net/http, so selecting
-		// the first non-empty URL can otherwise fail with an opaque transport
-		// error instead of trying the usable signed HTTPS URL.
-		methodType := strings.ToLower(strings.TrimSpace(method.Type))
-		if methodType != "http" && methodType != "https" {
-			continue
-		}
+		// before their HTTPS method. Select by the resolved URL scheme rather
+		// than the optional method type: older and test resolvers may omit type,
+		// while the actual URL is authoritative for the net/http downloader.
 		switch {
 		case method.AccessURL != nil && strings.TrimSpace(method.AccessURL.URL) != "":
 			if isHTTPAccessURL(method.AccessURL.URL) {
diff --git a/internal/resolver/resolver_test.go b/internal/resolver/resolver_test.go
index ab0c6561..1b786d85 100644
--- a/internal/resolver/resolver_test.go
+++ b/internal/resolver/resolver_test.go
@@ -150,8 +150,29 @@ func TestDownloadToCacheRejectsNonHTTPAccessURLFromHTTPSMethod(t *testing.T) {
 	}
 }
 
+func TestDownloadToCacheAcceptsHTTPAccessWithOmittedMethodType(t *testing.T) {
+	const body = "data"
+	download := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		_, _ = w.Write([]byte(body))
+	}))
+	defer download.Close()
+
+	r := &staticResolver{
+		object: &ResolvedObject{
+			Size:          int64(len(body)),
+			AccessMethods: []AccessMethod{{AccessID: "access-1"}},
+		},
+		access: &ResolvedAccess{URL: download.URL},
+	}
+	destination := filepath.Join(t.TempDir(), "cache", "object-1")
+	if err := DownloadToCache(context.Background(), r, "drs://example.org/object-1", destination); err != nil {
+		t.Fatalf("DownloadToCache returned error: %v", err)
+	}
+}
+
 type staticResolver struct {
 	object *ResolvedObject
+	access *ResolvedAccess
 }
 
 func (r *staticResolver) GetObject(context.Context, string) (*ResolvedObject, error) {
@@ -159,6 +180,9 @@ func (r *staticResolver) GetObject(context.Context, string) (*ResolvedObject, er
 }
 
 func (r *staticResolver) GetAccess(context.Context, string, string) (*ResolvedAccess, error) {
+	if r.access != nil {
+		return r.access, nil
+	}
 	return nil, errors.New("unexpected GetAccess call")
 }
 

From 896649022a5c1f29138ba58e95cfb7d4ff2777ea Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 11:57:02 -0700
Subject: [PATCH 60/66] 1 of 2 update presentation

---
 .github/workflows/pages.yaml         |   1 +
 .gitignore                           |   3 +++
 docs/anvil-data-explorer.png         | Bin 0 -> 524958 bytes
 docs/anvil-terra-poc-presentation.md |   6 ++++--
 docs/github-pages.md                 |   1 +
 5 files changed, 9 insertions(+), 2 deletions(-)
 create mode 100644 docs/anvil-data-explorer.png

diff --git a/.github/workflows/pages.yaml b/.github/workflows/pages.yaml
index 0d7c915d..edbe1b95 100644
--- a/.github/workflows/pages.yaml
+++ b/.github/workflows/pages.yaml
@@ -47,6 +47,7 @@ jobs:
           cp docs/adding-s3-files.md .pages-docs/
           cp docs/remove-files.md .pages-docs/
           cp docs/troubleshooting.md .pages-docs/
+          cp docs/*.png .pages-docs/
 
       - name: Build documentation and presentation
         run: |
diff --git a/.gitignore b/.gitignore
index 16da783b..689888a8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -21,3 +21,6 @@ admin/
 # ignore working dirs, files
 attic/
 patch.txt
+.pages-docs/
+_site/
+
diff --git a/docs/anvil-data-explorer.png b/docs/anvil-data-explorer.png
new file mode 100644
index 0000000000000000000000000000000000000000..65adf8aeab60b3fcb0cba487d181345e9630ea70
GIT binary patch
literal 524958
zcmb@s1yo&2wkV2waCZ#^x8Q6vxVuYmciFhROK=Mi2=4Cg8r<E2Zd@PdboV{yzW?7C
zw|m?*My;w<RkP--sU<61K~DSw0zLv57}y6%2~j05FvKx1Fz5(4nD?3#o(~3KU`R3+
zA|eWsA|j*;j&`ON)+S(J65+|}uo}w4*xA}jWKeLTf>MXFsPX86Qg94@*Nn7e@TgKz
z@Iw7DjI9AyIA~>uv|#~QsMUu0nwYItn)JmqC)+KH$(&?<j87wX`%n85zHi*1N$!J*
zb~hL>4{Ckd@h_jjhZ1*3zXrT$N)CUbpK%g|2=Rki>`G;dljc@b+yeWScYD4!{=tuC
zr4(7J-1qiv;X4)PFf<scB5D!hUI1Sh3WQ%HTtST&SeVjK#^g{6?InJgi}93DSZOks
za<Fz1mu@f<%3@!?J(&*@m}b^wiU~ySG$K&VpA_SG%CN3Wk{nZ-^fqvjn#nF5bsHLW
zMUa4tTKDIq+?yCR$S(b;H{Hu;pINP+RbdGHYcqR_z{#7;;2R^bIU<j{%usbQA-Ipm
zC<N%4$;KcPK1b$5Eg2gYq(K0NiGv9HJ2^G25H4JODW3y^8)qMhnJk-hGJ5aB6^pQs
zAZ}j>s+oi%MGve^1Z$s=6hW#$olfRtWS|Dhwq-mYv+LA;khRv>R2wI&vCahPTND$)
zh0xEpFYy?YibqDvn&j)bfPIZrtQ0sFtZhFC2Vtl_d{prvr?0&*HcE)KO=uz<tY4y7
zu@S>e$R(>frAX*T<DmPImd{5LQTk)DhR{LeFqg^CWlgB66;*=}uYPaL*k$UJTYV@;
zVY`xBBGqtT!2L@W9cm=dNlLdJ_$@koqb%udsmG)7>jq!GG<Qp_BW-g5g?>*h26#1b
zsXn?_vkTD5?NRH+kE28@Jp`UZZ}}lYfFaTt$imJFa-cTevEO#_s>-8oLgEcUk#8~&
zAw^3N9>#ZB(bGV6icmsaZ8^L`wv#J>Jxo$)P*D@_tEj`qu`Cv;41>#)PCy!x;;hrb
zBvJMfQ~C|Yp}qA|0Lmb6MHtIQUVSG~s`c@ZjeB76`lq7kALFQ4;&26#$Y9WH93WR=
z?|OQ-=1|nkGNV0_`Y-3QFM_6o+$Eai4k=f&X&DouFC57agC2zfA0*#61e&mZIrqOf
z*cBruJAAYSBeciiLV>*tW@{Dx#(UVvN>_%q>>Ih6LCtP1?(jV~NfA>ZVtgnb-xa^2
zmv%(QH-jX(@~HP=ANejSGv`V6Hn{2ofkpU>A5qtYA$2vP2I4%N#-c+Ryj5=u?d3&;
zCtuZeh-oC=1vTt(ln$GIP8n;WW06*oZIOIQhu8F&*WTz**2gR=3^UWcTCR&&vagqv
z5Q8lAX4Gb!U`cNza|fp`*ImBQh7I0(*e@`CcbBiPuN3;tQ#)Y4okDYhdiA*pIG*c^
z!R=qG1j*<W9Gb3#{q&J}yq>Q8S(srtn2F6cVcPsi;GptI(fj<3nV~&$pck5v#=xAq
zgcXpax)G|dRs6;c2#R4myL_hLw7Mkiv2~zQx?SvHE3z3cAg%*AHz@*0DT6|oQN8=1
zszraJnFU4Plln_=p$Ae@SV(*%7s4DOG)7a3C=;fQE0_3CgTft^DauGnG-R_2J`?>M
z?j^{gLNq57tw85YKO)9$j*A~EC&o5?WKPzCs~hqyU-i(o4xB$+PqZ>W>kzRH1u_+X
zpihPcHY(boT7n*Ww99yruMCQ=x1@@v3=eQnszE&;*ghD}1!=a0Y!4l}dD#S(6EoSH
zvW?~bdEGB(pmH1KLhl*TUyPY@5rYq&PZ*snkvUL7hKAxdDIs~L|G5&*)`xfrWAyUy
zvkP6BkER%A7%AwS=qKUSVMKl6eE{_E0{I$hU?RDsmlEJ-YF&0+hI6KK@UJf(;%XEb
zaaqGcyO=dWI--me=j0?5`eXuBz6It=^q;bmBqHKiBWp5ivSwtOMUTFF6<8{k|6KpY
zWy#?}R-dUQ&M(p~?Op!khv|>~JnZt1YTCJK6%FdAZOf4LcgM@euE#nzDlWl~tT$Q5
z)W7UXJAX`@tFa4cAu!}LM5&4Jerc8WEb5-J|FvlW_j%t+#gg4zXWCt|Xo}&8@DbC4
ztUb!d&nJ96Uvj!`X4mrS^MQq$CGmXQ&!wXNDf}X=pUFk_Dpo1;(B)>!ls0syf;M@#
zUr%k8i|R;Nm_xV&M^TxvSsK_Tm|L8~c;<QdvaGX|viNyUdD>f+TNqp5Ti9IaTw;%1
zSy_HyB@T|6Fq)m2tsD5@ny^Q(NwHfF7q=*?i?z=YlphpP&(KYmF0@wM3FQ=$6zAl3
zDs?KpWrN!qn4#J*_ZlR2;{|3<^W?XSA&R9$tqVM=i~O3JU>>k<*y8Br=mk(1<r`4^
zoc7397ULg~F%sCZ-uXN*7}Y9^`w{T*YvSjRgR<GR&YFa3jHQ__>2p?==J;PrnAa?q
zZ6Bw{mg(2ahRW7|XLHYG+GHDc47AO)E%fw#{oYR)sTHZu@adcNDE+9*w*&eOElq7I
zEpNLy^P4fP$#gSab6qR%g%HynE4H;CBm3zL)8A||j9RB}YltilEK^L>E!>8Q>)mQ`
zR_yA|aYb-<Sj1R=SdPiUy1>SW_=}YHLW=(|YBGv9%HJ8S#x_zOs37#T{f$GdUZhiW
zD(5y}5sOHq&Rzjr&6#kWfH;sku-dWM2^^Rt*<gQ7j%<${GD#d|P!Bl~T{zd())i=N
zZXI4dUTs-pSe;$vY}znBsmfoJUOM21BYq_Y@oVv|d$s`gJ<sl*dq=zJ2CY&SYT@TG
zL@^rV-FI#F$M4pU*N%FxBtc8tvqx6Pqj%+3-iKyq)YmIpcS%O0!~4JY+pgWNQXWXI
zd`E9~C-$=8x*!4|r6At55poBT4&od(4cY`|4(0}?6=o6{fF=wFkEn^~m}u6AabfA+
zo_Ch#BqAUBGqgWMHHaUn5iup0Q(lxhL{5kQ(l*E>i1IrNy66?Ty7+ozO-wqm3uQVk
z5tc6A3#F;fSZ1nIb=2a|>ejCteGh{Sv8@<(7?ojmvbod+AAeD{$s$SUBrm41b6D8U
z^cx2nJ2)yMe4-*V5trI1=#sReb}4N6fnBtoYRwPa-$hhL`mrm=&65mB7Pt|_Cu3l-
zQD3I^q3n#<NSTn{h+C)IM3{%ygL?_G3R)w#o2H$fMLLgC#hYYpXHz$GHG42kHn|CF
z-bT1A{T=sve96v<+{tzS`rzaK{6Rcu<_cN5j*2^Bb~dVLJae9`J_TEvx5!gYpSN8d
z`{N3k_-^8!>;sQ|{>G0gMXw@vg-vAz%?n$xo+wDRdQ&OWhVhz=dgJ-op4^@s)16xA
zTJ3|>2~DnpZk>tMa!?%b2&8q8F{#hjX(e<Ka2)(Am>bdelOwH`>h;3+zAxjE(b!BH
z&xfs>=a!M5BTV`^JMSKSKq&Vp+a${=QTjDL!zt*7!;^(_g(ihL-w?jNKJPS<jQal8
z|5jb*-Mn%oOBY5*NoQMjt*hBCWu>}RB3?>eVXM)rrChULS+BgHN8|Kqr7fmKuDYU@
zudU6Zz5fyGL_pP8Rj2a0vTVbk$#6KNksz3$()wyerE$sJ>1ZECyHDHJ=EM53f{ChX
zLv&NQ!AjyO{L17@-|J7)(C(NSq8v9VS68(`m7EHP%AZRnO;$h#t<vJt^{kest871h
zSr=p%?US^dLeFl!{`G^WncKBRl7`M3uqVMaq0vABWESLPcG3^E_#Onc_`Dej89d0L
z#I`oKmH_9z%b^ME*>5BHE#fI8`NY~@WpD0VmmL^082r?1@&L=MWsd`unV(ig`SOi9
z@Vrj1)>BK$2V4g+Id^~!$8J#1R?d<Dr=D}`;?(}K>mkm9K5~6)J*SRi=P&1_9Y?3Z
zpco@{ugc6eeEXZ<pV#Xn7bq&+R>L|SPE3!-C$xLCCv6YbeQvC}D@o4jo1~kx9pyoK
zOWwUts+~)(Y8yxMz-ytdz=qIjlyg3GK95U{*L&rKZR$E|6M5O}c|Iqf`5B^L-VYB2
z2f9oJOn_U=w~CvmkQ5Fkl-I30acw&#y9K(X(pQ0$j(Oj95K~I0*3<XLv(8~p(51~V
z?~B{q`O^8Mx5V?s^-h$0f&5;MjR2=F{F7s&KxL=?NXjK_0|c%Du?;KOy%RN9oiP~h
z#i~SB0S^f>rl`vgBEd}o!#O<1+^#HXqSaaPyRNlyS+HAM*e-<QS!M9B@8GBh;8T}7
zp(j(CwwtRz=|$Z+7SS)c`I(5GGrsdA`s~~dVbiGUb`9O?Lzo8gNW`R2zi%%hOf)1-
zWo5x=-^*}dP~iAr(C;Pi_XGeZ_^+}UI1L!&pY;%6V4)UZQ2*>B_n!ap#J#6KVE&Oq
zCWL^&zJH;=C-+>4fAvNj%Z2<`89L&<4NOQ`L{joSS2l7qF|l<rw{v!?3fX<HfVY>>
zbOHmzrurj+ODa)bypO+Vp`zieAuGdUWM{)@Xl(b@gwfr`{*Q6M_}qEki#8_ChNSK`
z*0xSO?)>C`_TYIh|543EPWopTXDfbk4Os<J5j#f{QVvFDMrLvV0x2mepQEuUkCLd^
zKf&L>_{q(ko$Yy;nB3gl7~R+y?HtXRSh%^lnV4CbSXmj~doVZwZJiC>8El;>{xQhE
z#t}7fGIF%Aceb#zCH-Su!>@KO&iv%$e<1p==O1*MxLf>%$=2zg(|VsE(;qENER4)d
z|26hIDBmBoJPH=>Cf1sw7B=rZd&dD_VQ1mu`xD^*)ASe0zkzD}1<J<E%KUfGzcu~e
zpsG$Ljv{t8??{~ie+lfLz<+Q2Cm<iwA9Md3FaE*kKWpDP4M5;y`Y)*g5Z;U#E8Yc3
zXdx=E@}9q|*&h!?|ND#PANhM3ihb^-v-UR_m>`&>sE~>~_-|e4HmrUeKxHH{6?8l%
zR5vN6wxVLv*|)PZ#v^xUikWC#Ujk;qBTU7(iNTZS9JUnA{j-&JxARfY4c^|^#@1T4
zTDFa|thBX<3AeTcW-wSWKQsd<T=4&;j5Lze{?-wqp^u;~l{x3j84YLP|K{+5r1o^=
z@D*z@W<7iYC{bV(U2x10|2vr`ia#69&O6aJwsehQ|C>Z_j@THylMC}tI*$Scg}<Wr
zQBw**yvj@UFc9y+pkF#VkNN*6IHS-muC5^L_<{*8E^m9vaqjQk{h3~ijFA63Q|3{d
z2zrBnRuT@h{}i+|T;Bk-u#Ok{t9+2?$A0aeC=8Z=pOY1&o6);K0e!pYbLiKmz5gx^
zgBU>-YY4irjNV?ee=1lRDQZp}9E(FZYNRMoEv7L5x5)6{SH2k-aHZ@!@og`^9L|zS
zHXy)8VNdBV6(%hu+YH_vC@7n!u|@fZh6p}Vpr*t@v9Q3SMg{@@FXsGrR{g)e;+o;^
zDGULmU9ityZLE#tUM_z(nN>LO?;~u6>(RDw>cM{sQeKdhj0OIC7!Ap!C{VshUq}4!
z{r{r&|80K$zk~fcD><Ra9M%Uj!a++X6HZom|7ECMNZ=pGGRS%_|4HyLD(QDG6>H%d
z_n804p6`T7hc?7f57tW6bO`=VDl4{sU!SO2>ZHcdgXN#d+&@CV!%L!u8$UEbsU_cy
z@eb9S{<~5fih;X-a2H|zIsR0&?B&|_wrctpQm{Yl1^S;8lS2y&m-Y)YS4(z7z@+{U
z=C+FIA16oxcL8#kU3RGdJLe??pb`=iGz<YRn|ld=vi8CY>bnt!q9$M+M9{<VA0VsY
zhUf<GKs`Lq8du!hXZtUc5_A>ug9k00#yENYiO3$@zc>{tEW*SDh(o$l@c+`f|87x#
z|MJtOK;1ou6ap_}KcD9eryKms6Iw)oVeHRh$}vX$p^5%wfr47`d){sBT??VFo{*=W
z`FSmkDJet>;fH6GENFkI={5%XrEkJwqjVqazfTDmMchX?W($C<!LIOM-0ccPy%3)F
zN`Re9DINI-ZE+KDqJtlWjb*$dDuuo71qDbh?!F}OCG07qqsOt65ahs3JHU74t4N{l
z^8Nc{`2Cafu_bPVf05ybHUtC5YzQD&HMS-H(;29tg$V_Ch&l(%?YbUG2mw%a8=>zD
zPZ3>Y2+<FWFf?4&k!=9~f#j7!1tmz!FP{o3P$$O!5=N9CENNE|5T!{{=gXfO&I$pp
z<kE?Om-1cOB&fCF4=oVh=KGK0umk~=BkWV*qNmsLFF)zOds5ODG=m<mN24+IKWEZK
z@g4y1P#oaH8RzB}1`&m)WHV4~*~n3U3Xp#!-gX%MkAja<s9#Pj=PuH%tS(t*#=pYX
zg&-7T4mZ5|WTxNATXt~k0+Y!78gp1=ct~F#<$JUW%;f`;x^)Z3z2$}G*{2~WwCO;j
zSW~HMlE1Sl9Lnxb^B5X{D-dnx@0uhKhG07=<R<4K{<^J0ac8!(GAe8K?>ZX;C>gXN
zxXP;^I0qR2QY=9ja{Gf3Dy|1mqy23cAgqH32GG&5d2o&rE(wpClL{x199mEyDv|4r
z=^`68_!0ya7840snM<g!|1<q!m(C?u;c^>K!>U6?>s`JNb%ODu|6p|>nuK6v6EB(r
zV|^Eq-Zy38E4QEVnW_I`&;MMrhCagWB40w1oJU<U=E#!nnX*D?68npUB6ly>TWwuz
z^?omB&~6BtFV{AEaCL&@$MC<<=G?rCZR|bD=?M1A1-rPt0%s!ey|}rA)W?juxd8=p
zQ4V0FFakcow^gTwOMHusjtNLT#1%@94U6{IcB9xbHKtUlRK{7iSVO+Tp+8LXGp^O5
z{tga>v0u9+d$7+65#{FsWiBj^!HbYgr#?}G(Q;Aj9@gKzW@!&w(^f{8xKD-NX7cZg
zM=9oyNVf|&LdXRARQdV9_}y)diEiF3=ySF`*ICR$EsR`HinBtb`E~i*0Rs66)J6O%
zQSS58+hQ9zUs1rA?DR?JGjlpC!|sIB+c?n=FcRCkBCUte(aC6OA$sDhNl0?QSS~N^
z+2|q8wqNUc4N<e8rc5rF-3!mO)23)U3h3Y{^U&VssVfvU`#w#<24RD#T%mO6U87ij
znAsxvNypPzkwz9bit^G?*xb*$61kr3q~fB3A~KmSJ-**s!&gcFieLXj88?a;Jbk-S
z=;$%JFfSZjt*|x48o~Pw>jTIxWhHSshRV!ghWH*!;x9_ctp&dhSVz^!L&qff3=c8#
ztudiLe|9yZ4c@FWGh`CQ2jNNX6={Kdf}o+uK*FI|@eI$seI!HSxSKVOlPkxtr3`hc
z)7RI0y^WjiVK-4CPWAyLZ#=f)`$oiJy$DuoIzECh#bpf%A77!}IKeEdwyC)mE)gWn
zY4akn<+UEi8+1LuFK`%52zYyTnzTzw#Qv>8h#=nig6RkYOMcFP`waQw?{n0#?k~u5
z)gh6Kf^;G70&Lq@gmr(q|NhA5xR<!y4Xb)c_6f~auM;62Ek5pW?}J+p1sOR9nyt8a
z&z^Q;H#H5eW#<F-H6DAPr0l)3DaE^4jdehJdA~E(UK^?g(h$IhKDWovLHW2X?ZD{8
z?K+4WQt;+Z`R4RLWcc4Dv<ePRK1Rath$|MIv5h=etpe*y8G8Wd%7n%*jWsB$D2~#*
zv9==QrI9*E?|S6rv=<PHQxTFIk!`eTumDC4E1IN#zo!#Q39Kcj1a>@GdDl=nbl9vk
zpkiP^V$rJjg?u0oE|f|h%VmxhaNLEnUTOFcLn43-4h~*rI*vbEr@0rD?Otw|QiM@0
zpBXF8TF-#m+~Vah`J3S8?u+jR-wWVqrAR=J-IOa+;F=nJ&%p~3NiZ0we<1?>zTg&M
zFOz~GS%rb#M@0Z7aiXPNg}WalUfAha^P!)_3&x@dx-Z&<MMMQ?c+q_Sx<ktP5#Clz
zv@7}oPNIj^%V`H!=?9@qIzU7p8sLfng^q!tX}B(X2CW{5HpC7!v>YpZGGESCj*JJ~
zdiOWnZ901+$@L(Qo;Et%pL^!eElYBI=zG0!%yyr5#cJAOGqe(@H=*`p5Tzc}R>qG0
z9)15uk{Lte3JJQv7(_w*dVgso{-p;YRxK#vPGydO-PSOhJ2J;&x+&Xy>ye?Azof7^
zj`=*Y4=9hID308-baqO%b+)FWx<YLxM^kT)1*KY&P~y1ysa7S4q!k$SGreu@5#7PZ
zI#E(n&LJBP1ONcy;^M&K<KqLEH<}!b+^?s_vxJ>~FS0Dwm>{AW0=T#|=muxuK{3B}
zvI4%6fq$C9XdJ;}{1*ImmVMZPa;!8D0%Kp5i|?!Nz=gm4Z7gIQH5VMj^g0>!s~BWF
zGYMu`Ky`RAL(XonC{QIs9P2?;CB4X}Yjje3YHw%9h>Q_H++JbO)<`1y<%<v(?dTxs
z1|zuYe*QN4<^U1-Sf~ge@xdo0sAmWWGO)pTP0&6N3b0h3unQf8wO_lUdvMDNafeE}
z%_VD#Oah?)YECYkh$>I&QFQ&W1j@aZRi%`h?r40(VyUK3TmHCs9c}s&6~k;CS~IQ_
z1qwPh5|0yEkp<qoJ7sg=^KQw%x#f%d{JzO}=1@^cc~^TiG++l=!ahm6crK@O%G|c3
zuFuJS^monZbaqI2Rzf(z8Ur{MM1D$9Vm>h6yWeo|5?apq5+Ajs#4;#vhvOlMvpXRI
zN>$h-x45U3RA2KU8_ZbBEni*hP2-Y(?PqY>#RO?mPCUlP6-0B%?`mu-e75`rH<H4X
zgVcgSE!XuP_WbYFg@lB(I+~ieNR{^A4K88tGAZo(<7g?DOa{leO|zv;s``1-!6{SL
zE5NJOlNWO+k-(A65FqYHvU`mJH52gx`S#uHn>}}YmEvNh1??atvT^8nq&B}GfFvpg
z-h3pg26NacsXRoSt?7fr`vgUG_(UlTUm0nqHk!N%;6WX6wf1B~Spp=4_d6)=n1iuE
zP#XKWt$g$#&6pV{w6!`3W{pa|L4V2kTn#@<y9%m+`$cYQQgM*IWo(*D`mwDjm8>T@
z%*63;^RGMbqIPDdY&_@1<CY#b>qQ~V@+K|3-x_;t5}oT`#GU|$>L1<UwC0;pZ_m~c
zpKebvxGjGbgMYS~cP4WiNn8&P3xuiz+wFpLM~7Ib&<kk;BKk44c#V|!1K@O;o#7Gk
zzA(T}ej!C(i<k~2f2s9&S;iVlr1q_GpS1aTlb&IS?s~xC?wK#$nAu#0Gw|tOTTOrK
z2tj8RcBotem2|Tq(*4*JhgS_Qt4R{0@A<(VAI1rchoo%e!{q($@44DK{cC{#{|kU2
za=2n+`%>8}_L-(R*R;aK<16RvD42Ke`}Nze)9oW(*>%DS2PoE3w0PgM#`rx7@=Ue7
zp#tu>yN83V-<~#P$9-g>N8ZB1)&&oPIrga&S@J({H1!&|>EidpnVAC796BuLN~Wp|
zMQF4e=reg-5E^V&V0=kG&4<x2jb0k}cv(Iup+nMXqq}DTyjzkB@UlbTL3qf(blr<5
zrVhWUON#CdUNqvd6r8Jr3Fz*Q;@21$7N3sw`wdt}s6D^9I8q5gtcMjtw{x`paHnr!
zdTP(z1j&0Zaf69LgVih!abebvO-&k@#nHj7EQ+W^iEvvI>7CxZI`(tVS9>84{SiGs
zYt6P2nL7QxNT&!7A`{J)$(||2?HYIlq`*;(t?C)-LC7S#xn2E4>pCJ5H-5+$w_z-&
zRVzz9l>{AwwvjwvKuNlAAT{P0qa7q^d9KQJeeoMv=^j2^afZoh7q-WD?~lB!cv}%T
zb}aa9$5_ag3RO|hJ3bEhczp!<@_3UNdelJG@1-<xU?8#?`_kEy`|91-9mayO*`K0k
zXugW%e{?P%^x*{H=k;*a8%ofygf^mHsRKh&q4~+O&0$oI=AtXmR?X9DE<8HMAA9_`
zcd2utOIcn$w0~5fib6z_E?Bvc8Y1*{5rxfc5isL=G7W3_tE60)@!1x)Orr%=E{hMm
z(RK~<QZ}PL$PJ$Z>nX3csCS)T0O9*WT^eY!Tlh}Wh5(@RA;<T&T7uJR0%Ayiia%$I
zV4;#co^HM33?B@JcY^t0zmy5J7Mk2_5&)SyUpr}4=#KDFD|puZU_Scf;=H*t&pKEN
zHAwAQ4I&;UTtc#&WNqtVa}cpM_s3`H`~iYF|FB3Fmg!>DIJj5v;S*e3%tIv-G0|>i
z>R2J>lIbLx%PJ3G=#xXS9BM4EecFCH${08Bg-)}(75y4FVOku?XDU20+F$UQrU2#f
z`Vn-@vPRtkEBZ*eO&9#+uz#vBy6HVBPD;xv#U7yIehs7cI6r(4xLsbba3CLR^f*4S
zeI6U|++ON%ZC%=D>P<B9=7fB<y{K8?^(FKrIbEJ%qgY>Q_V}(+uNlfWi#zZopCrkr
zfPQx(MLwr*#(|GEFYZ`T$C^E8cgUpqtfuliG-XdD#0?#Lg_8ZR>>S^FWWbX#=QC(>
zqi3AuCr9~OlgMuV<MqiLp6zCnVzGi@Dz{y=?gp>rBG~=ihA*jIb{n%<H*5T0;_LIv
zoqiSa!2`QMOiaUz>40n|jLArHXxWr2J|ahjHe}~Z4Gv@eG-U7<7IE<O&c<EA%C4GA
z@{5VofW~o(JdpqdN-{k>5QI~=$_SLzSCPN!1q@g=IX;jRirnoiIK=4wkm07$t_Vnl
z)f|^UI>h7gzM|A=aR#r@YbLMRAJqqw+6kyjeo(P|{HT7MhHbI-@*+r-uS10M$<AXu
zaJ*{rw}aw5UHgXTZWBZ0fqCgIfn`gb$GPH0_pa9jja+*}(fR1BV*jmA=FT1QS)y(R
zlgDH2cEwHSTU*QPSvJ~aRap+!bJY6euRAnvyyJ5<--!_ikM{HCnaWX*;}zkJ&_mvM
zMTL!ps0rRk>2n9!c0m0OVM1gK32)T7n1cfGaDQwP<H7Y)fELW@ESK9=A4^lfImJSy
zexQNM^SFL4sftG#!ftmxF0w_SADX6KCAs`Dh&qO39&>&#xfao49WFoK=p!&`#3zPS
z|3X|Tk2f?7va`Ec?_5aOxWM9bV2&4dKu!gC<2=28ga8rh(W^Epf?Gp5>>GNl;BKCN
zJb?xM$N>f+5|v1bh(vvn%&6M}hN<y`78XH^%3fzBNwBoKT<ZQXZ2^!XJ5nmM$SxZm
z9$ukLgQdxSD?lN!==>ulHP+q@DUj7rZ%?BT=ll~zMP4U$1@Zg&rE1?Qh4*3>FLRj)
zZ<F(-KHTM92p_jFsl0udhBSPSU6#-*xI_{PjDVf~Q1Wa803Q=KsNh~SEb7N4C0YPP
z02z3rq-2wAkkc$K<?!J5bT2}LKGAI+C3c^uh_3qSDhbL-@y$opY|wZjBE+RYd7Sln
z^#`wKh|T-U9R*56cxn7gxwR$fpx1C`&tM>bmu7rlY3HX3;?f}CNQSN?sDM^}GEyb6
zF(Us_2G}ELU9T&46va#~o%6mNh}`vf-sM)>okS37?^NTpoclUc@`YlH&;7#SL(O$M
zmnDwGmYk?FL|<-lMy()(FVN|pSNh|`WHvv+{zR5lI!C?)sIkY$q35esw6)9Eb9n*5
zSljb(4*68R562xZwhfk@t(+YAx=nK)EfH$t{(+$)k@Kf@J5$_j26GXG+xLk~9l<?c
zA}kO1EX+2tb8<aXkhPLIZJuyPNT>Y+pGd1r=UDHzXJbW!e@v#Me2EmGyrr17*}EWn
z**sPyko+>=1W4E;ps>isuHvb)AkWVe%KtG{Y$1K>zO?;tamuM5v7;&B>_i>B_|kbA
z$OL$Tn#cqcqRoXB-wjciY(}@-<a(5w)w>qIyU4scNDsF!j+0;FPvd7y40@8%w9w9?
z!qtYI7s<9qb}#c!vkMWhXnUsOcY>;e^QCRq>W~}k)+iIAaQV?_0j2;>e%D=88A8q(
zMF-adY<j);D6aWD7v<BmDrv8CzwAWvFA+kY+8SLpd|)H6m<*F-`q03SXJg&MV+%3S
zFfoy`T5s9CJB)?43=O$_+yrMV=#$)=FlEv>#ItKwZVy-G*o>=rw>CHDcwF*cJay|Z
z+17KwU~k`k5D}bWc0u>gn2hwW)#rp#XO|cziK4D(aR9|L^RGeJ<)}~P(*_X$Y~>Yo
zuc~QgCUH|DC`O}=1(GL01o<rpl}@2vS%SucqI1L7)u$Ju%8tO?eYU#~4Ki#$K=6-i
zK6O^DO;Q`+BAZ9}lU-*-+6Ft1_2d=GDcKj>bd^-4{dS$d{reI3g;bJk3}YT67B;*H
zv>KWPV5Pnt>Gd6M1={oRe8SfFMz4R8q=Ap-gR?)G0WFUF^7DqN=C|N;u6F)B+f=nO
z%4mVx2(R}D)IB5)&ZoAAdETj#^3VN=d5}+Cof7UvRn~Jnlq&~8@cE%zum%}bB8NRD
zAuvuGJ}*@C+N}D!%5P;GHQI!);V(1nzjKUn*?bU^dL2YU*4KCtW+3a`_Ow=T$tIhh
zZdW(V{Ndhyah4cfHw{a`{DjiXI|Z4_277z@s%3;y;yiK3uSo*z!@$twm01VSFD;LE
ztL-rl#960s`Ms{8ia=L8?|a>#Y6{T?k8_S7Q-+lha+yZnMw<YlmBz4#NPwb4Cew#O
zU=CY8vE|9Zy<QFCC_G|oK9d;X!FUGB5KX;s{~*$&va!_D$61Kk%b?ayk^*NPnR8&3
zhxDq2&RFqXwk#LZQZNXEjtmz6j8V59pgHsIvbjC(NoDW_q>|pYM=OP>y*9{ttIz^%
zdOpor{R#j;hJ0-8C=#>JvGzTv(aN#jXek5ko=sM13DCLaO5d$tJV)M=3r%!5O|@!O
z=rmvQigUZyPY~Q^{fx+RsF-${ee$-OeqOrRx!b_kU1pC#iZlymoSyIv|4vn^zC4d!
zC$WYc4gVz)D>Oy_C*+(J;N&_(M=aV(MV8e$Rlp6#C;##DQY(5^W%$kMx~JdlolZKA
z^;!*D$LqFouVXQN%iRkMlH9Fq+=N3_3>exLbxdtLn*t-h;(9S9KX7$6Y)8z-5u4Kx
z$%lg5^hu0-)+2r7{lW?*2r4~tamdwVp5yBqlYNC7HRb3E6g<+2e^98DC$c}MM`tT4
z4^G5QP5Agrqd7RH^&;*wi96UUo&fgQZw<55EOKuJu;Se|6VxkFms$2R_pfgoor1Bd
zHor^6j34l#sh9e>dAaT;fw&hIOrZr2(5C`^)Wo;+Ue~7_<YO4s2}pA)+kE4ihZ<BP
zqt1`4Y0Q=4eXkmO4$X9p5%8efyD{Y$jxr789J>{`twuYMxL6$bopTQH7=xh{-Xeu4
zdC?9XVK4gK$wXMkU{XWk=pR?xJ`<ZdGynpBV<6=uHKnky68ZhZy|A+mlBk#%Vs)*A
z4s3)FWID~Wyy$~H`#e%?m_M9KF3NBYP5@}nU(}97qtk_LKwS9lY|XIy89EyxYu2Mg
zM=EWRwn*v6<nQto+A%iG^~d~oJqA6R1;^!+kfXJis{ABxz!VqV4}?XTVJy=&6Ii0!
zZo@yQfUGX|LU_eBEWk$`A}{}uc*Ji}Dp!}vjAGAAsN268)TIe`b=Mv4SD&((KqYP2
zuUe@`^mu#v$BwF&VtN))XgvLMz4K8u238`NV)gBA;B`|Bb<%JU@UBxjYq>Gtr8D0W
zJj8{daf#v446DZrw<D-c;mKlJOljurcPWXE5)CHa?B!&`_=(|o3D!1(ve`sGN^A1W
zrRACCwI5(@s^w9jTB62uO|3j(!}sYky(X7DAqLrLGmid1^W4tGln533RmPZf__Z;I
z8<nruU1z1?5xI72-N3Qy7^ZERL5=H;V_vHC7Y^%HBzz8wyyP>a#5D=z<$9+K2?6&-
zTuNBAsVk3TWCr&S#|ye~dsIu$&kw$$PL}*2!t39>Q*{<^x%e+tLJhGCb<FdnZ{GQ$
z`7$056^i(u8J(vcRZ=_zqan=t&_1)&n}MMRkob}}*F<Thz)pz_t+l#A$A7z$$-qMh
zj>J}utXaw70TL35PNHC%PUsq2GAEPwJX_fbKgn?jvn8KflcmiR3*nCyJ2>jM;Hcr)
zP#LaA6;psr2W}~8d1NwJ<#Zm2C?V&qrnuNj;tMMzjo_mZF|*xkc#v=%eYaF>4&wuT
zdv?R~>uKhk!m-mNd9^uw;CLHsu+>TY2BM59uZGWvs%%eb(H6?Z^^0G6q+RPNKJWQ^
zdxk-yvmy_tu@#w;8Yk(E%fMI}H;HwJ{m%PQ_!9Y+6?&N;nt?89@)$am-+!UFL#lqp
z$2#InfQ1K6w6gBTDPyD2VH&7B1Bb=sDB;WHc^gIJxd)pOJo0QzIZh;WMHmbnsZI``
z=eMZ-=4`tG(KF2)E4);*x7CcJ=MQV|P=h|fMia-GGC`yj?tRReQn_w$VAGoj56Y|k
z(Y@X-5Z-_Wd@y0}qS36uO!B;D@y{u0e3_57n#w=%4n!oEO1S$Di+~jnO5!70m+`hL
zzWEYvv~~R{LwKcT?nIVfqrf;yHC$aZiah_L)==R=%s!6KVe=qOoTByl8Bw1dyTGfD
z*|_%h^^48i71hNYP7W?sQNQ8_tHTJ=EH^41f}FSr-jc65o~)}@zTqT+`KA%3(lRGr
za`L*v#5&5%)8oX5{BTn$8puG?&J7=j?W)~Okp`X4w@R#xJtMSe&U5lIUwo=-z?Aag
zxZUl8k^wPmRb!LvX9uLiIlH(vlWz@bPh!%+g(Bo<iHU*f@!qUx@hz^_!A4r-2#!hO
zBG1*sbbTzyX!ZwYsT~w<r^fQfPQOy+);#jm*VIoFnjW(P_r-Rz)Nj&%VyB{=dm@UM
zb;}?6k0$5(c;<QOlN$O&WAwCX0mh-9Zb-h~%SO(a>^6yIBM!t8!Mx=<RObtd-fiW7
zG+!UTwy4x^g)kCBs-|QVIwj%pqOTY<?yLvnxBbMg7QSh^F%vza1_I(ctQPafY+u7b
zSZc|$Vqb_U*=G~_Sl+Ce3P1$MPuv_K!P6-0)41nB+#7Wg;Yc!Wc^GWnHk@PQq|gVD
z>soKHGBN5RE#R!-+%eNm!nUg>Wwv4p%ZQppT^XAa{v2(Dw}E&+o?lU=pb7%g8h~!c
ztByuIlxMuU<F+q^D#!mgrC+<@JL(E!mcNM&4@V<bqH@R{x)Mz<dSe%$a(VCr%UIC$
z_WYZ-mXH0@TVup9>T#h2^43G^GueeTdB5N7QLqB1=yeKEF~?HW%QWvdo2?F`59gyZ
zz>1Mb&<Vp1u7m*W713mNZ4$-Qg%7-2Xzo$#RB>GAI|qmz>prNlPn0q6fOUIL9%S;1
zR@22b8p=6p;q@LAVK~|`@vnF*Zl^&jhFhD#*;;bMy#DK4qwWx1awo;FwkBWY$;S}$
zsh@W;Sw3l}2x;?MEQBp)2&rDCjvA}awCRm!*rsB!*1h7*ZkW3fh27lLIa>cx6Yu<_
zKCAsRkhegQ*P3n;Zcej4qGq}IBuCQC>l^wM>zSNrX5mT#?;=VvayxxtauBdR;d#B?
zQ>a6yI0%@wF12+qkyV=@Qy?kPb^ArjDrZlapPdY2f9-7`-fC*YXAPE08i3Rv7gQEf
zCY)NtvDW5;g-is1nk(VA2yZIfj$3~ky$oCwR=Lcp`g+4tY$@m^d(LBQ`f!c(z9be^
z@z<G2*e*aCReZSdEe4bBj=B(kkc|JPLQ%-tK6W0n8!I9q>_aj<#EO~+svc1#1s5<U
z65PR3^`9*sS7XjwDD8!PLk%jDO19|}0P>rqdNr8_D^M0)i-gAdkErIvY4W>1ji==F
zMwlRec`+N)1p5+!4LfHpG;l<aikbuV;^Bgg&?8!v-sz47l@}42pPQhy;Zx*)?`QEX
z8(`j{TIo*&o;Xv|7jHVQy<$S$?<bAJ^ijE0iJxr<iD-o#1M1=Uv*q{i+ss=C9tIm{
z_B#VE#Q}FNaO?W{x#&?^b(XMphP-1ChMrFxK0^-ZK2J9|vfx^k=%tL53qEIGXi88Y
zh6^{7=~4{e>^dz=mYjb!5b=m)ajr|bs!GNby&4>sDLCkDOCnAwxd1c=WFi!vAk{JJ
z*?zVVJ806qORL3|NX5`@r6X~r&JHJGkCV(IyXPW)2ipIsbW%X5Qh;Nx10X?DtOvqt
zeVoV!Kp!}H`eSmKP3Y2NpBMIUF!YoTm|Kb|oe)eFwUSmH4;p;VS}pRa7Fqd`?!kt)
z)27_X!uKp;@!RNYoU<n(hm8i^NIqXo6t;0%-TTGBj>*bi^^)uJVcwzEODb2pEr?O5
zCWqSv9Y5%me7oSdEj_2LzAZEeh*0pm$-Q6ermn&FY5#*zX1Puw{;seI&S&@co$`Fv
zvXQC6=CBR*&G-`AI!@zgnqj7geC^3=t`GmFfKFFlm1{4ua=(oFpvJNO<82)<>1eST
zw(Z%H$dHsSI=y(K@O6QvSada9*)&f*YesCij!V@)6G=xa&+J3`3DnN>>3ucDS7MqE
z#>F{0RnGO_)YlZBFd~>#OV}p@kMlWmLP;T>qGyZbdhRy7^S8cONGN`bioO<N7`5Ce
zV4}#6$!aGtR^cD3NK9~Gq1f+M(RU;G!*h${7sVSsW!TNJwR)2SsAKBIoZPtOi$s3{
z&$&JKk)jCa^>t3lJ#MC*zIu{6T6F4hP^{tTc|h~HNx$-9;mN#eoD#^^6nV1W4X3S8
z&)RjmfF8F2i9(ClONcWs*=F^KO(3>1{8hdiXIYxpDG}tYq6bqnFXUgjJ_otY!s~6o
z`dPR0kR7)lrS?eeM{(8JNbI3_JYO^O)O(}cH+ZiPz{kUs=7-HaFMFWJ@72!Z6{yBi
zDlce~)cKszhR+}Ct?X|rXSZ9Ev|MYk%kzjk)Q?5PVysHsNYj}bEbg)u=wc&c0t8Tg
zFGP*~jF|-7K{%hA5V-x~Nv!c=x^5th1{xRppPw;pvMHc$WL0k8l`C`QP}+&jun`uX
z_?O)5D#iy|!5xNg&S+;QD_xIVXNwXx&Hz3~M_}M#5q?qi`N?r^F#ypl634V@6U~(S
zH7@(<{fs)ac5PXRyh1Sz+U`vd&b@%J@7V={_Qg?@Qu>2oHUeq#qf(@r$i>cCrz@Mq
z0q*@_*MRYbL=WH30d06H>BRvpskf8Yc4SGAow^ka#d>=uj9H<Vn-m2%gJl+v^Pyh=
znc3F+0-%e9Qi@_i`nwk@z7pTvs?$ADK4zItv(h;2Z5ne95_&6K^59;~Ds2fp#{Q{o
znmD0#&rRl}tDXNnZYD^)Uod-<@P6ec7$O*P>#ji5IxvOV5&rs%2+l6tJr($B*ZEJN
zf`5mgo=#-f=Uuo=^?_U(9d~PX_a~?T6!bHvTn+T>o_m@m*B6-8CLm&18g_8dW0N~m
zm<YO01;hgxDGll{sJaR?D<8*90=_PhO2TDNDwD-JM{(h#HeA+4=feAbj8hyF);?jY
z;L4jrBnkRN#$GxZoUR}3w&1T(o?q)tZaaH^^!_`8mJ+%5`{A&b^4fyjp{r7&x_Z(I
zVF^b0Z@JW1q0)x1L-(S)5IwIW=tU_7$xDwOzC9+*ngSXze(Ie*cxqoAvN2^vV^qNq
z@Fjj`!}Z!6zcSHOw*%hzHF!`RDd@GJdK>#_xOqqHgMT8mbqRr35U1JQ9MLdILYIUK
zCpkj7IP_MmqGW0S+E4Cwmf?sX-~%BhqYjkmgf@K@)mO8p`G)?cY;PFBa<fDxnerzC
zDzB?)xp<#@8p`tHD3m_<H4-cVb!^LDUnw1ehN$TlY?b6Ko($b=dx!EMq0(~5GdQfE
z&)MtnvZq)WW?U>c5?l?ZrsB=RKy`~LH*6G<Yt1eg9<C=eLlt!w+`waNX@tq|_K5<b
z9}nk$*8kXTvmd4%3S0*mE8rxUg)(xes6-B;@V~E&dOF$#BCYE#cs$yokv@&)*{pnv
z?h9c1<P)94r<-}aTwSlwqjuhzPR(}rt}(ZVycA;?{!R*SdiX5eM8kDC-Zcb6%5cFf
zJ4FccBmzEn0vdG&F<}IJ&MK_X07<`(toV3I3JN)u{i6U0vHOoZC3%n@kib<^CGW$4
zz2TX#fFyw@#m`pzb;IO8z7~!MW=lw5efdz3$%+c!gju{gM`G)+9E;TLNzU&(R8vqL
z%g3=&Ld;^^$?H3Tv<L#BkdLOjtR&1`R?Zd~{Ibt*i%*I>EH(&l&hJ<*n@A&K!s1u9
zl-ND9*=V-GuwHMH>#{aBNLadWUAZYw5Y{C!@?E=Q8%wj$_KRO9DL%dOFs586SMM~o
zC*-@}Wn7KIx%8lDH4bM9h%(!-TF_zp760-h{aYI{(&36S1=Dz1Cls-JRaH8a&*Q7F
zd7t%(*^%f|jPB;#!pU-B9;8;($AFGZ3Z+#z_WSa%kWNbp$&G^j$suoU^&eIfJ<X0}
znQX1f_AWYOL%^!m=*TO*643g!$9a6`p14$sKfE$wsX;owyv60Zh)Jmv%8_9-QfG^s
z1ruZWMC{n{_t=!ve0T8y(MK;lmoe{}4@YCiiSI&sq+Zj_F|<s3Brd!&wy57zdq3uI
zx*qMwF&O@?aQc$8&als*6GEA)<C>BHva1(RK1owM_jJYi%pJGu&9hdtVNk4hqRCJw
zmCBhRt+=gBEf;3Tr(UTyeT8qBrMR;U&t63+VA@oSh^Hc-!Hu#JeNMnV1wSWE6mD5|
zPs;t^)V-Q^0g~T{bQ}Wv`a9_7g+yA-w#EwvF*Z!Csmwf5=cm)}g;u2Ej89J$`&%!&
ze|XOi_>B_TLqbs{tmhFt?SbTLS4m!PMI+Ok812=5&oSHIk{48IDW`BCp4(ii(>&c<
zBz41j>||nu<0YMPyE0t1axRVX`VOnfj|%7L^6XoYziy}o1A*nFzx79~Uqy*q_U2`D
zvuWwzL7&RG&<<d|mPZvV)@N1sZ-RhVzc>whplH-92vPM--j5M3MwvPVjg2XxU|~gW
zj_309+C2ggovwBzaX(vPMkqcm3XKK<dASmZiuoAb_KsK#0ZTScPhqd+_`>vky~)xk
zWH|Wp{J06Q(7&EHX?-f2fIG+~BO4)^%^=}iU$CTp06*#%V<U>*Ze9Q}F|C$D@vwd?
zkYMOy1ZDV~g=YB}2Nmq$3de61=(yc-pvx}N4)K=#hVngLg(PG{;?sxwM<I!`)i9KV
z1I6IiB5%*F4Qcf_dz7A&ePCpWlr0LgTHJkc9|M(KNs&XVh4(}`9LS@lP4$bJyt@Kx
zNz76>d!?_Q5|2B6{Jyf5n%J6|*}}Au$dU4lP@yXK#Bm1N!CbhSEA^PT7<KMv?EvM)
zqxTCwzj7E!zapGK*^D!cG1JNH4^9UYSpCI84?koxv>28v_~_DxNd1r?XLzQ%fO|7k
zP0mLGVS~fy&F%C`bxnB)gx=24VpLiPfWu=3)bhw^h~|c<=xWVQ*iCUw{W|M{+<g=T
z_-UP5{Xvwpw^vW(wstRt@n+l-BTQCWwZ3NIRO%EVoHzrgmt|Fz07P`e#o!1`7KRMD
zxYDt{AosG`oF7vJcxe6z@SzT5yznJzo>Eq^^g~!kCdBHEDzHjS(S4FOKb2wyJ0MU}
zv4w8PlBE%7UxNn2jl}!g85Fk-l_3)Qx<*$B0xkh*!F_%2Ki5|Aqxf)L-lAOKNE%I-
zd}ibj)A$*(J7k!$hGq!B9{%BAo?N1rlAZRxUhe9Td=rw8K+fw*q~p};N{7lfi@LZ!
z$Z`7G4I)!%TPR&uR{R81qmhSrHT`AQU#w+u=@plN_abM6mNQd0x{M|=XEnl8F05Wp
zm$IT_bikm2pnCqv19p4RjYR(`7T?mx?5T!0e)0DC9toR4>(>@r!pxJ9cTfKtV=k2w
zJ)g?=p!-uPbw9DmhK_Ynt_Sl4S2TX$G9gVkr7k(QLMoR}(mp~89EcSPdgDA%BKi|{
zjv>=CPMK%OUJt^alh|vM6X>H(U&m*{$}E95$i+r%HkV4elRVq-AW2#kAP5U{5)cm+
z9l)j}sA3G|Y`vmmTo|iGV!g;17E)nAen!<|o{t*U`K5(~HPsNE2rF7NpKGzoHu}f$
zM(YNtN~f=m@dqS!Ut-<<7zu*Q%j&N>d7hH~$6m*~4t)Yh0?(=v4a`*Ng%^`UWG{-|
zJ4k$QJ)={F;w0sm&6^TZ7vtLXv)dL2*TWdhrn?4c2MB4b&hzYfbtVn&rfz77kY<x%
zWA7_;v{Yu-CNBC&+s#3_^pEoX9=4Z`lq2gWk*agL6x)MA)4iMb4uqZ;OBsQ?H_y-{
zzeZ$^CKmL)LcCYW<JaJ%=@5sL()Q_ymf6vQxJovTQ5rv<P!y&g=3|ir#v4(GTa7%G
zsRJ;mU3?F@+oE2&=1Nn#Nd`xhVv}5sRRtLWd^+DUpR{R$lj$FrTU6+av*&O7R}rzu
zkVzgf_Q$gsxAi^tKAW%ClrP@h+zfJqmq_74wG8yXy#{7*R*J~!h%zY^6iaue5EL7W
z>miu`rmiGpkDYz|9p(v&_j>{f1=5CX&}}(?c=C0AM1a2J{-n}mUc;S|zHof5H)e&t
zbNUEdPuR?~FMoF|eJ6F>90Lb3HfO~RUotdw6J?22tw0bFkEuVQFnKusR`JD~FZvXo
z>zw}HfQ&|`Nu%Z<_G-v=rlaGnkn8hQJ7q#_Y;4Y&JE*g=BWO?hAhN(w=NUTs%l<?S
zn!I>aws{ecgh`#{V}-;<={affgN#jeB|1#>uVvMKz0!j1Bjt~9m5k2*7HlFP4lJB)
zuP=n`_pc?FgB>u6gwh=M`a7mcRD)YQqP6a`oh020ayK5X<_PMzI~4UIGI*U3&}DBU
ze5_8zGP;*$zJP+L(ReBuUq`rm@l<XSgLKHV*e%Hib)P)R2E|_ZzdM?2Y)3JlkAOt>
zjv;TPaTuQw7pnDXmFl=Kdp6p5Do$oIh?Kdf@AhG4aw9Mm2j!~pNRAE^&!${!8&dm6
zdCr%sRoMW9%<fG;tdHa)5qTg{Xz7r2xAl60BYE9y5n>^O5wZMN4<G00i(lmZX7tfN
zJ&mQ!#!-kf7AsUI3^6`IIi@fi@Lgx{M<b@PuqZaAYSJ!w5+}=h-#qxfb-R`5aA7CA
zE_RmO6kP6gzD*dtdEp(tVlyg@T?6xgJU3hUAs>Q94<Az?#_<jt#f3IPn|TIoh2-&g
zr;NmWbo$_Rz4X^)JfxM{yTcH-NlGyA&f;mQfmNijcoXZPVfLS0lWZo`z*S|$qjSh3
zYgZ~XTHrb!j@i%_T5QDKcgo%BKtbH~@+JQBc8i$!oV9qwmf_C4v}95ODES2y*RscK
zdy$b^;KkVH*t>)Q6B*-^x<KS&!rD7X9%^58u@};;6rqmN;!b#=+*$$}<v3ZzX4CP(
zK`bb=XE+My*LB_baZ_qM$lxDa#v(QkOR~uiY9Cgw?~-F?x7$NU@}RfZ*LbHH*{!Bw
zR3iwM@KCi`I?&QCV@tjB$HZ5vRvNeLyv_@N7Vus;aKrJ+{N<<GS?4qELZB}Q$6hHh
z&GH{H&qC{dC!VLId&#e3kTbY=S4K++ZtPRbq><gWw|mQOkd#jx{o>B31*qOmJ3G`K
z$f}HWli&v)YM)_cBHnL#(s(Z<iW=54J_7x{QXCZOTu022_bVouRUe=1Izy-s55gZY
zfbD_^9g!L@6GAw70P7(?K>9Y<r-VDP%CD@(yHD9|KbCIMecp)tvJpSUU7oH6kDl(Q
ztHFbka`uOnKSl}n-(Wb0IUN#K8SnA5Ua?y0D2FeYTHdJ)cJT9T-H{Uv>z^N8l23HQ
z-ku5#i{gHEt+|yW-TB4va_jNkaDf4{B6q6E0<n0bI4wQsE{il5eO)!!y(K3mfO5XH
z&p}>Ui_?mvUNYqUSI3o~!=+;2w62))d0xST#%k_$GcVo@Gap<bUc5-TnD<Uhj;4cp
z=SCo2vWbF2)$KwuRZDvMu|{(x#8)yuGr)naZ4Rp;V}>7Nj+4<2#(wP`Ez=ri51ki~
z+PTo30PIKM7M+|k`07?XYDU^9dfKda)7Z@Hi7c6Zm1$xu<ehu&jUER9Eq$f9%+NV&
z%SUz`)w7A;o!nWr=RnTjO=#L7Jk!T10>&K=9iL88nwXQ|S8yL14id;_$6cXI)m{6o
zM$3Y35qifKul5Ae#|a{dh{%BLCK#;H^Q?tSUJ=IU2K;Ezdvm_m^AXkEoW315SP~k=
zHm+UK%EP*B$<;b$_V4h6HIQ*kyRla1iqqA&p>3a@T^}dEJl{rgnDtFPowc5CH7`##
zQ`;|<so9F8E?_vN(dS%I{~wypGO7(G+}14=cQ0Dpy|}wO!L7JMaSarA_X5G)iaQi{
zcXzkq8o2rHIp<G)XRT!Bo!NUod)WBn4@cz8|NU4CL?$zL`=JS^Ck@|zCURandCCjq
zui7n0C40Q@R*Za<@C7K;@f!<~(|<Pk*|Vwhb3r!?{-2pD19ZaP<HedKo^)z6K1OBv
zal2Ytj^7iim}*hr`mc%|(Ja=^rB((GyIHXqT)EFxzqzrU$avURpJ(u7e0}~hqX2(W
zaW)BmJc;*DftukBBD)zMn(YnIlBlC`UMqx`e<3aSv0i{90@ta?ufSfXC#S4G|H)AH
zCaV_=bm8<0B&6XorNd=%`KB`pCqTEkp25^CdQq(KMwS{B&`Xf=cH&|NNyTJ;>I*{_
z!JP7Ax>(u*M{A}&j@VS2l;W5<h0P0FPNYW$Uv*zN?~7Ay@YQr90O61orDl18PN5YE
zI;dtJPr1=;mi#_b?+uxFDVvEZ3p{f~<8#yDvz5K;xiy@D{~SG<A#$*PXvt_3u}@23
zU#vIMxL(ZYW&LJ#|AL9%6b{aL02@n}x=W;gW6x#ry+0@+-@1ZR{;QSaj|fqr#GtlN
zyku*EczE=$<R@HdyWX1A)54~3Xzvl1ifOjy9F8kev=n1^WnP+wUR}kskJsfI#t;w1
zEWv$kUg%qL4j^E-s)*p2`(<{lMy#d_`T|+&H<vH}%9YN<lH*@=tBvXc0(0veP~QNO
zILwJgPM%-i;51eW(e3V7icpKU@bL=O!myz5hm{sK*g-m)AS}2*V7f)rz^NLK-m}@i
zCdz=%i_~BflQ(R5r$MEJnRVFpR8!+iPQ=v4`<6ZMBa)MlgB`QTL*hOD0Q_I-$!5hQ
zW|?NsTAtaRzhh}5cDNKoBRN*o68>;j<HM;T?*#&YkGYLHBxLcaWQrjPH4K6mN|9QV
zf!x!ig+>?WFrhz9b|w`6(5WTf=UCc?8%{L`_8|gifX4A@j97Po_)ghrV?&`u`W+<w
zpjSA9$-sX#?})58BUwkF7MV?HuC8OdXdi;_iH7#AE=C;t|2(aROlo71t7@6xc6i76
zs<7^|#|HL;`p26JN0Fh)jRsG0z=K#FZi0=hjtz4;b7n$Xqr#*6U>pfOc0M9Sp3|W|
zp{#z+;7YB=E<6T%n|mG8?Age+|K$hD&^f}cT6x<I2BnoUh*h`0M!SB*f$bx+rt24u
zJYKj9@#Yz9O?q_a<Y^741m*!^X4xQhd%JnbosEjsy<`z!ydON<C=0+qhs9!Q;7^wj
zJ}`WUw%*|U7!NM9xo-fzY}ju!kO;k7g%zJuE6;vcIf`jR#bbWV4P3T)o4~M^L6J!H
z!dw8iKb%`~zq24`!*E!n!+^nst{kw{I<){7VD%x@09eVu8_^A(({MvL>f1~jGb)aR
z87F9UsngPEID-Z)`m3G#3$VfvXf?B1JX}^xmBr=wgf0X&(_+smt*YsG;cKv3*o<Gd
zy7yoi(Q@4w7+bV5Lun*wP<9!gZsjsTY;C!k-QcQWgQy}IW>4Ef1a!&sDzYKk1d*p>
zX+u6v(G*k2&KP=wShBwldF}}~QdLbVyfMfM3J4l)*0R&!_9yZPAKJ0+%+$O=hkIE$
zQ1=w`IYj+ick@2oCkRQF%VqNzGa}yOU)k+A0A&w_!}8tTixX#2;Lky!Jy^<1*spg-
z-M1h4vwq4>Z}W4Uxm%=}*D<Mo&5kU69UMvN(xU|;tQ>HQ6}}eSpQ&4p*ApV$dvWFG
zEna3f4KS4pV|Xl8>QX1VT`m$1PY<eUWAhREz3u2x#%?~2iavKg-BBbcQjJ$cPDz=c
zb~+BfFUv%1AR2Ej97$JUVStV%v#61~<~>(w&^QGD7&%D>#Q%$LIUP$HDrYyhXfjwF
zTBrihbB>j0ag_Ku-H%d*x`>>Ht$7?Hnvc<NKjivSIQ0ZU;cuic>7k}F>6GH{p|4n;
z&=bmvU%Xna>#{n+zCD}?wR=%)D9@mo`ujqTk=h+UnBOO>*EoY-o_qQRe^1JeX!E;H
zy0UGqnD+;%70K;6`j)chrW_5+<l53?CZtBsIZDT7giAz>>NZrEo)d5&QqLy)DN)9l
zN1zK^23#~Vv*gpKDrJU9@earjs~78?e#6_KXk2idpKowflU;J`x<_pgo9#d@FQ>&9
zWH#(tbXZS4nP<Z1ygPOGH+=4Sxo|g)WB|^gP>$ZWNk35S9#pEV2^e;Q)^qr8fgG5t
z6sRMl`w=BJ!|J_OTPa5(792jpxwki66;qAlG|i{!`Se?(w+)RGjf*?_ww86gU+!z~
zs%Ztu%bu;a79eW;QO_k8v&FuT@|nfGq*1Z|(Cn75^pJC<>d?=EyVy-1+D>nfz{RwS
z%pktKE(iJmrzmu~#|-+Q4n%E|F~8jGf^px`r#>Csd|3UzE&z~KL<j0U%^g@#!>HKh
z)Ys!=6iu;v5BPeY#?!SNO>0!8zI2%x`DU*RyxI|3dGS@<6fU@!684KTZM6qExPo@)
zTWN^f`AS|N{Ed3p-<o807M3=HAF|sbfd#^eu1ZIDTYb^9XM3e+di6Heb&uLN%ZtR_
z#EH%6F=tDWcIBU|UtVX^tX&nh7TX@{CbIXvJb<BPe&xose!gk<9!+is{BS8n-dlxx
z8n)cFu&(&eUD8YL*z@l916Pa6OP+(wtq^Z$R0ix&Lz3Ol3h@yI3I-b|2p4U3$@-@I
zDDegHVXV<*k3vzuL8n|rY))U}-u-Me&9t8oy~sSt(#hT0hI$i{2sk{)Dp`G)n04t8
zgz`Rc_0o(<b2`<$C|PK*>G-|5@eqOCt;mMR6PvH687P;o6$6uXKxGPrPmmw!Z;^Nc
zt)fp)IV`O?#MBg4p6aBFCY#>f;LMAC`NJm+fN=Z4WC$<Wz8amt{QvD;UXX1mUgg`6
z_5Jk4LlydA1Z7U5$d}i1h_>N77>y5ofYPOUQp+FEzwER(cv3)CK|4McS`_L-J*Lu3
zA2(*;Wd%}7r<pWLq1VWDK6u?CI3X!ro~tGC-!&%@@I=>bZZgU#Znz|R$fXHqad!yy
zcQgvnTdEPyfQu5j_I*w`CkZRRa{4E->5Gn?2<@DE>Z|Sf#c!@N8meRm-RlVVY0py&
z3MRAnGPLKS{a6+XW=6(*6Ap%}m%LyHw;IK$+Z~@5&PnAZA&iWc^h>WQ?U98xkA626
ztmtv$Fxrxwl>t8qjFfV=5K1@E6SRq{JxL>+@p%gZtMk5$M<|Qld`wqL8;r4`^00ZG
z?`ckVrP6P$9DFTUGhmowXoDXqtNc;*wGDq&Vjpp%q+{-O#8crHtcBNK3w|S5e-NX>
zv4ZLge3XuyVO|4R+Ca4g!-<-XZWV_b3kM5Ncgu0o4BdZ*TR0fJA?eBKls^-KnL2rQ
z3DvT<sqQ7>mWp8-GGFulA!0(6Ow`d`j7h9DI|N7U+4b|jzze$_0`c}Gh%yD7DrMyQ
zH&$e#Igupbw_40;u>VRra`HfS_myOQ$_h#k&hGUbKGSM4YeUS#h%dxpQO4f+b#m#-
zbfI;qlTDBaI5#D@;<>y)Y#iD31V8b62`=zup3Z7@T8hVJxrNskV$~8D>&q9O`#w*^
zx%15Ja^VxHqz8V}IP0)hFeF&-M)L(Kt2)jt#&JOZmow>80vH$m+uMXLl}Q#qpZg{q
z?A6#o)+d!Gcl3oR$1g0J9+z1sJ6fbf$W$@2SuQjO@?9?K$q{Y~Q#&m-EPyy<jZ;G;
zl$ZAac&riTUl@g+Jhq!qp6D73bR6D~iaf7N__dCACCVQ?(@kI?W~eFwa6N9z9|`D9
zfHh~n8d-{7_ho_No&-U^^;;qATD~lF*p!Vw<<Z1%AxZrv%d5}RdFnUb2`|QLsa$;|
z<WMmrA6>)|%8NSP7Xe82Q`>=rFmAOLyopJG6ffz0v{CtsufaBb67gI}fEv}k;$=D_
zRbBF?Xkt!A{5)Bs*z$)8VN2Ia`d{(~iYdV+$zi(yg)Rx_SsO|^)oGR=8OF1XrnWK1
zRP3kk#~ROSLD`fkb5t_Cw%_P!Dnv04Pr4vw0~IBV7fE~`Kc<1^O0qwSB)6`UN}|}0
zB^wlPVFUN`Jg}Hjl<9Vs5$2FboGoxpwko1XeKaAdYvgbCXL#11{~_vvkA^V<N6pYk
zKaVZH{$iY?ciR7tcW~t}E6Ancsi0(TL}~wd?SRF+dm>Ah+{N-hT$oJbA5|w*w&M3N
z;-KB`-AcPVkY*I5B=dC!?w(tK-?es8`gAT~b<d~NOjh)r>(07xHLZM@%kHPqPFdi5
ze^?${oT_%M*=OI|dpxO<hL%x{as+7X&eICtu7+S(e!$ku9*u3ee>qgXsPi<|VOb54
zP$A2kN00C40C--rC)$Ni3(gURY=4ZD!+-|hP{m+O)`N=IhxX|@#Tzf0vh##hP(iLq
zO>zB8yH>=c*|r!ZW5K`o{@S0%+n=3mAlXlq_Zc~pEl7Z*|JuoFoE&FrB-eU&p4S~5
zJi|HvzI-e&aH6pdFyT-55w`udPV4({&8!_I;fv@^wFkBe=Dgi};`P5qG=B3sA12GH
zkHbERN#3BkmNWPSKD(p)%ITXsT=3omA14ZKi|UGe37nQ3YqV6SR66)}+Roo#P5**r
zjeI17VX&C}B1Ik=FXx0ultdeE+!st2i-%Zb(;#=a9^4Ny;BN|lPerabQ^_I3FL4<8
zWp*9esGEEqr!JPRJaS9Hq7a;MVnr$ntkcQ$;l2jri@9ww#t_s9x!82Hbz7a-499#s
zqchW7TX<<{yNYK07_XlaN8{Kn6gf>7ck=zo0atjGCd06QA&&yN4iBc9N~5i8Fx=|^
zUWM4FlMs(=yc#~x4GVAx=oLX$KHN(=Y1Y)+0#d?pDkxMjH>yN}ET+_5HI0&-t88Nh
zG>i}xr#!eDjr(F=U{O{9B+@tYSzO90P0Rng=17&U1rq<+QuV9=+Hh;}xYVu1Z(;RP
z@LSY03W{3gmm7NV%>&wGNi^AVf-VLi)<GJqUxTpaJEr)8+iCY&qfOy`O~s<ajLZw2
z7wWMt_V^~+aTX;9-wnw1b0--x$#hg=pRHpD%tid4N;FI~V28H=VkfkQ2#e^;_G!y8
z^X-q7*k~fWgANV|3~~Ib@Vcldfu#pAP4HrvPQa0Wy1n*r37`*gK&iv+p#`Kv1mN}v
zp}2xa5;^(Mg#C!fKpQ(6*`FLWMbB0B+csM=g~kLm8heffw#Twlr@qamM<oAlD%_&$
z0?t`Z3O9cwzV7eG7n$c|b-3z9%Q-+e8cb$&_7e3iAL9GYQ+;8otAD30w)42Z9R>7W
zVXm`(PofdC;nE8mDpI<ou+~iW>^H7I;~Rz;igds1V)3JC?&I&?q(mJ%EfIEZ3;dv2
zBwH(VsPa2fxkc`|N;;bQpvd>$_L#S{5w6Kjy;8_{?kb6WlnRXl=x9OY8tLqUlNbhw
zK2zYWjc_VBizGID6#!7G5rWP;te@g#N*q+WVO1a_B}JE`L+nxd?gACRCm@>l&}q|w
zp<rRX;91~%iCy9?`A3%p_zKzB7|dIO5W8!d@%9m~>(w@p<&&Iy-{@)At2;}N2B@NP
zW$-f7<A{w(j%I~q;uWH!0w|NN#4nZ7{e4auelqnw`81WY=FAcvhO-*67V`LV^j~|N
zCmV8i-r_qM)O|Mw{nKpq!u)91k17*jrr*MO&#6@Qb`*r9xi*CbJyha4y^S<BGx;~M
zq#u2kZp?q49vkzx->~*ego<X6OOk4d{CaZV4Fb0ddmG#hRB7pBQuYssNthwiPe~)*
zd)+V^&^r2sM<a&GYt@K}Os>bX7zqt)kP2g-yF_$&Q1s2nFPn#pDbK!(ilXBuebRE=
z4E(6x2qxVpgE<nbxvoWs$C7<!)1Db1ToNZDH5M8{+61<f*lo4Wsop>9!;*^hHf1QK
zYx!r*TT~RzBmW)RV@XJXFljD(az~X{|0W#j_|VgfoQ^yjv#l3W?`XeMumR3$a^TY!
zC@L@yuY!j}q5P1Yac}nj^~J>-P9{?E3;R6SrSmU=zAB~G@2Aoih><s4aW#Es3Y04?
zzR_)R2xE@3-H~qi1kiX#S={MmDXUaZZ~jrHB7qC{M1zY%qX)TjQyxr8lK%!=bjDs%
zoGtkn>{Io=K4j;tmi?;O*U{NTV(E&OTd6@vi3x)H_%$W8SyiTuh2Q~`r~#hQRfUxf
zeuj8NU-|xYOYKr?oVML>N>VMBOuJ2Uisr62nFlc<rdGZERT7L*lIiV$1o=8bBU^Cd
zIdG!(>yCcbuAv#=7r~0_G!<MpW&LZiv!DR0@u@}DylI<@{v^k_49Rohz<DC;lZH;{
zGoN0H+0877{0_usc@iPxal83C4r0@wpzhY|CQH059zGA$e|yNR3E#t04RASJ4_W1H
z#R{P8TjjKmA}}9K4N_baN-X*LnHgeq>S$BkIjayF@W6z9DLCCQT<&tK*SylSUxmgf
zUHEYqouGTRr%{2RMkkndpxQ&u1j2zFH^72F54fc+$RtruCIVu&dPB6ybp?L)F9S;l
z@19F?tR8a&U>No8$*9D&HvIE^E@YP5yn-wmSnc}1mTHe!7#Murm?Na?i5iFXN8NL*
zv#)q9w+=R+u(T1+6API(?fIN{NFxZC_q&8i=e5j}`jfj`xryct;%l(4F562Y`<waX
ztN}ApC~>%6e<b~6wS?ME@Ehasq*>e$m6k(tq1i*_J_dIa!m^O<rZOWg%>Rl&rxU*p
zle5|va>E#f=w%o;uzM!S02F4urjDl#96DWO2#p10lrPr~h@y7W)AiJXE}NBSL6Qi)
z_*HHs8I`{_>|z-*%Y@IOLOPqgS@cIYwynlUfoi}^P01Z6DH;9H+9^Zd#=pY{j!2|P
z3DH$~bO&4{Vw2|ek6V_kak&iX13-c?`(I!>xkg*I<2Xr8>OBx`6<=J1uOeXh&-Wvy
z#l)oDEh#`${#oVQkNU58G7)Y(m<P0_!8ZkAXg!73TxvGi+*?uwDN4G$n(l?Ygd30x
zfR<#Pr?a^Yc{pUg;D2x4)C{MPSj^;c_#z=K9pOG9md_D`Zxdf0chf9+M7?`;@%8=k
zj`FvvI2=5VX|L6LFHSt6a91H0`bfL{kY;`?U@@Ocrk{gW3ye}xXn6n9JmZ7lMgCt}
zIed{YaJa$wT1|r}ZE8)uw0c7s!hH)p`%Vir=DbXtF4&3*yokS<Un#rG{e7|Ah44T!
z{awOM3A3#C5%V7E2He|3iVqYqnOxE-FNd!9JI-K83`^vB<W~R`U3|h0Gz|F#E}f?S
z`5e?KGDq~&-meP}S(|;9&Km;yL*Yo%G2W-k%$f#CH}8inX->x!1=(OEHOw?1@qzzk
zNLn7|q&l-<2Rwu&)Pf*t5I+Q>Pq%%Q<`H~dkNUTtq>KQy?|1$kqGIsJc-kZzZNhn>
z(DxmC_+LY{v0W{RQ_c~h4tJFIg5(s6Af*Jp{(!CQ?|Z<GI3G!On~&rZ7ljmo15SV#
z<AAC`js*1IPn5B5&qq0>LXWLd@fs=nCw{8Jr2d&>T8<odDr6|UrRUQjV-h*iuh;;$
zo+1VnH*6eHfLJs}f?BzDg;~ai6?&@^7%qR@Ez`p~)Tj{DjP)vsC>|OcNdI(Rq|p)u
z;vI~`ug3Q%4Mr`nB@*`ja`d@xfUaPRDO>xO6tovkoa&47BJdBUkm!I(TXSBNR^;3)
zkBl;V8-$8nZ}Y->A7m3DxP_diu~MwIaGwJM#n0!znERj88w(Xp#o1-bHIW9+@S_lj
zGQX+#y*;rJl{EJmSt>;pTENoR5xL15(le9GW<hOGAkH(Zp``>2`dY8Y>)5Bc$&RG{
zjEjj0t?7Ov5+ntaMq1636UTa)5BLQH!VE0?z~uzI1KVxo{z_>2!y+)<f$s1K>M#3R
zEBn)BvgRzqR?F(ou2^uCzzaz{Qzg9g#<ZQU$FD-al{>*o;vBBD^oN<5S23US10Ua~
z1^&yv_w$-5@q`az%|b(GlW@2eW+QSZNbom0R^LnCDF{RuQbgkV!yg0v&r)N0t)g#c
z^*zoDts59{Ev=CAMWkk(qrV0W`ppZg(?0*S=I<kiL@9A-WbX=j?T6ea`aSa=(C&O6
zPTxV{ERlO#4LY}tmZ|{i6o0E&`N)@95wWefSYo!XO4)Ut{?qGmgRk?jS})XXsi!bv
zj?q+S`H7(#CjN3c&^iv@SceNuGeiePTBjl!lm?01G&e0GA9U08+@_O2XcwLC<mjjj
zL9|r2sbeSANn3=mJKrm^J!|%+A`#G}mG3kB7R7;M^zK0C;8oZ@FuZFFABK04hkRV!
zX!pD`3>ROIvk_x=!7IZTmCyYYm8JWkO%>;S*NWswZmZ>^8OZAL`+^^)F<^7+#9(`{
zits0Vr;)>|)$4;eUPjoh;PZQlcf9(mMI$>$SlVE(HyTfJ?5i0L)6r}7!-xgdY;*jr
z6{Un!OwwQ+=E(7TytFLh=4O{W>?2+FT$y141lg^Q0EI`bzfyF<PUmSjSC1=iLP?_$
zmQH*-e*M%5m&T}rsFckEEByA)p1p<>a!elO^?Ku(q=}B<H=X&V$@$K~9`1Z(sqNj7
z_ZanVwQjkel6dG>rR(u4^2yL1yVCb)`smej$zA(n#|EQ{Tf`;oQE(wDeKWJjPF@cF
zcE8MHStL_Szq2GenqbKcOl+^5Bk<W&3KduO?kWSjEV02_Nc~GUhKr2R7eMdhFk2GG
zfy;~E0WF6}iYsFIXd8cg5Anjvan?(=5=d)d+qyGV>>07CDuKO&gaMQCyIQ5z*2aD#
zyXjfb)oN=3_qI|GRqxwricDfNLbARtFo)H#koB9|o|mW9F5ur-&bP@1N9Y9q)h^r9
zwad%kXM%#UlZr}W`Ceady79S?hZx~9gQ+C<bXG^dW<Xa81Cih@roH97^Fo6ruYnEd
zZuJq++c8>^yj<FHTAQ{mmcqz#TXZ0pW?sDHKGIS<yz>k<3F1c)LSR#YTIz6tc@g~;
z$AWnPCgo!$c)MPU;l^ABcK8N+u21NBe1h3g{mM%71yX&7Tt2gf&>bX}<uxtt>hKQ|
zQVDHujYt2M{WZ+6><WI;fZVfh<5;`J_kv5m#huvq`c)!UUlcv?s^r=EAi&n6&v+(v
zB3?$^Dv(<saw|M;{gpY(@M5ae`QTPk!12a#+ZqJVp2Et~qwa_c9-bxlT#cD-&KSP5
z#)u_pWcoW?2Wb|7j}v++6}Vfjk~7ofca5`GA<)t%Uf$15U6n7C&M2!&Vt8J7(F0n{
zAB~r@#rfUDYd*ElYFb)5k|ku}l4XVX@`AIeoIF9;M|5VCs)kk56YaI9#*q&Zv~La@
zOWVCLnJ^E_2<pE8ehdH3x&&LE)|4bdf`k7)`uGi@-8D%%L<&IgZw`Aiy?<0tH<NMQ
z=#*p{WWGZ5@{6-&hQ}lI5?xeo08WYZ&M1i;DFXa-+~QTY<3cJYiF6wFx58^viB-67
zj9&=3uN0&T)#p^!x}F_!h{=qo#<4!9Cm%!4M5>`!2juC3W`xSD{GWR0bNQ6A*r5@s
zS=Oj1oF@rux=45L3f%>D+CTp09g}Q6%t+umzvsC8o7Ag`5N{iddwq{D>2IP)Oe>Q6
zi1T?^qgz%Ftm%3}4qbo!SNSLruNnM|kW@mYey)}ySU&U{jl0KGqkOg+{>9Snvrw4S
zDZ{Bt{H*0bG;7Z4Q4rw$wBxPP;_Gyk^pzRn=pDZ`pqrUq!3g(avjc1z(;|*BrYdT(
z^R}|P9=UK9|7DNQNzn+6U5S(ehI85kI980(@Gg-vcna3;bjBag6g0qAl%ls4TDLpO
z_@xw2pnklbv3f88e_P(JTOcWt(vhzvnh;VErBaQ4xZqm|CE&Si#cwj{28jPQ-5l0*
zTvL-nDOF+iMTcf}6ozXxjgoAY8<B(BLBAOm1*OThM0Udac(``8cD*)G7P74C-q2L9
zpVR?D#kn3VjB|y!{3!xbQ3~^pxKiRUz;q$=Kq<_{92eJ0qaPG*7w?_z5d%Ne82k_;
z%yRO3@Dg0Z86mnArm=vSSpkW`DgqQSQ}iUNfsG|#_xSfsmOd#3rlY54OSDo`k^7Vg
z6bJ(WfGJIjRW>s!0$#Y#D@FggW5mJOPM&}AOc)%jRdz=`H|u_q@AYrvqYGEHki_qH
z5asE;-LanyL(hf`A*r`Sh69X_P=ej|c#bqB^pUu%e3299?hu6Xq_6IYAE8RzzAQ8S
z;=FJa0Z%O%DQG4ic=@@nw|ATV9rr`jxdNH~T7Pha38O56b?@w~0>dS|1uG8N$kN6J
zh}ch-=FG}96~su`Rmvlrt1YmL%1`!xE=SQ_QKJK0iZ77>FR-_1Yvice$@_?2Oocmy
zy@;qnxVOCFhCX6VjKBr&pa>adq#E9M9*7r>CXIYjl5luW*^bh(&HRcxDr|d6&aX@a
zh%G;s8uIRKm-8;Xl_;$YH^iRL-Icg57*vu<(at>OC)NXRsOz4%XFuSv=p`v|`d>{6
zllRPVp`LUa9V6U6Cy+8|1eFPtEi1iR1c36CE_AKTRu?^uHvhgBz^0H&KKf6**#Gvf
zlQUG6)nga-$|l{VhM_3<)Fvc2h8-Aaf2&JCQyP~qLc&2=rX#VPV>GQkw63E*K$bv@
zgzYKf0%t@RL)f-KA^8!rpAJEHzgSZgN$Y?Xn3$>|xKQhLX`u7rI9&{_^7C2l=ubW9
z6ywJ8XPNnw{zFLEI6pxX#_46~>OG7k`7j)4iBx|_7~U5*v{}kQEhsYG5gyJLoOJ3W
zVW>yN{~zJOA!({nK>BK`1%F!x^s^d2ohzs>jkQ^)Jd-|66^FeGK3l4Z5Q+gjXVX26
zb~rN((H9&k7mq|YjoFsCx0{~9F4tKH(OT@MN62LTp<$Qp#h@aM9wLj-2P@88*<*UU
zl0tt+gfw>H%H8gM`Z#`-ke+H=eVkc0S*=vzmsBG^8uQ{zsUe6RJ}Z-e2j9vW3J<@A
z4Mz>C7<k_$tn{b)Apw2dF-a2cfGG+*@G;4Sa7m4X?#pF`V;l``ZqY@y@{YJ1EaU}$
zAke3V=WA|TX}?v<FLMillEr}qu!^t8N|d&`O2lCuQOb0wH&eoqdYxONBRQr;$wLz-
z0$5+u(5Sp}w)Vv#arKB)5aHHaSx4$h^0dX8!$=Oo>gn8WkCWhiKkby}Bq(~O>eR{z
zaXw)93z@DcueiL6Dx32ik1Bq@X;eQh;%?neE_!HVXLS)YUj|#hm%!J;(<^5W4d0At
z2XEGg>u*$g*_JNl)(V(&Zy7Y%WK+YFVwD>5-QD`g^#SW7MpqXXgjRIQI0hRX42>u$
z#A{CK@hHa<fAePBklx#5w@tryGLMX=MecDF%Ry(DMJSMm?sD(?Clo653^U+1I*x~n
z{_f!`n!`Gzn`A8A)2PR_&n2m*I}YL(?t=uW&<B(5-gCmcjie28#(%1IyJ%;xmFAOs
z2YrltZzVk{g56DunU$>}ieX7tyE)d{YZE9Oq`LRpu4E+@r1g7gmj5eEX98jj_v{=(
zwpJ&@3|rWps0dJ54q?Y&;_AFz{H1~PzNp+jzNn~}sT@O8H<@Nkrh=)n`RHDx*SCyQ
zk4*Z2{-@iJyJxN+^k?ZW1UtdW3@i^<=Nr(iwu_jrg{=Oz3*@E$E?BmSzrtTXfjr+r
zN(3~GHxZ46IH$rWLcHkH5N;o5sEkJ{(E%jM8kfl_?iB*eoIqVeaVBo6SDgq}<%=|5
zUcrZcd-bdO$P^lk!&izc9$cI~3i3WuHfkcdLxxXYP*9}HET7)q-uiu{K1IgA6woAW
z6ZN#DdJ@Ox@Syg{xIc=k34)dH1|5lyLpHuGB_ZL^Aq)9+wOHW9fF!`GZoNpDKPPyE
zgjD0t3lcp2cWzLg@H(@P#6^d4MI0IX;N)<<;QjbqzjFECa~?jz>br*ska=wnW)spk
zkhD7XKc-HllyK0_!QV=47g1SV%BZ;&0ri^foTysmt?Qwz4KG>*!G`Uww~W+EXuh)r
z3Q-fXNoF?SD))Jv6jsL+8IW$T@9*^%0JceEb}X}~M7g`YolT)*xB53cNqdQ}K+v?#
zobf`rIl1?%v{5ekc%QrMVx?{@B|+wIqO#1SK*K8^iRjRnOp5CfsYSK#W&1kh1J!FS
z1{8UvC+~bf0s`(*hWtCTpAd~BWxvxMtf?-UN(TL6LqF*a159E4IN%l*3xFd5R8T+6
zA@-TUw11t+Q&a~$zl+D8YCyKtbe7O4#&+TQ1pNB}ET_<UJv!gVxte$e50YACe;H9%
zM*0Eubas0#%w)Sqaf$733p~4LSAMvok2m_d=!Y@UbY{;G4@!db&&;k$O?8csX-sBQ
zurY-_EH-=1dhtNLi4?@jxfKm=RU%#uFV~colvWevBxh1>8$ddWaz!EJ41quf(b}}+
zkT_R&fwRL=EZ5D(ZK(_|(n6!gZd?oNJ6Rmue{mkvi1apxTU4)6CF9K*@Ym@QeqW!s
z;P$gUmORghL|uI6FkJqZ$IHn5bw|l$d}Bjqu?!5)%J{woNm@vA%0h?$(;%Z^mnOyE
zQLgESG(q8>^_8YBb+^50=EG(9hBFvz#fh`gE;-D6UkOe7fa;5w%RC$fKwy<&#2N-!
zX!Ql;{Gxk)OhE5d`9C!oTtTFKC9p3W)A?Byd7u1{NqaL0?t(e^q^F3P?C``i91s)V
z6kd}`CIS*mze)wbw{(-^-+yhBWsWnOJmmz<%y&x$`uGF#lcH%3cI8qk^5`4C5ed1f
z&{`$laKMnK#ph``01DNE<cL)F?q2~PB%QAXpGBBru=9(_)c$V23v#fa++@jtI(<*_
zpQ>hg7i5BD4#VEp<2DT+;Gw+T-mHucu4#~uKG*5H$wx(G^Eb^SE8#Lpx_KG!n|t4L
zGwzKyp%8Lo^*gHtC`ILBHjKlcxn@^oE|Se$(m0KPfN;HiXu>AXH;KX0kG2<suRvy;
zA0ezYiTK3@yUb;<XV7%F?!YN7TtUrNdSpU3f5Vaoe2IC+P!hJgfR~1uJ~*4mQAk}P
zgdj8Ga9ETx3g+4Dgzn_6G-7zjS;FA1dcUNrx9K-7ysMyRKGg`+=<O&CzeMx;Y_(aQ
z&Aj;jZ#Ylb_$GLUTn%inTmmJkMwLh&V*MRM50F~?^K**$a1a6v1=Ofz&iUf}1i$-b
zz?WJ+a(kN(bZgB;=~PLHs|**sD7M&_V82d2q+P}Yts^FVy5W7-4_Vn8tvjxt&$Cpe
zx)-vZkoc}yC}N$08$-;{JkP4*#--rh3t;JwW1@9gPTn&chRPiX3eX#nP+rbRQM7hP
zIbQPcOx8H*R1g+kTt)(|wyIg+dm@>xY`+$B`a6*avJf?D(++<k;Z|WA65TD4N#2kc
z@L3tE0rrR?CIHR-@tEpsmmv@i;a-yy1<btG@P{c~y<^6+?13(2THBh3fT<M|P$P5t
zCY5R&f=xfy)<)IG=It?!HQ{|nl8c`Kz5{<udoEj$77)<REI+)~bmt!x7)?h_1}(EJ
zNL-nwARi6Io>HaA(xGhJhR9D(6Q}&1&z<bltX%nFIiFiBe+9hH{=w{x2Iz#t@TxVa
zkb)XZzKe<lK}%o33Gy{#k-!rPp5dw3d;R;g)>5L?uYvM7|5{-pyQlK)j+GQ8V6k$o
z9HcbkXE719VXQwM{z#J2BFi0q*jm%^0GrHgfZI#a8_=;OTVw7D>NtihaiNuF%=>2P
zlkvd%N0NHqvWVtc?pP8bnXjK`+^Cf@V2b3@ntWy5x?T;BK>ubd9<KUNpK3n|9`8#Q
zRLsL(CaFhlgWohEXP%6?ggh09$<zPZp!!iUDG35z!rXnG|L{A=I#<nEEB1nB1F5Va
zrB$=tg-dR6Lm;D?&bdsCzWX%w&PYJj12&{ALN14LU<m&n`SEg5l|oA0d}R1;WtBzb
z^BZxZG{Ma*b;O+Ori`c&c+wd1Yjuq!E<@bA?`57$W`mIEY>UlLzE6_6AQ3b_DYE}C
zc4=a?yFf^yuo}Nna&X4cg55ir$9q3MoV|^^TsttKwvjQa**fYMXuYa@T(33Jm!-I&
zj4VU1RnxmzmSMI-mABgDH|QeSyq(bTFHVTp3aqpq`S{RIb1SB)-IjZeoj#gYaV*<J
zA`bSUBBAAugeKKExAm;V_`>j4?NBz;!B1Wm?zl?1Pg5;Uk4vyJD#4p2T#lRPj1@y!
zTD)4;19R$Q^Uw*JOVep*r?n-Rhh^Co>-xLnC?s}R6^Wi-2WEJc$;Z@zgq{D0uvrX|
zO~^0B<}c1v1Uw9fqr_xBKlvb|A`gCiZsEd0mhCe9iL}-E{&Genv5pdyB}x`gLHc!f
zcTXim2=`-1lr)k)g;@*L`EWGAI-itX0J+0A=`WJTaZ)^M&i(}ocQ3_`t~O;>yDtoh
z1X>Bq?ZGcn%42DXfu3Szp&*wf2N7~Z2D%xf`(xmApF5+*TtU!iQ8J1X4F#SKO+8cR
zBcz%OIa>kp>_x{OVJ_<LOLiH)YNtVv;(udzJX%7sN*L>~3gz$R!|vJXZ6YpY85XU`
z7#J=_3|BOuD+UaEKmw-XAWXfN_^mQ=B+=#K@c4N2@bK_Y<W`RBZ4hKe`x}7WrTyVb
z^y>WqOOq4W$!&;RzEJq%<Nnd7QQacgt9(jb!yYjafR`dtZQj*<i$K2>OW@G%{u-Oj
z$=&R#i+L!Y?D^F_*SSkoh5<Qdw244Es_`NLU4j{fj)=!sZmb;ha7!%l+!J8Kji@#N
znmmaim*IVTwzMnXXCb?G9ke54%bb-84imrly<mlB=y`2Usm6l&dZP>(wfCXOb#|+>
zaC=KeUWO72;stTFkP^$6XhrG#m9ZKsn&_g1{~fk@i5p=B1fB)OO!J3&t6F0+WsshT
z!C|&NNST&J@si(O$`ME7>$gXe>G_?ibu@Z_iLA{>4iFr4;s%)dBo*w{)|_}}T$n2d
zQz4-Y4vgsd(*|#z!s@?Inn*^oIvg)$CZ+R`oync2m*&3v2SPtgTmDt?LIhwkl!<Uj
zE>uGDkoGbiOYHdPrSxqQyZEd>zXGHNeCmI|B>lI0!ni*~eJ~(vEKaQE{PsMJ^Am-7
z3W0?GZthM0^(QIsz=f{o%V_i{QhoU*=nLPO7p>sF(jzY2v&ZL%j>nP}7En4X7jStH
zu8MWBUaS6AMYuGxC+(;R+?3hTF`z}3;QY+lzXOLUcoIFU;Oifn*M8Kp%){gSg!Xj%
z_w!Em)yZjNuIq|(pq*5dU(o9#c6l9O>p4mjUVzq+N_p%IPdfh|JInMdKFkP*bGz*t
z^>Tw#HV<XvaBOz_i26v=sbjiQxjl8r7xIPEAj1iH|IO1{xnQT1eUk$Mj`zo_4M{zP
zrAO0A_}h79xdX8_=~#F(h~tlY3i1|{gkY&(LW9pn8#5IusuDLKZWay=MO_gifb;J(
z3ugOGJDT(qR5t&r%(FL)9s8iw)@t#j?9@Jh14<=Gj$LJM0ZjJvT9y9_E<e&30FwK4
zt2TqYb=S0HLEd}c7F0~0Ph;FElZ}I3Z49wwP-bO58?=Wb@!zcpx}0JY9G+vyQ7n{e
zhzDht=L_eX0Q%rG+<e9c(NtqL{bqte&AdF895;b^n%4XA@5k4@hoaI~8bR|7ue&YJ
z5ctss*Z$+^TXz`DtsNygMG(%ySa<??t)>d1`)tyG+D_QZMH3UDO;x@ZB7R9K(?{u;
zgmD%6Ml2=lvA>ZGJ1_2u|5&nAV)z|c&StIJP?+--g7(;SztT>^NX2HGdDFT1s-d83
zB<fE5o)Tk$yBe|CYPLckh&vcdJNH&2)7<hO3qIA}F2{fYdK%T6lv(_8C<IkMT*qP`
zngjJW)N;D~KWapRan*LHC_3Pfa4-heyS$*i$y9$Ia!Cjg2z!NkPWCx$g?4qeS-~RR
z{GR`&-fhQujG##&rOd%GuO&PA@`zBeBp2mc{+LKTq1)Szl4&#W-ul6v{?Ij{9f%B1
z$W{Bkd2-Gxqul$3&Oyo_7ixxWk(+0O;R_obXwyQ__7i_!T5F*UC4&vkJ<W*?5=sE<
zb@y8ND%>Ip=IL?f=liT|{7p(BvOVs2K@}OQ?s`-KH6UxgNG*^CA1X2FHc18~9-*Mr
z-npqCwHNjZTl4~$B5c;pAF3qe&v#KDN0^~367`8QC$JCI`AgJMvhQ4s-3%S~H~to`
zlIwEzQ(XCgVNtjhs}l<$$-D(#u1=)!^!n+#nNDjeR~q(R{M4&y*Aw?+wy5Zyd67qd
zc0U?EzqitGYPR432D{Kb_H4d51q9>G<K`UvE1!8#w^B}TV@5!}wT0nNv-Y_lNF8s<
zV+-|}V}nNL;<PVtaXn<@3t6cj<kpX|60?~TJ$lg6Ao`;>-S{UFj1p~2K6_1KpI`<f
zi|RZfno0-5h1zwzc^ice==8z=VG>#>ayM#^MUd>S*rab$bO1^l!$<TphKg$ZX67%s
z1afkySy2&@!U)J7-HC?|j>-=-P{lqWo=y7jaT#ZCUg@-R_81|43q@P$+^~M#;Nri{
zd?Z)oMtAOc8^;IKzM~}Tcee52bZ>42&n^Nh7PH?)ShsRCtMzt+rR<|Lk#3Fr!JJjv
zwSip_RMUK1Cipf4XFN*9aL`FYz<bTUS+z>{(loaE6NPJ7Su0|S($x5z-*O&(AIQ<z
zU%LK>VeEn;$5n`UL&U*B`tMCw3Jv}yMB*PP%FIYR%G-{ih;)pJamr=}nut-m>a<MX
zvr%t4Uyiy7bx3o>M{2JDZ2;@?VX5z?%bAzVO3hKPGH4bSDpZR<G-~|VQ%tYsT3c5d
zJU$#A%CrA&KFmJ(<6a!p4tF=(7bv#7S9CQaO;#%5@JuA@+*;ko3D=hjh1QuATCidF
z6`#2{*Y8UM;7VS(et)@z>hAw?tJX57NXM;5D;9-2$(${o;Ni4i>j!>`$F6rf(_9_o
zE=H9Obo1iHb!m#!x~{j_Zs4dHuxgLUjveylSs}zY6e?-(*2{H$0P-nPvP|qfcu%A+
zWh|ZbUglF{>Rhbm6s_;$x^~H(_IWJO=WMqt5nIaR!z}1sp@sY~3?@gyBf9*FBig3E
zJOVwz*I=`d3U~2(oU^F5Ub)rN>;8S*;>?<p#r<7|eW1Q?SrKfHa><_bQYE}zj|BX;
z$#1g;$C%FIUkY*vd?sFNnnhVMD1%UlD+e4Ci)D5e?|U!bj=PFu=BeAab&(DS>K^A$
z>L<(=y=n1vGx#cHO75F&yG#;hZC(yDIUDTHa92BR@iLC2Xk4(yJuIR`s@B}5XWmjF
zJck+50oDRn`wv4dRNn@)Do<d>>c`1w4PB!Ge&hQlzhiA<vxAKRY-vsVJ8Wb1N3a-c
zcUINz*rx<_bY`vkA4b$x;U$4-M!>#E3q#YX?myG2ltksWl2IKjrA}l>sAy5Wft^B9
zLcGbiOj#wdbl4`3`G>}fri-^o+QU8(11nv#6?)Py$9<0rhX;-wmO2a%&O%MMZa`CT
z1z`0|=gaHe_q~f1z3y&H)t8{htpY!Ogu{t|1}Qr?$lrwh2by93&LL^C!S*ioJ33N_
zNro&O{<=GoZY4ty5No9_6LkyN9tt85(*9^jrMdn>QVUV|-|qqU>3fwI4h$CH_Q!Mi
zw55AN!i`-YV@#zUU)tr2-P&gsCZvo{(=j@tYXi=@OR@IJwDPbYQgJ!ud|2kBO)f)W
z$;;XxClk(ViZ1telZr>@359f?4dtgM+aa!|=_?<+g$jR)Y@=JTp?t-qbCV6z$v`SU
za#tpzS|kiN3v%+;G=7zSpJ?}jYS;@;)>YZ?lDU;M`4#BlT}h<*LlBy<SXy1WVW76U
z|ABeVpEfe2#@*${tudC)(g)rM-38RWIPFk}twTTgV+Y*>&U~GUL&0s1c*bY@m&b43
zuT=+kCqv(KPe@D|QjTuF3#R8vMka=Z&p-<zt&b)=X2G*|A6Nz=t6UgIwOF4^iU{+M
zyF#{sG0ufnaa)Eck^ApsnL;ig%+vGbrjU?udySVsiPW<d-Bm1c*wPmFo(|y>s&TrW
z@}yRB#s&trvI@F?EayPsth0Qk7D4_!m?n2aLmczSZ+eXm%G~R|nL02B82KKLeOMg(
zB!p}>L{-{d<8@ukZb_n-5E0;|XhE2|PODg>LTFCdpav<a)w9uRYh-CNF}Q}sCj@ug
z$M9gL%JN&e!P4Vp@@uoWUJmy!-86lr&ewY_r(W<-!%v-$m&{T(pRIk+w<Vx*AMER?
zO6J;}WtLm)4Np?4yGr9lKT_Bd>CuO9mlhsVRz-)k4Bw8h^{B#-<y?FK_}J3@JH7Gt
zHqA+4lCtL6%T$_?pXm1%FhkFz))3w4tX<Ih${z$}Z`+;p6h9LF2$FS)y}TB`@uNT0
z>3;-n$Lmipo9cj&7k1RFFNs)e;M0BxVGkM3o3hWrV2=CuV@*ijk@vh;e!q>sr($8s
zrHTSx3D2#C(4}{Gii#iL41+X39&XO(rnI>$b`I+oE_9elycXZCkRDKPt8U22whWa_
z<`U7zZE=<4!9?+AdIF)xM|BTkRQ7r8SJq1Y@7Mgm_mv^~D8D$=T_NO0M`D9m-Vybt
zk?*UQ0Ww1iNm={NNh#XIEbH<Z+k$sL)E7ekAk9(>d`}eo@U1Q<HJr$z=D@k<`}t~-
z*c;f$T2tdVGG@y^IL4i@kEZ~y#lKvsPT7Sge!oGn)%)%CHd%Q8_#IA{&oHicH^^fv
z@2L0{nQvKgr_QL`vJbpLVUEM)i7|e)-_)j1*sM&D?B4gxX_M%w&le^5+6q&v{nqzr
zyKsqLf26m`GVY-<G%0voZd>CrMqapft?&>#7xlx?8L3#Y`ML(hrml0}^l>vUr%Fl8
zKH?j#?=blBd-3z-Sn)aUxzYpaAufcdlOIcE)@(<@9M4SJ*za`kzI7QBo?jDpLy^~G
z3wk9}5<atA8ku9~?UE1Ew3%%q3InQ%i-L)ih8+Ad4MuU-ed?$@YRIy-d@O{`uDaq>
ztK@ClH7jTXz3QvZxB}*@{;G5?t>1888MjvF5b-X~%$1+SsNei<KGx{=6KZ~|74(F1
z&+`-|cZ%pXyM~fCW8tKwRs7e;*hMss@Wn80f;p9Cygz7{pWR4yH>O$4`bcPGw>pZM
zWj^qEJsLSuQBG~evTpFSB(sKebgt;YNQ~9r4Ds+lVXXg=)9%Yj;}T?J9Xhi<p3ZZ<
zY&|;chPTtByv!910<6QL5X654T$_9vNmcBBM@}oAoOjBA`z9-PVTCu2q;>n2kp*2P
zJ<AIZP=4)#yK0M~*JPA$Z?Y@K=0es?sTxhQ?C~utG>bfPH#adMI=JzaL#}arJ2JX2
zo!U79irEnn4}rLp1zP#QFRxb(8VyZsUJW^&d7#m?(G&)04F;`Uzb)h@u5M+o=e0(U
zZ^ZlkA9h=kdM(ON!KXB{2r2ZcW$Z=PH@CMZj~`7c4*CL7`>h@6`t(D)V1r7CU%c%q
zC^>gez9mXUpPq*F7j>qBmUEQ_v|HNU5x-P*J8_<J6N_EjK@{b+5xiTB<mRU~l!$Cm
z(968c^$1gL`rmL4xQR#x9y)!y2z(Y~OrP4p6A{f5@P8V-fz&a=V2pA*Zm!p~TyC_h
zL;9Y<O<vDrC|Mi6Sv{feVDGt1M@AL^SM$0z9Ll$o`b8^c9^d1=b+QH(d)(`r-6974
zkjP@sht?IB6BFF~mXKOV_u;xYd5;%T+H~uYQEq-4!l5~7vuaSL22pJ~kJWLKgH95%
zh=D(o2jb5^dNPmX>1dqdC6RJLuE*N}sRu$OJcnG|J-$nqon;!C4;BF1PSTz?JO*J?
ztyZ+Mr{c5#zfPZ0?+B`oN8y)1%$0#8d@-{059bN*Nab+u`g=Xc)hE=K`?Q<|uG{4a
z+i^wKZ{@ZFkk9jb<6<-pr@v_77h%@KU8RtJE=f)I{b#-3LOq(JJ2?d)??Bv1e^LAN
z?qi&$F6S=YM`xjN1Y~zd*f9BjRS~}$4xqa%%aeY*Ycz>~XUUM}$&>ky1dIg7eaA)d
z+ou6T-{JB)5Dyi}3MNZ(i;$zoflg&c9QfmyqWf3f;L~P<5A?Ar;48|orM>c1n)#Ij
z@p1PDSD7LUqbJpNCuKqhD?$lmPdx7kAHt3|dHHU!|MTU=ze2;h_+V_|O`lkJ@#tP0
zDPFPzJPqCT`JjooU9I!XfmV&F-Q80LVU_Zl5?4^85->1YLb?+kOZ#okR7yzHc6qln
z_|R_VUu-+U*~aIzk2f%$a`9>TuD)SAs*f^{0D8rl`-R(*dV8$U=YLr%-(~bG(wGf?
z7f(GzoNpkq!eKkMoNz5Y{#J6_>{AN#B34c<<{Z17tPusT{5EIJldKONg}h;~e!;1X
zp9MTTp<x<xhAFBS9#W7WQcA*rXhO=~$&x%FC=^mLB}o-I`Ku}hs0f$Y5^@$@#W*VM
z;Q$wBtnV4mR@b3+-{YG9Jc6|<v}TuQl*=j=^G=6p!lrfox@FQwu!Pm+ipt%<Lk`A<
zQR0%*)6H6zs~yk6I2x6CLf~<;$f&qE*{UMC#bz$tKPKHIk2n1hsP?|So^weN>(b7`
zvj6B`7;}%IJfbw-FSFNZ*}~wRhZKK1MBtj=q$>oo!|d2TXRzPI<LpJK=hT0xguykF
zNat|isCrvJ3OSU+_3+r0&9hjpj}mNYu(ftTY+-&puH=m(n$r3k%*@|MmyR}YPqE;4
zb-|q?Vh!g*?S$x7)AF0o{X~b7dIxhn>~uLhwwZMe3UV%U9}lu)yQ9t=P^l-HLyEVa
z;ZOW>JB#b-^iHHZndI8>1+2ia=Zz8a`&zv5{Zfy?>S5fPzMbo$ZQ6}{y>wBrVr;|b
z-Zbj2tLsw+GS!r4#`;`LGaRA`f*Y&y=!~J)rO!4Qr)V!z%yX>G^$**&g9rYN{7~TQ
zxOLJA_;FM7K;eh{S<1?68~pc1OXk{sVY^^|f8{?*qC7CSZ78Z=e}-7k;ZhqBb7x)r
zFbD<W(_IbhzF%TEhF`28C4MQn3g3OYtj$5H>FyLFEShqjti)e56ZLr~x4K*{h%4|w
zs_(S*W|-CNEJEwOEE@*-m-_8x=<_5R!rUg>vf8(iWUtk6moWJ~#;u?xAY3XgQ^*<z
z@{;vkPV|GO#4fL9?W08ky)azw{R`6$B*(Ji9jCtQclUXrv@huR%a8b-@Fxgi6C=(|
z<;^kryCFO-O{xkP#n9Vpu>3cjgzIs@WI?`Q$%heNB{zo1AMZ6N>sK>FOIKuDC#KW_
zXUUCwO+UMq#vMJpNYID`$aC;y>(wkWE$6={F+y`%5LJeS{WAE+R1^;Xe(u8jXOJ#C
z_@<3ZIuUZK8=34o&zu{wV^&N6QbrvVO*&QL(Ru_U9ZtB^pR}Gd0B>kr)Vti^591Vi
zAg#i;Cl70mTD{sQOHVgr5KJIRDSt0cSZIs$$JW2A?vGi>17nJ52JRW`W_6ZRB;Mfr
zCD}VWX))G&&AjPjYif%w?@UGt*(7&L_`{I0vZ&;(05RGrr(EaW+N;Hi>cTnYDkXj{
z$NU=v1OOdb#Axjgp@5Jxr|VkmDH77eL`>T6f>G?tv%VIZs73WhD?vIZ$$zi0Op{hv
zwfF|8`fs$Apo)msl`XTJs0W<Qv2>Eu%f!4^>wVBJO#2*t9!qAbq2W#(xfUfV;pmN8
z*$;@9m3i4}8-5IAHthW%(5s9)ir_IZ63V2R&yo~=+x~8b9c#)mDRAJ88PvO*KtWKG
zhKV;mHd42hj6MP9kMM28#4FEK_ZoHJ-lQwI;99E5i0$xtnGo|($cOLN<G(3o(I#WS
z9rp^E%2$H%k}Cp1Rk<on0H~=y3?w~o%eAJ~Z=N3VBS?76g}vHYQ-?afK4=y=uHi73
z+*L*%=j+*%{FD+Na_K$HK8e~2Y9VldDW0=RUsbN3N2Ue*4mWE;=^>{m+J7#w6|T>>
zjVVe+KVg8ZYhMbKyBjKhLB^CKhHsTTa{=Vc#j7D|ulES{nBO%tBEH!5W(j;&VRx-C
zdz`#Do>LZ5YyW>-y=7FCZ?p%h0#XXnDy2xLba%JXHFP(U!w>>02m&G<LrHh{Fn_wc
zbEIQ{5e67);Ew0qb3fd*-o<CuywCgWy??b8)7F1hBD2gOV#z#)3BxHIJ#I66v+c?b
z%iZ-VOlkS27NOT)GlVW%{hljf_U{M^&p~yJ8x~Ta#Alq-94;0G!>;2g{I?QfA1X6L
zG4(6dt*_muTa_hq$pp^l_(^rFeh$GuE)he?B`Wc_x1)a*8=2Q;fce{HPH$txDjIr%
zJiN*VpGp7>Rvhw{p8T<5A`b`ZVp~jNQy~Kd`!3AKBWdF7fup<w)0v3tUQeya*0jFA
z@4gX#Y|p|*7QOG&WIa)&aVL@kQjBIAOvjh|Nv!o4G_J}~wu`B&Xy{BV5V`;kU%Cxk
zR-W%rl`o2|`rjqA&QH`e;9>Ru$WgNk$X#W_i^QDa*x|ZDqnU7suG!M=S5?d%l4t3V
zefz8Fy@yG;`+NtEpyO<>Ty<sXQf1SDtV?^cFh^cwa_w)WniA{e=<D7nhyB?Z?PeVy
zMV!hL-NiuJ*qHsPuujnU@TisIIu)ed{{t3+;d8cxTMCny5bk{+e29Y6C;6}7g732h
z<L;wYp4K*fZ5s~UW4bmNX-RrYm%eqR^sc1YPs{bJnh$yj?Z#h;IR7k-$kE~R8~@1E
zVeeZ7{JHrY0@;t34$(ceebnd&<~UF|>EJf(3?~&VC`u_RR(__tPRRHx_-EOhu8y_t
z4m{ko@DPKc`wXi2{Ou%L3jOv(9+jicA1u6FVglcXxYL9c|JLtu?;>-yjh+MdV6b!U
z#tCzCD+H*OvN0Ku9we}N;KeBSS%@pM6h1<pmzm6qgY>gXX;DS2K@xp~+l;w{D{Wz)
zOtHigE34XZ#sJuR#a@wxud*#ij^RM-WH!I)g&%*@ue)Qa$PCAV!U4ixY2>qC?x4Vb
z9bt58i=X<E7d|*-x3I~cY|Rr38N!1XpWG`xW*#e3Aqp)(7qPgA;B%OR?06xADf@(E
zf#)X!#}ym|iM@jE|K3<zh|i89`NdcUkE#Uf?rcOmu-+uQ$G`=b=t43R?MMFiof+l}
zpa(sU+`tG>E!WArV3>i;PA<;W=x$TOq^)-^eVBY9Q?BvfYoGrZC!ZZ#eA;^zO;KJ$
z6|Q$ddvkMEIIr+qg=EyjftXdY-S5MM&8@F%phUVD8pu9C7R)%BC6&A$iqiZPSX6=+
zdGC7T|4wqbxp<Ba#qfEG42y}dSXIjYe#1N!e=Gj9-dIkTQg(gFTBRPcXUitN2!CVL
z)gjt7u`VUF@?z7A=^HLQOO89{Q9yBBkpJuE7`uEK5jl~SuCPODd_>=`n-eFr48NMq
zgy1w?owf`y%3nLzTW3<LIvfbreoZX%5D!i7G`)RZiN1sf8SH_xq4pp{&<oxbE8nY?
ze3$CZwx}AeQw?qj6J)z_#}x2%ST9Lv%|+d!h>EHsm%W55EfZ0Zui?ISKA{xY;^2_H
z*S9)w@%P>JZL}Z>lA8OcWyq!X%>G)lVTtXfhbq`mBz2?X8`j({+8?%iIb=)G=UxeY
zkEUt+5dvwO?vD*E&DkxGg}~fijUyz{Xm&f$wGd~tWyn2Y{o=dT^25IxJ<r_-%9|sR
zkfvXf)S9nD1H$vEh$90(70*_CH?RBj=`ZY;SsOpYK4LiSraaim%&P&W=mjNyP2J+d
zL1NL-yKC~Xmfqm93rh)o8!n<-qTC(ZdMMp+OKRPq!ql`26{=Af?^)oopQTM_;K;YO
zJ;9<W&2P8ID}NW1%0kY*&kNmpxD4baM^d#D?v@v1tBl-29JEO(pwvRHDi}j|KC@=V
zr0)WtxVQdmWq^SJW$@oF+=hTtYoXPKh!k#s$s#8MbLajU<M}cC!HrxEl2*F)t4`rz
zAzzWO?BnlmcR!*$3-ESviU2uqY>{QbM9szSyM9<`-i&sMQgUKqDMQS<dS73iCzv+U
z^T9B2huZ4@vH)~~7<P7Sb!pTW$u>z@GjIEdYzuTX_^Od2rdnd9A-W+KA6+E|9K6uA
z`tgOM8kEp_$(y7C@{`-q+=gIWwpc;y_Gx}6EEwF&ZbWy^dElc2_0OA)1(;(WOU{Ql
zqtuBQ68Q_7x`T0X>c9M53-^B3@os(cGX1*m<lgf{x<J|F--dJ3{YWqzPT)?V+AOj(
z4*^lgsGEUmEHH8Htt%t!RWQu779z2+XlOP-p&`2K1%jAkmXiIpmsf2y&r!W}nHiT(
zv%%9}#&Qx(>S9O>mvjCk!E{>Dx`{VeZrB{%iuqzo{f?JIo&+v6IZiQfXvuQCGH&&G
zBiWwoh;x!7iZ;%WIDJLou}}8y;8L8LGOeF2+-JMl)r+{&CN+W-qjfI$GFNxszd}D%
zJ6ASTX7RqSo{P?rV)FSu*Mdc5?;pR%m6?|2hu#N@Ql|-cqtfV2YG~aUeRZvGau-%`
zipFvSe2|hIWYP}7+m-K|WS?zfh_E&^GoM*@)_PeZbT%A}5@_I@{3idN$4-+*Ji~q>
zqbeHhGxz$&dS`ET?<dZNDAGKi(Am7?GW}mUq!+hhZ*Q*luy?8SSa1054mmKnSdrT3
z`oBWhFnAmOnrb@hT52Okk9`ro1#DszvZ|OEmd8L7)4^OOr8ZonIUn$LF-bs5iOg4G
zXY|zX(@xw2t6eAr2*3ZmK5R^pnH{<QDL{-mlB2I7bij{E>Cke>I^cPcbliGmUf~@n
z)DSqgcb0e*4y+Bol0hmR+GrEL)mK=d=h^i1elc8bX>K+sEf`e8KBnp8R35#TV=RGn
zSFbH)TTRW+mEg*{R`UO0r4dzO*vM)wfCh}Nj`8>!+p{;ZEJuw?(rA-3bpx<;_=(b=
zIm_paO~86qMEbN$qvYCt%+P15FZD)KWI9}?{XckSHPkk&x4Ep$|BSKz?5@g}u*l)@
z?HhlqFYg}Ex5V0mhXv6IL-c&2zjOaMFrCy6ls=7t`@Ba|^Scw!`VX3ZWm|0`yz@0N
z&H%39=-NwouXRLXupo6Yu1BdCqDYG-PP-9A_c!Imz+0GWA0Rw2is?hh*}VtaQkNro
zW&4p^tpx+6!Fvw^-e@sdnfAiev$b)s&uA1ANK(XuN;C}%<qlN2FS^QSZ;z!B27Yrj
z=z<4VZ;edTTv2sOS3Pu{-TV<U@*voCshw;WChQ!uBq|&6^R|wPb0AvGoIkz@saBs+
z{~CooA&Gi&I63d&yADThG;%fvNdM(O7-D%^x^{_Vr@lbjN^5a>y3XJIRmfix_n-Wg
z8thg=$kP_(3@}-#G_rf%s^|^#kC|y)skCuf?hMXUgYBOb`C!^0(Oo9QXMGN7{o5mh
zJ6f`U)t49?yQGS~Se|48#{=3LuDBWrRcDbF=g4KDE)MEuN+aH@6{n3{X~Ik+^|ZhH
zzPn$i(QyT$fJx2(j9M+0v8!V#dw&hZJ8(N4lp+R!6L1jtZteKC2jNQ0R~Khgyqk!`
zKe~{M*<>Pi8=JX5noJY|D>S#cruQy48wxXxC%gHtE=6U)U^)mtK*j`i`lLWIOw>KG
z$A@`3Bx&oX>Y)ycQ-ms5p5&Zg$JBVvO&f+?@%5US`zeSP10CXS-d`A6{M2AfwG4%(
zFD&ePB`%RITb;_Y8c_%l*H_-C{5<~S7|8SOrhV@@rI7ndQ!*fm<!Q&j=up+=_aC25
zx-t6bMR?B-5A$|!DsHX@Whx*ns>XP^i1ct465aL*G)Y&a4VJM!H4Q&^2<k&6N;ES)
zv-B|8t23<hd@7L`qqK0Rg=9|?RzF)VN(32(N;}4EwSnnMc*ZzKI^8b^hQuebWIXyQ
z;y(ad#;PEVE%>{Ih|tZeDfWW{hb%?;Z_>vL)z-VO;x0Z|^h~pyjjwo=l$rYh0m>d}
zHzK>9^c{G;OpB5)D4TM6vS?TktHwMXy~okmfFw9y5)5=HHy;d5`9^%9Su*KH3Zl71
zbQA2Nj<(?yGaK+Duk2?*l-dN`tY2;*_9@MNV-JqoQF-%4A@R=&G8(xXL)t6TU~l#;
zJ|xmn3ygA=H3FDvrGf_+M@x&r3DpnX(NPrI*iVcTg!x}^9L8p@s!OA<Bq4XxG4tF!
zo1Zv7VOL|5juO5*rZuAvcLiBTRU<g3xkg!PQwL|0L;x32Mj`%FuW;tKlJ+Qd(oIsy
zUrzk^*<^)<UjF;kJ8>(pfN(bwdLzPR;e92=Pu$I&7J87Jx}QiaW$=;i1c?_*cadZQ
zy=ilq^@F%gGs0{ImtLv74;|<mD|rCO>(NbJDt}q7bqx-r2Q^Dy%<3MjgAj!=Je`Y3
zs|w@#Z<L%y|9xu<Ddw{q{@IYK5KmdzHEVQWgV&h0%=wPAQUBBG{|vMPRS8LMVqb3V
z4ufL6uY3P)2m}qjX**x#KRELqFJM<aP5POt&Q_?)nu!>y5U6?{Kk`wls!oU}AJ~c*
zF|1PIy_5Wz(A973e_ZtJGLUY99Yiv^*So7j_n<v7UNHN`*3L~zoFmb%n11_VsR8)#
zSWTr;#?DwEr~7GR3etb<2714HXRXSHR1lbW`1TB#_4L`x4_P7~Qn13JFqaehNVw22
ztgNS&wlOpAX>Es8>m|I9l}EcBqdEw<BFvGAjrKg6*<<{b`oGX-#KDoyx3yt%as^JF
z{Oj&7MViEfsRU}pIDd<Lum2a_jKo>`1v{K8*EgWP!tAwrQQHx<8}S?#gr;b82j&d#
z_M5u@F3zTdr`g#nF=JFDfMc@qB0s{?B37f`hJiZJh`TEVpt~>?Fpkyjt@lpDP2_xl
zd?Ne5`A?MG=1QfmY)f<n@;mptv2(ldDrkaIJlIyzi)>W=OWd)EvGww+dUH>j)ztVF
z^EI)_0s7#Qv#f3dPnQMA^e`;OQcCYxrJNgwwQLyxjypGBG=?Y+iN97*wQm4Rc!mZ;
zdM=1kE$^ExFgE1Z*A;W|G?Lltpgp%h6j*rQmNLAv?v88VaSW#Fd04@J^eEFcwOP~M
zhPO`4?8`^&@x2Mw_J&<>dX4_WM0rl-yeb_NS^)oW(bFD(mxHj|3>Cp-+$dvjb03<?
z7bIQvy3A~EuOX=B{2L7HG(AYKi^-Gt!sg=!fma5b8_ri<XPD5|J%zUy=j?&RLih5F
zEyM|{_iRp({7y${31!Y_u4&DG?AT57!Y%Y!r1+!lk$-B4{JQRPLhrTEOJ~2o$jDLt
zUoBmyX-R$D%{H@VG@s@RzR=+$9jRyix|O`MSN_E{J3aX4TDqzV7ogwk@7)+h_0;NK
zj;`0?95i9sZ$E!N0=@NBwFDcfB{yxkG;|807<cXpv`VM21?uey2Ms>TR=Hezn=nIO
z=1k^_@%E)aB7;<l!68qdQ+r*#Dy~$r818P(=FFYhkk3}(v&lfv1~~LE&n8KNL~v%D
zbB}WVaTxxdm{PlISwJV_&#von3x<(l(SwZ89fui#v$Z1|Lh-HwxZ9c^!A{3Ms|8Ni
zMyku`+e@8+CgQTkzOVj(CESES#%w(8Po5&_xK-YJMCU<>7N4@;F*SLj4>@A=$!EHo
zB*#W#cIzEc{6grT%8=X3V&}V~M10cCHF>#XF~bkd=IEoL!7Rr&;#l~*Ys12QV%l}d
z7l*EHYiviGewNJsarmGa_VUZ5H%>Y_Y6%*jW+wQ+@oYs&ZhlscY~jy+!08fji%_yg
zcbGBN#&u^i>ECEJH452g4V45{P6icnZQSWFN8(+<O~$m;tKCzA>V)4cCEjI7KCXux
z&^nHQ<zG+8hzFbX5Li6;7*S`3Y=-Utrpgq_e6<I+D+qZyjPQ#Y6N?8ld@jbf3{_r8
z+v+H%5>+O7>T&*w2a8C;Zp*yeQyOCW-ec6oh0Lx)M&TXE^Ma;%H}Q{XY7c{zF;xbN
z#ZBb)!9@A7R;Y&8*Wj~Wi=&IfDXBI6x^QeI9jaQ5%xrGSL4_HI@!!*SBV`ws_i3Ap
zG7~On3Ca+%qVaPM9YT{rT3(kEtH+?4h4>B!{=ST7nel96>kih7n?EGe<WBO9)`>CP
z<DyM7y~D@QOlykv#YxwJLA12juy-8Us>0xWW1@!+c($kGa@0Xr)g*1gvbm!&K&Jzn
z<!#w=S7<|xR!Ano4+0CCNTXc4xc|VDiu{7nsqK}xw)=&q9hw0fEl7$KwRH>1DvyTS
zH6(l%BeLo{UDNeJaroz*b;ZdJn$-6xq#TQ+M+jL^&@}`DusEIO<2W12QU-#jahL4_
zH-0uv^&C}dVaKG_3)i1O=ug#ON5kJ>CU4i~OjMXLem&TdYII^twb!GgQ$x|i4}n!h
zM^s1){4<Ht-x(g*23e%<Q20vD{$B^+aF<r>ctOQ6S6YKf$3!B>9t>tm5<2~o@SGy0
zM2A-atX)A?P|zI#dp9x9gwnO&ub;j1o7+&yw8RAPGASu6s5t7+WqrKVhkl{$Rw=jn
zpaH+nkSxo8(5^sWk>&bHg4W*4GNH8^*?5zM-goH8>CeibQikOwgxp07eJ86dDE(K1
zLpD%Ia$G5JRH!)MGO)tK{{{ioG`Q3XzYZ0?*NpdUH(&pF7D6|X_(yKapqb#JhV;<I
zsAA3^K5LL{Hd%n}-MzdeuUt2IOH<ze^<ZzY4oDVCf6>qh%(`)|_z|1@Ar$e-xLn_R
zGbl&->7-&KcfIluY9+{^*?BG7z2&+o$m{%RtMWJEV{PceW%;sRsgB*nn4NiySQTd3
zEh=OD0TXm;-J=<Nq0PrKW<m`x*p`UKWunbGc?Hqt8Iv-f`JKETZ#RV(WoZ`vlK9pO
zE!M~_=ZVjdB#g6F)M9o?kDm`jLwE*kOnwN*&q<6sl8&;l^nNVezOym^RKY|sKUXO$
z>eMO4(JZD%%^SuJ3yN8BA2_DYd8OIDtL42~EZkpMFbU)cPHDbqQZc1edJij9cOd=P
zLBx<oReNXGczE@F58<>8$4v-OF0;IE-OK(>EPeOEIAvno9-^xB6wuqRt{~#^`txkX
zxsDGfL(;=;riYPPro!pzDPzhme6C#CZMk7;D&O77xuW1~V{#_lj$9FGNb@0HpsVA3
zJ)FzVRAjt*+jMnfMqB!KprM5#RhHiqK<JX99uu#*aT*UG?Dn=*I}mpAY#9@8+J_80
znAN+_R?|TREfFNM#w#9+rne^f{dse2HPwMv&cw*vuVXSUyPl)mTG6P!``wn$zLkeR
z^YTo1DHL>BkG{gDgH|e0H@oIHFODb>WhPH-Y~Tzf{yu|={FA#Jl$BSpyEC#*D9POX
ze%IgKQI&}<`r>Gw$QA$;_`V|;n{V`J!O704C>54)^CYE>f*IRc?~9Fv)uDlo*VvZS
zG7i$bvU;FaCD-ijS~<?mhngG^*JoiIWMF2T%ZX`==i9l`t$OxiR67@nW^fZfZ1oV2
zPX+hxSa?Bqeub&roO852rxKDW`&w1L6?xZar#`ofx!`i)#Q3JRJ=&{mJ{~jQoMAu=
z&spIT^RvkUL8qp{C4MAlzhocnu!DMzSp%gVO9x*F<BpKmM7UedO}JZO0JMAGDn#yM
zDX(;+j!>`Da=rA*gp96+buO><AQYK2ZygmzV)Js?i`(q)6St*~blaaOOp;Sm*)>9%
z`XJ8qupG8vW*Xn8au0rauxdR0kg$Hffr~J9!VE2`Pa2qR+YHSVIiw%-lGzM2O{KQs
zN6qYBj{gASq2ZyjYt&KnP1kLviQ>3vOK-LObVomim6G?W#I)xT5UB#*mHoI(RnBe|
z$MGjiQt?C$amEI{CR#RrIW37?^=bij*DI@~UePA0(u8|swNDceE>pky(&CM8M=3}u
z#&g6YhwBtS-_iyAWH%_YKBkO0X<iGsGM<X-TcQ>7ufH6LHu|r<edE|b@@Q`qe*M#>
z?N}aVO2?rf5ZV*lJPCA_bf6~Y489yvJ{L7j<BI^i_aJhV6tZLmBmSUerZcf{{qjo3
zVKiUPFl=~(wj^&_U#g3q5MRK<)nxG*K7a40bqT-coL%I-A&r4dv9#!<W$u)rNa+iW
z&W0k-2Ec$jqx)BIcnfVvOy9*^oOA-6^GbG{Xj6u+fJ-J7a~IxjYDdH86wZ*3$%d%t
z@=|r;oR;OXN7dLpT4%gpg~K>UV;ZaUBeQMnuW>4KLi*DmuSKf|)^4)Q-!U$7ag@j2
z?P*e?qKY4p%#H<5q2iK*O=On7NQw${w5P{u72#=PL*%mqGLAOwUj>8&$ykh(wE_VL
zKYZ@}NQ&00Q>|59x1-)Vdzv&+2)ty$B*kE`h2C0*|I$Q!Q-0UTn`Q|qYTjg!Qu1&H
z^;L7_!fgmJIkr0dhz-n?`YMP<$~M<7c{wIcb79P_H67;>AFp;KCbhD5fcyb8*Pz6?
zXZzGN<i}PVtL`J49KE;KLl=L^O)u|vQgeJRud$Js)aG~3Uv0Y(wqgP=d|A_@@MM{p
z4gQ4L@~1s{-|nb$IEA5IV=}kBfV53X{^QpjZiK<tJI;1H3!@X`m-K#wJPZo7Srsoc
zvl!QFSd?d+f_M)9Ty!p+Ug((aQxOxGHoF=ufY8+LdGklUgKU^7Hs&WF&2{}QXIQQm
zX45b2qM7xpNp{5mWfK1NTP(tg_Zl72H+1{p)FjrN!j-G;2^!bVl*ncY>8#FvrynnB
zVEn3)a1hN$v=NU#@uPr;2pIUPi;T_gNulKaUaKhYe;qvEBzU98Mc|wq>7tlEr$@MR
zZ#`%t0>dku`l3siYHFp4?X_~$5YXGAVdOn7UA`%zWn>uUR9JHgKCAH{#8C2!a0kr(
zp7VQ<M>#vJH&JJY){YqK<|1GE{z}uW3B-1t!Gi3(?uSbxAcNW<U27pQEirn@&vYu-
z1u#XeC(_MBPrB&Zt1N0pFfVCnCCl?oqEPm0!LDjr7T7`rUGSo{YqNq!G_|_Ud!B*(
ziNpr+A}vt1+7fe1=6nNFXQE}uq)qTXrteQ#BUh_dVV7T_N3J=c{`~$OeO0Ah&3#xb
z`cb2qN?}nrt#Tnl7TX4Wdr^}O=SzS-C&VWt>*b#h2ys80thlx!rVh+B??hc@3cy=S
zZ;H!tsW{}`8upfX4ES;BvtMgX?G;O#vL}0RgYYiJ@EFsC`~GSn<be)RHAbdynh1A=
z?;FEzB!jNnXG<aM*1&Y~To!SSEWQYKebN4qG+8u}p}5HF^_Y#T6W*2JX(ehtS6ius
z3cw@h=1xu)J&X1{jJ0duIzg(_a4~%6veI;a{2S`3(bs1=JUjN&TGLht3I5r$6xC9D
z`dHTouQil_t7oY31zh_B^$+Pb2uCpC@~!@xo+nDvxdx{ieglRdKx&;hC+&M$91(01
z#vKwU)6BPvLg4X{^PhH|WW7&-e5TKR2yg&fMU#N(n5nRl0G*U`1p5Bg<D5x5DnYf;
zzD63lv$j(2A`V}o9VAOn*JfSl@qL~t=hfVl-~?EA3XgGb9z1Qk@E*iI(w4rDvY*Iu
zhA8iVf~V{2k+0-GZBoV|Br!@dlBW0l1RZ$0JNF5^SWclwBDRmzhA#r2f8ByG@2Eou
zeg_8{?d7|~OX)=p7!r_aRKJ}Ly;OO4yXse-z(XjC;;G4dg<fMpkQ~gU6cU|jp54?L
z>gDuc7=H~zGvC<t!W7I26$-vTh?K}XBlv|-;#X-mxH)y6?TC^z5Wc*f=iRbeQ~r<q
z*9fJq23_orb5!RnpkG(v1r)PgVt)v0m-oO%a3+lb#P7~nK~-!RSUqryvVl0FGDonK
zswXQbz>5>W(Fv}NcwuvS;}xOSV}q3u*e6`@`8NOKt)%mD0IvTu78xSX4OeKlJQ~A^
z0WcQQh4LgjAjz2eOVrvMlgUHCKPte$9HYi%FJ+k~1X$z~6tbIm{dU{=9p4iB9wcOU
zCjRa#i*l5w`F+e41QP?RSG&1kvod5esh-05kpV<9H1Z%oH$V|@S!vRUAzC0p%S5p1
z&Z2&HGn2MW)*eJ|^xt>WI7nuBQHkok;n_V(B~FXkv*^#AgQ{AR*S2c0L;0E2C7Sw6
zAUy)p!0HdRPj-5DCNJIEfp@mlg$U`vCn%fb)7ovF!o?@SuR0^iSmOsu_?C=@?;{Q*
zw35etUrYrNalo$AU*wcL6WFzL_^4yecWftb0y0j$Jm!JwI``QuzEOM~JZyvQBw@w;
zEmq5})((^~JkmQ$hS6hZq&&a79mKo2Ap!Wuz7|xG@KI3ziO7#48zq!@t{?HQb@8;I
zi^WjkR?RPXRyrgG!P7vBkLs@y=tilM&~`85f)mE&4;|>57rfoHO8(x^)LEGN-6#B~
z_GO!a6-7FntY#U8uMI-JEHkV=;bl&s9Ka>*qw4Dp(juaV$$AXz71miV<r^nHHP9oe
zS|~M5)!MZ|qjEx>rectHU&=8?JfS|8-twz-OlQ+<EPoRr-p<4s2y7L6!H6aQoO*RM
zwg}4^R<{7lBh#*`n%{|M%bufl0epG|2<_42Jdy|txw;o8B^-XZ+q#`h4z^CvO679G
z^bdt3?~hLJ&kv_l^)ClJZT=dZtd@IC^)*C(70L;|VT1UqXuKmivUXY8Rm6Y~;a02%
zEOE4&^~M;+@+q-7;It}7f95G?+5$~grD0BGBus$??8Aq?n~87u!L|QgkdXfi27Z|C
zzCNE#lpo#PAM=;Ww^=Oztc#ayX?{k@gJ<Zq=Von9T6ulL5r}RqoWGd+_SFsCc4NvX
zR9!2BAur81+{1yT{xu7cQIBkOqB~QoEIGa}m>cHAIXphksD4mJ)aA+%9>QxK14pme
zbSfyM&{y(@>xGbucCW-;pQW8f<I#YsoQoyOqaj%fb<*O8HxI}=I1h9Zld#!%_|^_E
zv?u>X%LVvm6WqLBQ>A-KfXRqsg~AsxO-^+5!k62OH8;(aT6T{L74$daU^BN`!rexu
zH%p?R6Kl$2=2vXQ)qy0DnGqkpVq~GPk?v=d{*G4Pp1m+P-%}HVSJY#cIZATgJ^Y+U
zK58Z^60~f8b5v13vEdzp1qRNGGR||^O@F34|9Q^8$GP2Ar3X%KT<s!z)<#!n#zeig
z+F*(w&__td<(}f>H&P#l%}Z*Ly|N5$x})Scq?&L0GH&hl%V;j;#WQhL3%!ksg6E1a
z%3+&!ieDtPQiyzCNk6n`eV5v4Zeq8KmcNk{i*hy(`W{z>Nf3?At!{ZIhx;l(1aX(4
z7d-(r)81S*#fFe7ygZxT_qwiVblHgNCCU5ps$g8a$>TSs#Q-;*fy{78?&2~9dOp4^
z-5L#Xe=QwvP?Cd%D}8Wi67=UcB>5{33G@ez<VWB9X8{$>r1~RGyj#SCy*}%o*8JUJ
zYP`v^U2Lm#th!BE>$ILu>pj*a9m}T!rl&jC&=~O`;d&!;Q`$tZPCwbZ953=mrr#y2
zg6=jz!<#K}=D&CQhQrH!IAa8n)tz_Uuiv{(H;8Kga;*BzKC-a<y3$OY?=#!+7g)%(
zu_RU#vXw6)cr)G;KDqmtBYHRj_Le0p;1^RA+0&x;rcWo~W?qG_uaX|mBCf8vvHHbC
zG#@3nbo$40r#vzn5KJ8l=w65++%40@=)qlsZew>+e0?@THxyHUM$xv$$9CFHUA=B<
zsqXuv#n6+#jw-^j0KiCo8{GlW<mefX1I)LA-wRSfoPaCDRw}U`Zjciat%dQ)DA6Oz
zdj`Lr5QZFTlI0OwmSBw0Rl{av&z{<drD5;gN+t~TX3fjchL(v_{nV8oqs!A@kIfX&
z?e;4U?*(;p@bKuMW?Q~bu!rTd#WfIm+2)TYN{}evl9*Wp`%3ys@hvS+c|g(KFx(L?
zj<K^Wvd6}vAxf%0T?{y_V`OBy>-o(s<8i|zKc;PNcSi~8J?0MWW=l(DINpQ2Uzm^%
zMPetfN3xU*GG?oDZ@9!mXM{YK3&vBkqijN%GZ{=vmEnHiIsfk!nX<&+B26%?Ah!3B
zJ#B<BkIH)<hJg@ByRqDRCytnxyR*95hHjTU1|jzN)ryY<1CPj|@YxP#b(8nfA)|Or
zXGbpnQTkfxxj-T9sO58n(yy(ngcUw}Pts9sa4((j6-XgG%BKo)8R$+A9-8P-PfEq&
z4}K5-^nf~;Qq?R<_{5Ctm1N;)m>zeZS{2@~(Edrv!!8*Ro+%;j-dg#%(Q&E2EE+El
z_Y`?kE&Wi_wC0)EE~xumuQSLPifYv=VIetyodtWEMkw96OMf33e{=flV&^b9#ErBS
zic3VBm-xk1)YejZE+>~i$$!lIPIJT7R}iCDm_&s|DGhku8sMI0`3@CI5!OThwx3-r
znAffsk`8dErMm4h+B(UbeLC1#Md-#1*AM)ZZqdAb9n*CV>T+ZFx=r>^b1pIsi`lq2
zNw{>njXe2{zD1SKFiZ?HYa(p6NcVneyf8=g2sZ>Rl^d++t_#ZpNzI=SzsP)R29vaZ
zr3Ej_ojP7WJ9DMsJ@UH2gahf3oIUGI&(Yqa&zNPfo>V*<Q)`aDmE`;B{K<5ht)tDB
z1aiI^1O>R8L+%)GPO&Cz{R7NbbeDA#w;A^y+Tb3R8`q~Pdr6kdKK92N)%t<$Yb)UO
zs#NnTFWncFGwJF;LkoYj=Arn9rWG8dJv2LD=GW<y<`0dBwIMb{?xzIxl4c7vv$9_X
z`HQui%Di_lR)MuP!_rRQS2o5M*DPf)Q{_pt;!QK>SO^hs(ubm>4UcTBTU4!#J%_f|
z)m)&G%4;hr%Skc`KkufyXD_=iAjO1&m3z2>AqQ81P6WG!Zo#iniTiKN8@8!UULJ;!
zL#lV=kM*eK9{fzd!6D4qI5(Gv_K@a+yYS^i2XBj-HQiq?Irrxe-onwW*JdBK7|IME
z0?WD+ANwPgyN-vX7dif#8iY3VCfuhzJu01kb~%)_3+fWcc;oc6&alIKQ9Sz#c=chX
zP~N4HJ5<c~K-SRQ8+<{{F^(NaKGgxFSuX2L{IFi|CU~Jp@Lq*-G$u@vw}DFaZ7ReT
zy;Mp;dv#*E;LM~~s<hXEtc8c%#!2Rc$c6ff2hp#fMi8?Y2AoaTUf0#xsd$Z~acpe(
zUr$D=?TFsSqGzcU;Gx`Qax6!lfu;+35DtwVUZEzf?%$&w?pwDu?PnjV-tHEam^~af
z!yM1HhgJ<QsFJPZo%zh)&hIMX!D_7J+jcWt_A!dZqC)jlb}NWcGSx?PXYg&n>bC9S
zYAZiD<mTWb@W{SUGgiOFN4xLiH=u^1v9t~jvRm%Fm6YI}pU^~l!SjX2w?HaE3?oX<
zl_m;)Jr7OM;<SkSh5S?^w{yk`nkd9_eJ&Nz_czr2DwC+lZt|2RTf<8tg>=CB>Z%1>
zEowu@_^2}zO8aR^>TVqkVhe`RiB+lDiIpyU-O(m=kp|Fl#A@aq-%dMnfc62%8J_c*
zZ?O%*3v|Pn#ZPDB+m9utc2%Y0dJ!w_Jh3l<EjjVRif%RVwjG&{!}sqta_2-hq=5+^
zUV&(jJR#Bg$JaE^q45S7vZ?vfMX@Qy(OhmULvT)m(wOQka=FoE?(7ypOju)^LzMvO
zjY+ZW%st{M_B@Jt%8ik21b?6}4F`%^w4)q8Rz(hks#((%GWLDFAg?xQjLs02<_tMp
zhltNr0W$kzsg=tOtDA<`Ypfy~=^UB3-bGIH0l!(`MHu-VOg7p5N7MJ@7U^wqPPV8O
zWKTXJlbtu+=)4x!cKNrNoHON1Br$cxrN!V$hyCc8v1an~qJSoC=zR)~E5*{Ka_<SD
zg-OOlh89M>X8Sf`1JdSSplxjSnpGp?hGx$0ak^vx#i)8)K3`HpFvu50hN!;##ASM_
zngC!A>a}jikW&Xa*C~AIZ=~La75vtf!$`!e74O<y4vl<Uvcz|awQ}6hP1P8e8!YsX
zC0wj-j|bX!)*02?S0DCj)P?h>rTH{As1n1Es^52+(f?X^*R*I_idePz-LGNGYoZSY
zSl2=}XoYvka{Li<sg=<;y>F~#?=#v`jjRKjk!{}q+09NA0hdP@o=uCac(kCmKmi&^
zz8j<>_v$WF4EV&97jTjqZ-#)-ohTOqDbK;pFpO{{9O!h@+yVVgsu-m|@zDk?-a0zk
z5!Ev$ThfiUTbSi$DqQc_8N)RBene;igVc+_-V6>;NEMYP_Fq4DPj@<ROYC!oOpx1-
zG|6nbf%^#)EwPb&Ei<KS5g`!@I(}G`{z5hh#Y9~-9A%ycskBErriA2O<6nkmmQ4I9
z7C6V?>Iw(T!x>JoOB$Tk^dzOu2%KFhZ-7DpM*8l1&T2`ZJSyN0x4v#7CVZd8Y_~5U
zU3DAw?fIo~U4kqWlTr)^T&IM(T_sjJ`x>qkW|L00)+>e^jrqUs5L8rgr%cd)N))Qm
zPt=ZdBUL|&_$F1_!MD9)-21%90jHUhyBZM55+ZrTa(<n)!js6-W_m`#>k?!p;byCD
zM~V@#EL~!of(2Oi28G(A^m{*J*sH}l5jL-^@TkS*x=51ZHwM@_dqbh{kgIWz=Gj`>
zVpY4m#3lv=h73|5+#NSa+_>YbL6=PAN6#ONuQX8x=l_Ue6!#Cn{Dwozjg5(h80!O5
zY(Pz#h<j498Fm^&?`#+O+kLmo!l>6uKWJPuS?ds~u%a}j5D>|C^^W|f>9ez~Tk?l%
z%zK9G^|h<5hveJoJlQO^XK4~-ebxz-&~$U=(FT~O>DH^ux_lhVf4}9IB8G9nN;kFT
zkMAPO9nIH)Vo;(=Q={<ksV!#Q;D<=l_dFLwyEnW!r5RztY@5BxH^hayv0*&AgIuR;
zCp(^)8n9{^2bjjCCir(a#RJY9a<T!Hs7&4TPoXg=p>`B~qPHsHuHELz)={G-wD@@7
z?ZAf^oQ&m_FNv1x+$~eUbBC^!L`4k<v_>5XfNz)fj!ux94mEP8Ol_yX>z>DV4VFlT
z^836;I6x|M3mZJ_#{fw@8A0A!uOAu&@!wituRJ}?^?Jan?6Gdt?G$8=rMF4m_mfut
zVp$#W4;~8TTiEihiZ^Z99CoQdV;mQ%4knwvBg&o6BPB)q=d9~Y+rpb7+i7Wr5PhB@
zsKISS7Z&|RJ<*X5x59f-&q2Ha)iVtK;#C$AoOvzDetSfQZI_wq@caDxApauwUDCPz
z&r7fJCR)IX&1Q0q&25UoFEU_m&^A9=C2Yf}i+>4RcAcGS<URpgSbQ`Za}+yEH|o)u
z-*j*U)B+DCt}K>B5c!?9{cm0W&M{Hl>TPdKhT|KUKDd6CCv+HG0^!cEv#<FopN<U|
zGz&C#J6sxApx+SGls)bCeGbR0k~HpBioRp1+YjEIR^{ZmC0v<!iwcI`N1Or6-j7Vf
zH}2Q@SI#c++uDfS)$5<{Q4XwfyR}CGS5;#mW5HVRjlk-37_ruln45Qd)lT}oh<1=b
zteHq*s@vJ~^-dc@W!c+0CLT6<W3fsgamf9_fB>+2!_V6EvO*6LXhDCc4G+!Di>L2|
zy%usGrb7k=;()1A#<4YOTYD$x7r-{ky9T$si!N*fj2k<t<_(CtkeEsHW%mS1YvaF$
zoj!5}`s#Bms6UUFC(~I*g4+8VLk5U~qRWKX7Xy^IQC$zC-%g$wr}6}E^yvkkaYox=
zNlv|3tr*4hJc^=}EQH8^hU&z=DnPp<M&x(iM`ckGVoK6Cq7cZHMMZdCr`Zp%%RJAC
z>MsPe`|0J$;qaH20E7h%{ML+1h{{BU@tUfX>nuB2T}Qo{4|;sv$P3-Y#yp_+YN>z#
zskK0TKv`G6=PzUU$07{^CT13$<r4^Jn)X(0+B2a|Oi`^cJ3(-&m+o-rJTuLYj~%ko
z9F!g2@&ZGgZVx<8LPbtnY!1#3S?c__!+ez`))T?XORWkkqVbh9dl5YM%J7Ff)9)ws
zHlNtUSqueGuDvR~XAG(Fc3U*?gCG3kllngn3rh=UaY^0UPNEv#S6eNAot%1VNUtoC
zs@!g5UQfZ>VaDV4wqqU9l;omjul5}j^^Pr#hxK-ZjpjB#3=CX-F-k_OGLiSAB3yB2
zb+?$H5UmK_5P=mX1B>qz6=3znP+!;LfI7E@dyV_|UMr^O#}>6r^#>DLdDRc7LJQ{7
z(o!D;nhUr&hNU-ubw%Pbqe%^`+KkQ(J~(SeE3DVaE3{Oa2sp&3bS@#V=;`}Y<}=C!
z{7zlj=#uCjMrR~m+<afIeu!#Ea<74OFAj_MHRq?v-^N?2*9fm2md8_s8TNjKAEnPY
zZrq8cyfi{kZMeakXiNMsn>3iAg_tf*5%Ha~jE9vxC2w52cT&>$1vIg5e=YEGLpGu*
zFtssBL|gjei``>0gyUQp7x9nAJ=q53{T|{VN=wbIj%U5AYkv(W*2q=h=YiL&4W$BK
zD<4z?V!2jx{-Zov3pdi3vy<#H==H$FOgEPdKe_tVM>uysVOV|PeJy6UDH7=3Hu3r<
z6H%9ZV^eN?otB8#d4J;I_xOf4MnTyqW!ATslDNV8)Z9TC{-wI(jzN;w_Gh%1!#YFT
z=d~|S3A)TUa4=}jYQ8yr+qgB@ssFt6`XnK7sq)g-^|&^8@8nwHP^|J<1Gjm@XY-A5
zPq)(b5XnKypBkPCppa)VeZ7D>-4|1LKMp2L$OL?7RQ)l6KAjPvV;U}Ls>`7LAjQ8>
z;D|ltt{vORFk4~J6VsVbp@tz!j$u_TEpz!A?O#>E#pW3iLA$xX*Ll=u@=>FrF?UrP
z=|NKe)Zr9s4ZSu+sW+p+At`pR##dPkKA!~V7M4@Ec=1aoBgoqISzrAXId0%D0Tfp~
zRt%p0KG$qWbxB$Gk;0|<smHuxHOT5r%9K4rv<K6|<03lVFZEskeGjaenCHS(F#i5S
zT|K`dnSgus5gIPL!>#8R(=>Vn0_n1;9M;pk+9UPonn5G%Lt+%IOrg<#JLKCP+*v3I
z2zs7iVCW^^i{;F<8Ux8)k>YK=pPmX;)mux`2TsK~vJUkW102<*hHvD#7B8&7o3k^?
z{S~b*HtjYhDHnuR7YaUdFj%GGOl{KyOASm}SETow(Tg9d+V!oi+FMX<9J3W?^><J5
zm(YQ{J#9R+4bx!OvcYW95seG@U<2%B;d;Y33~Qn8ab{X&6E8kf^rN{V77n(ixap+i
z0_NV~PtWIqvu*em(f!eO=a-oroVBrl_dLL8iZ&eN?j#F6BuBf1)1Vo#Q-_gJno=R!
zl3YwGitWz$O`k$9_*WVTXjLAyZ8jD*{Kz3T(W@l<6?XE}U#Q?|?1@(gT|_Ga_Z;3w
z=@_c3DCp)Vy|%On$a<Ty1@bx7#A6#g%eNJA8^$K(!4msn#{stoDfd3<27tazo^G2!
ztL`;tTU2$MBxnQvTJeG+ez~ZJOGrO`eqpRK4g89k*{J*8eaYIBk?r`S@seN1I5;KX
zlk384xwc!t<QkXjy$6{oAS=IubLDHBwN*Vc=m*B|wi2}2^8Jph)_Kl>eWi)>+0WZ0
z^`8!hpPFPi^GHI=SH}!oBk+sxxPN}my}%lq4K{8(<P~tQ^B}F`ZdTrFQp0|`a6d|w
zg_{}C8iEly<=iOM5porD5CT0Lo;O#6nbjmOdMyQ=)S0Qi3+J)BPR-Dn)Zp>~p(7yM
z#i$-RLVj~qx_0CE{EEycEG%Iy<49=eLmrT4)L>oVTnIu=*u_QXdhGbz7t8c(P=yCE
z#awA{0rF>Is)I$l0jkWQY*m~r2W-b|2%oNMLD0caSu<ZGYZ*jSSZdR<jTrL+WJpg(
z4|$}v5YJ$!^*>hH^*H<W$mF*$UhAEetp6y~x;ivI>@U~GvNscfd=7`nA_xh*12!LU
z5fHb=!UC?zR#T5Ay}%+1o%Wh3kK&Pd8B`_X_4#jNmCl4?RL;0oHa_vEoc}Q5iJ45f
z&LofWNV=ARz&&aH4P&wSK9?+Vx>4T`81%v{!rIC3#(xwA)fj9^WtlbqZ~l3ocPe%>
zLVU>Px}2x{yT3i%FQswi-^^qCO4+kc%`)7#5zjYVap7%>o1j{ePSCUwjeymv<4xEt
z`Gx;)dj@sbmznh-bMUQi&*_>?3Zkj=<hF4&R9HjOqW8C<_ld4Afq8c9w6<Uj6jE3{
zzs}6ALA{ps5?1C5YTMXd$tolN<rct9^<zpMq{f+rSwx+AP8q6vKj3CVdjtzobelQ2
zvvtxUN^~g793TPr!v(9h5L-j_D^2cOQX|-QOctPVK1lHYaLt%die!anI1&M{H8Eh=
z$Vlr$9SEUJ@MBL<PNdqZo~V4uH2#P2;w>Iy+<Ah};dG)TpSd%0?L6V(-p?TrgEg6U
z@&YVCz4J0QIiW|b1&X2rwzLZx!-nef<&!Hk5w)pv#uGazwUT#(x4AT-#WWMyE4>_H
z4TY=B{&0c7SL3J*Kvvbrvxa9r0CngHbv3m6INR=e{rRurAa6ql1P8e7@)Oz|)(#T>
z=abAxV@@24d=|QV=#t>KX@d?dxwmzCCw+Y$0L72&c`8{Zp{Yv$hwPnFecsREFe04W
zXHWdPfDPYwBPGZ8LeOGcQ9<Qe3<0;bhYDI=7oES%n3;M%I@dvEtA16)LylG>aGm5A
z<{NTuKV`|e>hS63NX4rylpHjex{Yi!UC`4me^^G1162y9sVwB?SjKH@gV+{=7`z4+
zLaU0#>*@cNo3vmf6HOs9jasd%)fJ8pZ($}eR6Iq7=0HXKEyXuE|0&%li15Icjg5`f
zIC-Gdg3bz>83G>>8IIEKfKXi<y9MxpNEdg^?;n<MJWRBPEHY~-+Y>;2Ur2dx81D{t
zLLchu?X7yVCP3egFb?P%U%pIeM?3=Ui~lzd`(8OvTt6t8Zhh6s-4j?L(mBxV0qZ{g
z4^UA&VhdQ4b)V4BbsnHoFD)cx{k}4L%2_rsHe7^uO7Hb^K5)3yXx~iKcG7+dpS9j(
zW8pD1PMz4<izFS{>-#W3MC*8#r217l3QyAt`m`Wps^}ojv8&^epdwN^gThm^(=viB
zO&ZaG++X#ccrG+jqUB-EgF`!*5G0vS%<?}?4}mo;{_WTnksf_w>P$t6j1%}W{aW;x
zr_?Q7V$Ch|HMB(Xi=Mj(;}B=-dtBkEyY8=qrCQ(~%62UMcM%Q`v??e+v#>M#25qt0
zX4fS-pagY|&Q5eTXFT@sgj){gp69M-8nm3WpuYbTUl~wlQ2Dy>({FBa*^1WV#oA<m
z?n$1J`!=ojC~sW;`iCTa@^3oOqa#krdq&)fa6DY$Its&D*3h6vvTnXV)HP4~8fGxy
zB(WF1wW8gYG<C93-D|=lvcyC=^WWX(9DGr}nrkL%QQQ&N-n+L7F76Z@!xvV&zMt3D
z+}1mcfm0%3mD^6d`L71t0CC5Ey3l2bzn>AmajX&xVGi9N6ylK!$H*q9=ebOc$<y<m
zTCvx|7h10Vh*Rv)AZ#{@zF>k-+UQ`>3+9Dk=wR!YGwQvW9OgD*H{R^QFy*IhMBJr#
zeOJmS0I%<y{7oatJmuK-=D2PJ84Nm0wZXXhRc36teV>ZuNxKYybgbT_ouYj_Rc@ao
zqwyGo<E1xgtCRupmP-dg3_!MlD`M#t#ggnS(kn?zx=5qV2Pbr(Uqq`RcuN<E**aC5
zm@Y&*Z>NKYS(~B{j@V$P9R)2pkN7n?)8()tPRXu==@4w{txEUkJ$k?I8M)XC=Gim$
z{W?t&&4oy{Y#eutW|3$W<F;k;&QxGFXT%9uI9Y0(A#K*T^&oIZFs8qMv#EfOF?zo{
zwcVsFsQQJ7qZQXnil*RT=h(dTPcgmec1O(DHVVGAI&9c0rAakhm1P!kU2985M4J8D
z;u`&o^qyg^-AB^u+p)wm^#yaf?;Ni|V*E~X@4id0)xSqbzZ#_CA^4?~?S<2ryf!TT
zs~OiDts?G+41Fl`sKN9R;}dmF)b*GkJY53qq-P6~2L@F$mzHsBY*0_v5tWG#lzW&p
z;S-z1dUKszqwP{OzU*q*pDG6nlwn^=wxVaN$SKp)4-P|wDqE-urSeqXAu^#4>oPkd
zNgN3d&;W;}h68%{J%r`L9=^|TY4MCIiy>-N2oEQsdzS>Gb^MTicAtu}>Wii*VF)Fp
zycB)6r`NH0yzMcZ_VNTJdihd&qEW_|U;#6lM*K!YjFJ#^ttUctB%fg+=&yYI)1{x1
z*(Fr}cGO%PeBI1a&s<ig&q><3SYma%=31p<JU-rPk*=vhDYM3LWC3a1Cbqj9iW%Mg
zw1iAi8h&nsRE3&Uqu0-TVn-NlNLJNK`q3%w3x_2nJr&=-&N$Q!R=X})mg#Le#RNWA
zmp<i@eki#K)YVm=IUUIPvk$E9C9e5QKz;$L{_OfL#Q)>EOP&~OE3xq1wRrpvdVr3@
z|08BkMe<v`11g_(#F5<yvTw}s%S((DydGE0fd>nU#$WupJ;j)@u)cjx@*P8!CxQ-E
zkvx-`cPXDLNRKG@juWAGq{)-<(`=_nFX=<TGVdc(N4^yb`MAm7Lhq+}GZ()wvioZj
zidFfVM(^QsiACvOA9EN?UJlu?f)@NBqOdvvZN4(8Q_*O_j-0(1@;vI^;kzXN{+Tnu
z`==}l0`wY27_`{pOq|<Y3G9BPMWIH!3#WQJ99m)4`pbSatt;{R^6aHTeqgG~ty0Bk
z>W-huN|RfuJHSESWh!X@A7$TGyvh1*(fiT=@4j9L<+KgW9Rm0eq2Pup(ZvD7g<E9?
z`2hyQh#g+3)<|#UCTkcDvT!&_zyD+3qs=b#5oCKpdjApOzx*<`Mpw3IZM6bhA%XIK
zivUymKuSA@zDc_I;^6a(*Cvhbw1pfHEt<Z+E!@(KDula=1<;cL`lP1vzse-(Y*`Jh
zQ$<~|0bLzgfseUlIm6y<v%JX%;{TgX6G>c<E(=xq(slq-aOx7LwQ8rmChTbH-B?+N
zREY7i#Rm)owRXSB?kvVXp#ty^v=pD4vn8#tl$y4{YY%A46nH{F;8n}3$1Rwb>-csF
z>O9B3Gq1)+ma1?5^{nl$ByL^Hl+It?gR6uNAF@&9PvDQuoA3TGr}1>Y4&XUpX)5!=
zs0rC+C7aHr?C;1C-%0rC!xqc|`DWE4M5j-9?Us*%o`jIZ!)8jt&W7KdY9Mgl<<Q8v
zEJYV$vn=d6<KBOMgok-BD?~D@d46MXnX-=F=_}pe%-bM)#3ud|$u{4bimPRa@0S7w
z#ZiTdJ1ww;R-vCa(7d-IhAG|Y)VxAgD@PFK%coGQhxhff3^wVDkx|IiD{_q}W)k`L
z1K%6oJbLo~J})>QyUALdm4^0k&9(ssf{ddhzZSPVXoUx;zwF7@dLi=&Tjr1B+ZVC<
zKoA&LLTXi?)k8YItDtd@A`ZsaRUmh;IfaL9`d}thQkQ3Hx;#P0f%UazwvOClM`U;n
z8mV};!Wz%@2$!I6soe1bpP#kqQG|Qg8S6o?d;ax@Ik*bdh>I4+U79<T$TEYWDvK15
z3@Os+^O;iby>UHApfBxllu6)R{MXIgcS~Y|*vNZ_#SlQ+Yw?FPrU#d$Uw!9iKO7DU
zqIcNha!~r^dX`;5LUw-@ICyg@=rafV)i+raSYQq{b5{zNN)$b0JToZzg4H9};o%|1
zxc|a|*%AgR&-LpzKBm{?yc{t&5Isgg9~8?&Z_@8~@iWrNM-m<DL;;jBJKoo+6MuHj
zU(M|2%@Zd}{CKe-Bamj2NPV!ZQY;@&(AA;aSNj}W=0EUfG|mp?%>Nv(=DT-p?Nn18
zLyRxGf*6JO&w(WBN7e~z>ME)~ekT?D;d%#RD=+by=36B7u>TXkoWBboJ$RGGgMT=s
zYcGJe`(Q=rFtRj!E$#u44MkrRhp*In3p=mmsh@w2`!B=3ZfD5UqivqFCue|C?a<sy
z5Zsgf&6X%h<Ac$A1ki5EqAYanLU?+=HWCoz)C}L`yG;K+!|)gHBh!mVk6(y<!i!QI
z^{YhG_x?@hFwBeL?o0web1EweA8tl?&bw|s5?lO|J?EG9CbxQ&Qdl1y9IbTCJ1o>u
zZ!z)k)E!C%uG*IQ-F;^=5$5?CLm^s=ch6yJ9PD;r-K21pqc(q*=jXG<)eIVX;wAH^
zgyD@r$L%>mRdC1vIJV>(%@xn?E@JfW|M=gBl_1O_^gf-AesVx9a5vq-J7*n751pi&
z>|f`x$aj)a4XwL`%^XR!m3!&Jg$@4qRKBr{9{g<;-c;rB-uJm8-A0R0FBT*qKR)GW
zYJx0vV8icVi;8Ee$s@B>>T?5{#c2hTAS9704q<|7ivm(P=KrDXEuiAswzWYV0t841
zu7N;s*8qiUf;$8auE8mwkf6aKxVuZx;1U7^cXtR{Kmk>_b>*BZue<N-ckerYkFm#K
zQDg7DY|d|ebFR7P(lN|m9b1*P7|oEU0>Pdccpo)Px479}r0D2D0GmmMFwNXIdvb)!
zGU@P7dUk)<0*d-ZZPPX*`9B;I>pkxGzaZ<Oj9k$3!PHNSDHc|UeEaM1G@)<x=4>AS
zgIcLt!oW>)(3QZT$x5nc-<Q~dylb<INWE~@UdVi1ph$+f+O|UfM2Mo$-jWgjIF-Kp
zxSzMXDoZgf;g;pDMGflByX}BH$xs}dJVhr;_Q5k5gik=n3_L89yl^qqV2HFLk>W?Q
z5cM2mFG>znD2+dRWHJ_aw%B&!uMRsWUKfrf7Xo;cQBIS<8jHZ#=Ws?-B_+xu!9Clr
zFVy2q*wH>+f2EB+fS=RL(P_0IOnUuGC8DnBtKLJOw?>C4oh_MGxXgM)Vs_2f(sH_R
zkD<cu%%}VCb75JMr;AW0$Q;@d^%|azrj_V7&*S_7B_C6|erNm%s>x?jz1t9Zu;pbh
zlNRwhugh9^@Q#4YML>6BJ-Imp-*wnb0R+S=Q;h`X=0J}WPpRH?Rb!;S;<Gt?p_6=>
z|A~rvo%XB8m_wSVhr5cv!E|#xTZNmo3Xq!fHz@vjk+Y%@*5*cR4;eC^d`#zQPbOVm
zsp#?y`vcWvX%L^qzO|bEwHhWWTnb*;eZRg?*0zLL`MBZT0DjLG|AH~suGBN!(za#d
z#o7G9WeDYw^;+53r!sevV{i$;fwcD(JzApjD>}l7J1TwO!fy8SVtBY5nr6fAaJY5v
zkg3xC3~>SlO>CxWtG5}6iPG>0Qrb+HQNe^*JPJzUPbPMHaX9qZV%D^}EbQmeuH9{=
zwpc#|$!}@ym-jzp3B#Q99y=2?8eK6p<rK`ig;k&HCn<-0&iA}FVoKe79<TE&OMKrt
z6@YbWrwb5a&a6FiPS63+zsy2~ww4^!Xj+Y}y51c3uUQ#su~e>|@E^Ss?Gmi5(c_Dz
zBLve;R~uy$vg#Ggp1wZA5aXZ%?xOG_A>xJMAzAd$kh1g<p)UCn4qMiKTzwm6S>vNi
zI3jC0KV*7sM>s+yZ-T17Ln+i}Y2vz>us=9C9OvpIkhG40y(@Dc3hB(}0$%1PzH)d*
z%gW;G1c)LA1Toc$bsQ6DtKKRZ>|f#2tZ~^FIJuUOWn~HhWzJA;Y|fd6K6U;eSmkAJ
z3#;lVqFh-hfwK|z&Z`W1W%BaI^Sy;oww7Pco%dIWf5;IYC6c%MQNgaIV!oU337wXe
ztK2$bvU*we(X{ouzvlu_NUm+jTRMij%Gf3f8B>%kF28uJ&V(ID(nN$583WkZqS=~Z
zTnFRLM9NZOzHe3Nyi9UF{u69|Lry^Kv#U%I(~(q>zy}jY(fxgEtq#*%*!0wBfxbg?
zl#QuGUN0*1pNnL#GId<=S)ncmRg}0C)bIRQ%3JidNp6PSdz;twEQL`vL1z^uw{pbq
z6uKKsI2xhSaiOcNQcTuL<t73A@^UtY4N25~*uwi)2X%O4opNM_Wj=A#(b6}^&lw4F
z-`E@_fENSZ^%gVz8kO&XOqmH1PCi=dp4f~H8gS45D|H{!w&z2TmAd3f?#cNBAMEYE
zJ{6otOJ0$qE&FX|%>t?D%bpe^tFZtUg_zI9)qXefN9v81E-s8oTdO`(iad@FK6RcI
zvUmaS0m^v8vg1$0HR1S46VWw6oib(`cikbOV-X`YXNx{r#~5g^MGe<6DMCbRtDWtg
z?lfD@jHHTTmc<q~ZV$sEwdQcyWV%q(t_Ygn5KLWw@+-9+v_#0%drUE;8P;a$zSxai
z@3>~DpvbCNS~wI0n~$KaJFKu<Y<3}|tKr3K!;c6Q82kt9|5?BY@%IUYf29eJKdw?3
zU>xW+3;sJp!Q(<QpAR#X2=dChbd433X|`P$ay6#VKfbgQj`fTeI{*@?1Pejv`JNq?
zrdUN6u#R>%Ts*~ml{H6moo>78rJ<J)v*Qxk5*pH#h1?8VQ_7~?Zwjx0b33kV+|8%P
zzMP-yd)MvY33^IoqDXTC-oI-e&OF1e^aZn)eTO49VMns!hEsuB;ex)DFj%kYd4;`T
zN@KSB@oEpvwa(x#4|%0`EEHyA&uczE(P;DmF4kLf+b=W*nm$+CH{$zvwH5L-f$_6T
zoo<jKOa<J?;|1F@eM9p?{RI*b2*evELM5Ms4>vglO1<|>K|SEa5Z0p{_U+XCpiiSm
zH}H?ZgX`s=2|V!lNpgjuVa9!%9H0NYApd;@{eO(<pZ|v0AbmcyGXT)lvM|W<s%TK6
z{4s5&7(RD9m|ku>JWNJ!bam6Je}?48f5A^Q1|*rzBhQQTz47+v0@luS4`VmJ%2wjE
z``p13vCUn}WyK8tqm$p~Zm<ur*SGH3VP&ZpE1E1V+#7fuq8@=x8JY4yT6+0O*Y`Fd
zvO~n*dY1o53}-AJ--9#wNgQ=rs7?omCAO0|TzLM?t1DBic^ZYUf^3Tt(fe-?QHMV{
zG{H4;WXn=s^SMJz{Lt-VqxRgJRVg=U-gD9KBR|EvG2`;ng?jHXU$+ECa|KnytgwA<
zYe=`N!q(&MWS!O2ab~^su7l0$rtiV+NssGcO}`9hVt(;K^PwQZr|bM(pDnrHjqFMk
zQ~j|k|Ku=<rP<6PnQDFCi$r&|a<i3E!2KV~(f?fNQdOdU9=SuYU5pTl`v=acyhCYx
zxMT-icelc3La9`|^hkUAf2hgGkeXXss#5BwE6d5}sSPkDB!5v%P1Q{p_?_}GX>53~
zC`iq`bhcq`{3wb{{ajs%v4}K3MFsEY&{o}$-<d=l$=Tng-T~<r$3mU3HIeaMSWLvm
zg8S)<{-I3_K|!D^HEnt=@bf=xfPbfeM;;K=q{F0MW)``Ps_jyM_NUwhtYh4rPQ}1(
zZ`@#Gkj}~3k@UUwj`oDaM7HlX3gMPmFh)j=jx$czJ8R4FeWK}tI@?+7DzO4KPNc6K
zMy7kJ9KV-zDN4j=`4GVr&4O@(emiKMPB;5xH}$iBF8KfB2$R#Hz}XH1A1zS!i5fZm
z-=Bn=KK{Yi7{ZJt&wu}v@FF0xg8WTvmU_YFmgxruLC)y-=cW+}tE{RrT5N@uJ1R<S
z6@#su-`)QM9b;e#m^LHXiea|n`horrZ44-(LBN8ly0xh2{(ct&CDMLsvnvN}>(Aic
zA9!?7bT?BUyEx0-h=$u?JHo*_|7?-v-^ly#UqP{Ar3IdR;Y50Yo-ZpXYvF7B-!LE`
z_IIyiH>E6ouU{X{@Z^Sm=JGTiP}<>@Lr<N~vU{OzltXKaHF+ic5^T(yE-v!Av16kH
zg?5BPJ!x%-80G)85C2Emz>`2?JQM-YJxSV@411v)@b@lAaRdm@GDvVxb-%{YME;Eg
z@vrchCVb>6kq7@KJpX9$|7Stq9fIj~56f4yKlJ8zhhTXA#t(afa{_9A3@uLpZ20|~
zlsJPuSGoVOx&QSBJY5t8x?Xi>n${56zYX2*cIJm6unbd4za|UC{9UCqU2I&UB>JRF
zcpCZszl&ObfSW>!n2j?z9o>(_kE|-f|D4(cY($+Dc9LTTg5M|z=ksuCuAerRTamF`
zQpV4O_4khc*S7vQWm)b&)H3mftdkR`EH@gt(BG@+QhkR&xD&JaB}VeMR0ibX$$gmc
z(W9>zAquAWz3BYAmzdM@-}dSY!Xes!KGHSuj+&o8+1TX4ssric;ct0SK|vC12EO`!
zJ#43w&W;3l^&9^G%`4#RbGgVEO^NF!9i2p6W-GHljSBc%@pw_FQ)1H8gTp_;n=EGb
z?C0P>KK8TGT`>VFT}!lvf4>p|(kHL_dexrmCn$#nsytW;KMGj<qk$esc*CuA-IRa+
zfQwSA%aI+II7GM$WngC?lf;zz_v?Z883Q#SC52caGA6emNGIH~TNvrTjJCgM!1D6@
zPsXd+PkjH>78G%6ZlUB_9f9oLq4#0Cfz+Q1{sRSEe@C4pefH$E=FaHH8Qy@9`gg5=
zbPErzJfHrlJaAowPf<eV7g@nOBbKot$BFS>XOgc{R1)JqG5_rqc|DAlI%!K9a||my
zB5K1NySKOZD*@2(%n{|E^&%iTqDWQ4w|Mxq!chMMdH&b^#xwsd1hx1f2fu~juU#*G
z3oa4i4pv_f@xQL^zfrY+dGiF^EWfrA`cT6DSKH<9|N1v4{K^6O{DS5mDEhzdtP}wv
z#!mi$Yi{koZ1;ckqu~=V4oKpQ&Hn?fq6i??8rhXLs8luiufp=bEHn5cpg>U(zB~Lc
zpZ_O31?;^-==O2V;-4n{xAow^Bd|FLa4;c4z-avsSnhxGuDmbs4o(19Rc!xy50Nl_
z+%=q5w;^pB^Z#XGg>yE7fcX@iPsV^UC6fPW$@<r#w;n8J$AYyp*5XLcGVGljEby;y
z`%iRJRWipWcoJ^$jx0z>|Mj^L#xK$9c!2`VvVKYPm&Z?R8m~kTK=A3hL{Ptk;V-|=
z-x5xzAtVGee;psC@B_*Sj7<P(qeKUP@Sndl5$kbqF6E69Z1tDk^2e-CNaxt}a=mbw
z1#O+>l`odC{^e0az(Apglk|XV<G+sHVhPVn^m2JvhGqAgB^&;_v?2XXJ`jAqV*O=A
zqE>jKQK<v>`7(%jl<@uKaT7y;OB)pej{E<C1%W-FZ2N8ZcOO_5V4D0dceE=?YzDLN
zWr{~&;L&f1JMp`yLRl@|jL7DTj|B}7O1w&ZWy`dnUr@p79(Mr}pXiW(CY_sCYw_f0
zHX)utt@dq_-GJKkqhAL!Bl~(Jz4>y~yR%=t^V(;%_0j{Lxo&hgL(pYMX!jLkY=Kxj
zl04@B4~35~wH&c5a`~>ii6x(b_}BkNRc3^k39L!UtH&$xhN(Q+hM6!o3&x}d@`c)r
zoGi$_ZRa`Y%;bOD+($yp7XsS_`S=`0MRE>r9<DxEuM`>7-;Q-YupT+-fStsH^QIdO
z&6x}th(PyK)zcnVmZ7|lJ#o6_Z<$o@%gh<Z23}A8jOonh<nB<`X}ne*Py)JS$(8%A
zi2EHs3YqNR&<8y|eje;RnMC1j4TgC8h${Cft5K_~tT%m#$vxK2P%h_#6fn9Zn}>51
z7UNwzXG&c=o9EAT9v6UaaZ3u)W?7Vr34ThmD`zPCJwinxzou^6Jwl!V1S-cF6L^Q5
zayfDD?nQ5|lkIa)x!wj17GkOO*c4BFwZ^iBUaX`R>W~;l(+c9eeK9Pp8!Z~0MAhx9
zM(yElv$jW`_OR`&S8u8wG9{EM?uvQUsCc~zw7y(Lu6Gz3-Ak2<)Xli|Y{ZW#rkZnz
zx{|)hqj14i6+|<nsW3~0vWE`q#;$~HkH+yjtPW)HVi7Q>1a9|$SY8*MaLGGDveB(Z
z==nh$^mXRjUR6s9k60<SuW;Lw&~ff0%LR{+{T}m0AI8?GjytyAp7b<#j2_kt#6xpe
z9a2>(yGffQ29WAK){J01X=_$<tD@&LR1>$uQq{#Rd^tn5iTM$ZWHOx&D}{SBH^`ZC
z-WP?#n&LiMo7r8?YWp<BCD|rzx*dYoKUkIxuYs$B-;Wv=nC33_HDapDKxi|qAY%LF
zi%=iZ{j|6nLTyB!CEY#Wf^)u(ZTFeSwVS)?JHh=T=5p2G=hs%ZS)l3r1xDCh0P-Uf
zMS$aydC0k{MRqmF`hZN7yFS1%75~|z95^elO8dF$T%?@jV5cp__XeJ;lq9a#M0x5L
z>gU+R5guIc!f4}=+S%16H~ypf_A$M9xByR<UMoj0LE<{htG4OdsjpRj<qkI`d%e1B
z<O=jjA{jJ33VPzj01{Mi7XLsqcsU@DnvBG!EBXw*F_=A#_j1E67`l`5exdHizS0OR
z?}06z{dM&MlmT>b5Vd5z9dabUVx_T3w?%RO;v{v<=hBNST!5rG)Qq|Ar=8!!Ie+D1
zQx75C#o-V9=;HWbm(n#^FW-0d74COV{c6&)npw_g^01?^&Pk<EVHSZ1V%5lW^Zn)Q
z9&)5e$$c82_5LDjuI;yq*W|L6iA-|WN`k4gjtk;z)r;g!jyvgqGW6#C!zrw(ERf%1
zyr#bC)${y=)SX>Fpki{EOqT#;qK#CO)sHE+6Gp)q*rDINkXHXwct>xXR4|b0=HwQe
zZLpIGxM0hF3ICwD5`kbKIbzoCUAHcx>BZ8h2>k20RWV9fHH{LQRuRGn=4i&bi(mv|
zDYTuez5=Xm!BhZvEr6t-6E-;y<T+`-wtmM5^$kHayTDh@$tEs{f0nyQQat(fHl2B=
z)$H8j#;$wNkAecRqkTK=pdM0<jBT?h!LEE2Zo#IP$l<&?QH$o*T)|{;-KC#kn9Cv(
zT&7or(Y^pB^}5Iu<Z&JR1bdZucY&c!?GbI4kgd#FxdaoUlQ3}&D&I;36{?|Hz001h
z_g?dT(>atwoYOX33dD%$k3<mhA{ggBQ`F8<<~K6P)VuJNMRbhWzCI{_x$?rOvuJKf
zDPS&9(W}#=Fnx6wpUP2kJA4;c(E<z0p}~>#IVpRc6tT}GfyOsyc`vVNJ1@`y{~zj(
zGbb>75-AwyLFFJ`sFVA?VQ9VU@T>n1@y<#id_TDg$t{=tEWQTozPuUNEpB||p$)Ip
ziL-R(H7Sv?3gNj~K5@`S=r@PLg$Ql+<l?E>=$ztm)=<%p1eq>g&&rm4#qxeqrr;c0
zAAL>N$atyVk+-{gy-eD<`;<s^>FrqFY)so*tYk+GC!1`|_>g6n;M$MNjxgc#caygk
z*Jw7-pTxF$o?)E2&F@U!M1c2^_Gz<z1$c|xxve|uHCkXrJsf(I3Vrzea3JdK*K`|=
zo6Btj%GB*s#bdSefqWbbWqV^z4@AiU?>gH2Nat<-@GI!~J`^%HF2e4Y!ieKwN$6!F
z3_6qWPCGv$J-E0lAZ|al(fsm;SA_jS-@*Op`pX<z`d*<E)bvh&b$^bYcW}aGg{(|=
z?wmr>=)OtZkHRDSwI!cdi#~FhZYfGlhX~=U-Lkv~PDUA@+b@&esk5o34tuNlX;j#B
ziQt(4EN$XX47vUYw)g3S`T_5&zd2SNzMibNtS%O=z||cHwRCFQC?cYt+Suv!O6BSS
zO`ogEB=K?&v61LH$_v3!Bw_obfkDe_BFCXHXK90KGpW_ja@<(RjD)ygaVo#|PhM>t
zbkF2v6liIee!>xDeas>)j_I2HGtW(2lB?FfME%L`)9H)28d%KsFS9_Xa`D4Ao}yjZ
zu_z$3bJSCL$S|3qGZMEn<-yf7O4{wpBCUjc!dlUoP`tN(hqJjC#x7}oXdSlr_P5H2
zz)e|@hjrp4Z1PBvRvL1DQw%#UUXu<_k938pbkTud=b?Qk8mWKi_i@_}u~*=~!v?E9
z;&AM7-lu{Sv$i4%!6hqOTO$QD_kCBs1wFkQ5p!!^^G)Ztq#PSqr2H=O&&Lb!cSPMG
zt;ZfCM5&o}jn~7P9!rK}aV17H7qLErtXxaJe0&<aJGq#Ldp8duA(m73bA}~`m%jJ-
zSyY`K(jzCkpA%-rFTQcP)7U0$X*TET_W@Rq?u!e#V!e%)7N@HwnrCkU#<HDOB4#~Q
zDUn`Z-i;{EbJ#TMz-Brfiqo^Q-!Wg=p#AVG)0g}-s*QBf;jsS*s5F<1wK!3vl2N0C
z_%QNTs%mXe#ZgA8w*M6Psr@?Co6T)t!J>KcW~n#%VaT?nep2nxVIFy;#4C6c1$(5(
zzO{rKVu_4mk3|CwIsz|tD8jhOI+a~1AA4bD)fAKwBlkXJB43MntdC=O_S)GA{8tHI
zU$bN&q0WoVtD>hsrt2|RX37XFH&MrG`YC0f9+OhS)A_N4aHO5hU5v%XUpn}4Hduhc
z6j>Qv>C3V*@<}fVrk-csOuJzoYTOp(!o1ORI`E}GJm;u>CIU=n!~98edL!FEd1u~P
zz+9Ps^ucbh;lt1<c%J4+7E9|#_~Q|ne_}I{Y#)A8Zx+Q<etKg{^N>$X4El!@-C9HT
z=`T&r6(E-;`^DR!d>ixq1oGE?01;^Yr|G-zn6OiAW~<|PNtdAx(aWiz1<@ay<`?PQ
z^R*@-4%MoMslPgZHTUr1;L3VSqtgEDJM3~Y8h?x5@y=@EY)AO>;&izb6*umundSPR
z$fUJNHTrBvF6Oa@21OMkxuDvqnWRwtC$GZs>bKS&?<7a4NX<n`fCY%qI-Q#9fjMSP
zkHEy(+FqzC1==Ces5h6$>FhgF&U^jrs;lZq@86j5?Ej4!gg_L92W^OTU#KNc3G$-o
zNeDupdsH}GiEjf}{b&AwbWTTSM%Tc-?4KT~!G`wp5k}SSZu=LAQ&x*aqP=Ad{@2f_
zSj<#D4(?z@zS3Y&^=A{TPFNI!oWZ;g@5gY0{1S1+5=D5aw%-UcE2duJpOfD>vDn|E
zx$L9>DmBQ&lQJKByd<(a)`v}}Q$!fdO}?rX7xztR58-Tc7b(95G^Hf79daf-7()<M
zC1k+*@6Au_cY7+oosx__Zl8Cqc0{o;yuJ70F%?_)K|?DdKk2#c8HqUOG7q^e0p~}u
z*jgkRaMiBHyIWWxGY)OEExIbRttLI&jz3qnn8$#hI2irH81PT{u+BZ7xQX&FRCxgO
zSbjZrQY|aHBSVC;Q7F-f>y%=UoONkeVav0fG}uN`j&h+8j5o63gj1axsG>cev&iT1
z+H;ygO@J0uzy!eIuoD90BtMIY<$)7Op8wlfWhqu^3!NeF@apz#(|6Iy9UAdbM;U%H
zsuzt~v4E>H%a*NeYprn~^9!!KW7^8;+?A>Mk8{1>Iw+xdL=8Ryc<_{7wlDU4Ps5{l
z(x0AI{0cnS4&Tl#XD^ciUaOo?ulDSXd6NvBtQGh}TGn`t%-jzacDS`y?7c-~^L#(g
zOP(=)V?z!(N`42dWldyEQ>J@#M1-H0>a&&^3AsHBb%Tw*UW1=laG|>5qA+>>bkwAW
zGQC8)+GFc0KKsgK5SvIRwg}f9_YFFI;@0=aNuRKFpT-@LU#k|drDzdsnd~voo+FJo
zR)MwUjHs`*$E|e9lKh*Vn9%D1Wh2>nD5)saJFU|d*+8#>$3Ux2m{qs^a}`*K&jRJS
zG)$4owp{zTBg5v@aIv_plh5rzIUy$C4u14<4mKeU`Iz^{R^a7#17~;gfyvXJKe5I&
zRvm<ii|K;qz60_%+C%FTyU#3(>EEU1QnncXGJgf~vHsFIDG|WYCG7c9LJMGw{J}$W
zzJyD-k;Uke%wP!gbGwq3)%=<r<f5UM5*qu_UwJJmy&-|Jt-~RMuGjDFRx^E;)C`26
zG0XcUGZT~HqbUQjl15gjP^L6?{e3iQqU~+uNNfe}WnX#ub6K_0Jtp-t;3C7io^TOs
zgI~WkNnyo^)xkUhlqA#ALax*4+}RFPzu`B^<!zC3KVcYBVjL7{cvYMnO~Tq)_|3;;
zjY?6Nzl8mj#KOMKP){YwB*9Ap5{>Jro3)aeo_zHIh%6~bb+%WsFWNUqzE^`v&It6)
z(?J;9tHNaxH<4vfe=#LVL&qq~7DE_eY5=5p?}f&3&oxfcHkl^-Tg78aapr}yI?5Z@
zGFjFGt%A@{&|o@+ysdxEi2qU=7eWWm%mLul@p>V`j*u{C7Qm=h={2n;qkf8vuqUr~
z(M{r_9*jsOZ_KL{zx{MWf@zRVfW1WLU13ZVId^?qQ+%z1W!?CE0>4WZJS<wB<fC7I
zmvxQu60dORacd*a`5wPC1$ksUM$>>5=&jhSVKvUT)jmt%*K?1IiVHOZ&8{Bc#p#Dr
zCmzRruj-3?e%a_2z@QwdnZ*JfEtu8XGK4R-mVCb)*YT~R?)kZLtZW5r=ZosvBM}1h
zbIyuiY9|7VX1y5OV%rg}o4pq#y*>_d9*Z&zp1$%}rcwf=5r$KYx^c325e=pXjvjMx
zuu3cXx+JJl)0*E?r)~(K@!>QzFdDcXTTf@rtwSSu1%6@}*o2#OpYq%V>^K>U<i(O)
zcaF}QjF~GJfMkbr;;4G5{J(d{!sAe2k@2V*=3(*5T%!|;h-+?s7TN4RdOhEc0oJc+
z9R66o5lQg6gawEedqM!|%a=*#(7G#*F)P3@vN6lmP$w#f=vHs^dq`)(M55^BBSrbG
zh`o(!XrE?@G{nQ|G+eP}_rq;t9?iA0T9iX|Ul!fwPO8JxM7qlxkH|3OJ|mrL9@O`K
zJ4XvX7~t65YhMvk^?WQP?b%L~r$!QUL*<i4tTy9ykYQCci(k!-H}R04F@(_f@kn9P
zdV;m)h5KVGVsI-s$!3Ko$Tdyg(D~^ibE3e0bIaA_Z^MMrYg3<OR~2^#bwGHZ_3hd1
zuy_D<R~tCzN5eVulw@SGAq-l5$Y_mpbZ_goQ!=co5sp-x;p(cJQmw*873Ei7`6f=t
zcNQ0>+UX9%X|?uFS!q~6B9xvxK|9th#8eFsUa&^hFNE9iR9p1#mpnW}K37reD}lKW
zxjzxCv{+`#d_~~9ZRLe6d{3+g-X3dYZ}M<fe9`*#WoV%;TkIoHBw)p!b&}pw<fwl&
zMZVHgvhHGm&YH1x<Kb62!E}cSfsI~Wh60&+@cOjl;Vx__X-$2*SX6A4cZ^A#cZ@}8
zp)RY7OwrbQHjmfob)KW6YNpaiI&;#)3->91j#OxBvsGf&`(+U;RsWS?;X!=2N(H)7
zHg+zoI+f6F!JRs~S$t*&<;p?25}ekTLj#wh6$|eiPd_;=K^Uu~KAIk@t{Shk*z$|?
zJ50dFkHX6|(pWRPgM*H5(8vZV*-PKy@3N`0dBGe%#ta}?(_lO;jArL}I!9GtqO+iZ
zg#MU|YoL<LFtfqOq{_h0s^6X(qHG{Xk(Tw=fUR7iC>Y4l=j4Uw#_nQcxUJ-M7zx?y
zZ_qzCOKh-a5Y6_r<kK`QAAZ^#vu$ka#1G)+B&<er4B|IMu$e#-w1TW6^CY(;w)Nlp
zUS@|@bX+6tC<8dLW;XECiO%GE4}C=a7Q9HWPfc5LyBF*<*>FY7bjl)Tb}Kf0xJ21O
z_gh{U3SUE#ssLu7Z@to%&Y2OD>z|GED#ex;?~tl`7!^v^dXkEs<uwLGO1f0E2^?cF
zX<ofJ@ZCn`Nm6#LT5SqsGdGqP;eI>Le%QE!?+&u{QWnz-hHmG`5|2+@Ob%+qY*jDa
z2}Ru>3h~O+IWM`{s0ELfe`L~Exs%mJ_K!#YFpk}OwyQSF$+7ximh&B{5d|YT?ql4m
zmp0c0YYN$@j;Uj0y;Z(!`&;2(=10I<IpK7ewGCZcd;M<uI-GSWjfZk0*?9@Nle5?I
z0n4u^#=zg0@P<hnXLHao9)@NeqV<K>MV7f&eBGYzSTkEMCNm}xm=rRVjDf8;%-C*9
z#!<FBai^MzF2`Jy*@t}^xj<LvW3UZvQE;#7WfaM{%jrU))erQwaSvwxVlQ^w*tKsg
zVmT{STMtHscF%Uq{g_s{z)Lf)K$@Fdq~^lZSx-4)9<=k;8DU+qF?e)@FrFd8A?41y
z#t8bc>z9ei0pk!!PaH1TK6?$4*RmAiuq?&xB!FtzXcYPiO1u;5`0iFKz|+hwYOAKx
zWei}Wwfin>7i-*}T`^(=7&i4uq}0E<#^jk^tqph7&b3XCW48-q88he{Zuwb7?I^K|
zz_7}2&mzwQF^<Bn2o!dTBXrnGhoLlPPlvg0FDO)s*Iy6olDgC!9`MWMvyUaGe>)DZ
zo34tH{P9c=WkeIuh8p4XQ<!*dp_X!N7G;*(QFl0J(N;rW^N5RhK@Zt11x-^~n@}GQ
z(FZXJJw(}vI3lLj_@Pp_M!^3513PH6s_66^^QU5xeQih`ug*^(hT3DXj(q%Mg54o7
z2V0XxGuGEE)nYQkyhgBk)B2irz)=TfZWDNr;T*isyXbJ^+O2Q{Gd8SIAa4s8#xfre
z^id#AayD)^o;$uDG|y%GCQlN$$Y3Xoa{8Vz*^w#{^86(v)gFJANNNG7|5%DyA6D}T
z|K@8g7JrktA>jL>T7sCR2XQP%s*aU;YdDQr-}jl}e!fXXyU*ZLe#=QRsvr7xW0C&A
z>D}X5-qH_WpnEN{{XcZMqu&rwKc!j)_r!efLp_rT8}8KA!b$7ru7w08au(8GJOaSB
z8~i(WVF^oh#ncr65YV|Klaa6^weql>p7Cl#t;5qT?;Rh8=?ErTTEHgSKHB#yMZ9*-
zY-0+w)a|)#7P!aSlNEHn71GpzG3f8b^8SIjo!`5ZU-ZW%1{BSsF!K<neq+V4KzRJ&
z12Xa1{i5O$P$}jzmcU#X)9>4WYq0Jk-YY17scJOaCQ!}Hm#Ezos{NBV(dK%1<}B)c
zjL-$~%^BPb(oW)MZ}lq>)|#X45~k@I^lsj~-ftTX^knt2+QNYRAmB#mmDZUBR=9|u
zdZM4KV6)ev7TwqdJUPy^f5Qv|4F`_%%KMwAJc()01j~V3WLAeXXDhENtEW!%=f3Un
zc<keyD5~5(4sw;THZ3k_I|kP0*Ejr1Hq=#_M0{NS0S4_=28Hb0P&pL4n2*Vb7~KlY
zq=by-Ire+iJKeH*J*;?&q$#nVNKk=_etg?Ec(qdEgMOM1L;Qk^%yPvGjiY0+#7$4D
z6|_Dx&HbR`Etl%l+f<>IOALl7j9Ujo83cU=ygN#Ncx?{ptQB1v+zZ`PCjCg8sS=x+
zS2KSQemyY@cTvBoRu?tR460&RczZor2bdh%>v73H7@y=al8vi2JCtP&omRhDZ*BuD
zHr%qO4W!Sko3~IZZOY_^{!o-6GfQYIiz%cQoFZpd<4<=`+H*|z?)G-0kch1~>(A;e
zdF?n{IsY{gP4P~lHqziFuDgv|qD37JFfX)UT=y}B?9=C1YZZaaqW#Q#Ozw4Po{Iuw
zD)wv}z`_7VUIp1S5t#<X5EcE{3rH`qrJg3ZQAh`{u!%oBo0hpTjE~IbSeST6)fr5r
z;UG$Vv3Te*S)CVctDh#<Mxw741lXN&TxiLY9u?21-wOsU8O&k5R7SBgHtKesE{A)u
zvS$kqp;D=$>Ky<Wm2v4*#7-euc4i6AyYK2titO(IF9IOZJjMV_cG-XtU+P2-pmHpZ
z?AlV=cVQ7bKiM;c?3lbqEK+4IM=*Hlc5&9UJnQvazS63gm<*DowI4$qdcjeu`XsNW
z7`A3T4&@h}dAB)1xH6kk6r#^X4@pruVp>A?l?#u>p(MXHsIU13A8d6%uuHX~5@D1z
zdcBZXuBN@s^kPHN=9tOX!yV>d&gn#!c*9wC<4In%zp>*v(d45P@SihArXNo3Kft{9
zo%L6;dtsc;)pDu(7+oK8xk9!AwRqo_Lp8@K_e6#wz}qtc5!&c4l5rZ-sLBP-WLJ)f
zc%B$zQY8=RaHpA!{Vuzq7>4x#&W}-mCp~KC!QAX`8HGANMMeOA<Me*V+%MzcUT23*
zi{V(u`DD*k%5PKe5=&&8)U5+!5jp((RFJGx;(|&CgO5V7QOc;~pz&6sYJaff<MTIQ
z?FGq$hvi>lkqBm2QWf6R$b=RMSGU=ZVn?K!xms}l;Tqdo36cDY=;Y~hq~jeyG}E=2
zvLpfy$kePjRQ!dAhn_iayQvO;yZcxoiY{dP^XXmF8^}Fw>m!qw%`X;GzN2wN$g;S>
zeEB}abw(1hCtr9=3C24tT)Vm}XsTB-E+2^qU6JAjQYozl0E{{&6Hj$*OSZm1dVBkc
zvmXwh+N_<%FB!$OL*=Qco|?quZ4;ACo>V<6{m7W8OZlldAa$)OZ_WMq^LFkU%D}>N
zWk*Y*5S7h?IgXB3wk<sk+N3{(>}+|b=`bJT-^j*^ys83|^2uT<jxni+g%b@I#s}Oz
z%@?4TQ68gxw==Od*zVYRYx*3<`{Gw5gSWF9-yARNn`Mr)(0$xt5qj-~6X9^|NY6>_
zz$^C6{g<r%Kp*zd=qyU!bVJb+<+-Uu@6_UKkOvN!_N-Jgzn{a<0|`PVksN%VXVEaG
zB9QW4uy&F^5=72r9YA0d*g+74oFp6*0*3pX`ukK{Wp>Yg34|lI>hHD7>Q9y0#pTjx
zS8(wY<epHvUYffaE~pbQSg$w=?Hx`AKVfS=25r-#>9Jzj(Q*J?lb%g=<_hUeo8hfe
zCD08y4F=C@t#UXlfHR2^$ev^l9P1eqVCQ%tq`Pydl)ta>u~}c{H1@*g32%z$^Dmg=
z`bhL;xgSewydEez88|mnSlg?<eApF?#AoE-y??JUyBr&hqC@U|xuJ!vHX^>X5IoW$
zipyXd?M;&5vy%UTL?sD{6cnJ`oyZg~l=Pr%t1dRyQv~V>+(4ISn<3a{9a)DAxafx2
zda?y}eJhPB`T*S8Z%rgCUHO2&DYpFakt1zLJ&fSF4n~ir(la!s$5G?ybRC3l3&3~q
zC4WBFD1!{q@)hQN$FA}@Hqw9(A)uCXkLvq+EF)vp^vT%<4pBKWnzjfJ7tYs8z%Reo
zr~D9@L#{6-oY#KMxqz}SCD?{Dn1A89C4ccwH8ip934-=Eg05eOS*7W#H^!7$E!xMX
z-voW+j4wOx+f+N$pK!q~16(Yxx~(onq!N(Ruy6}}KLUoHUG{#gYnYjeys*}{%3BgC
zaJ6Uu?rz9YI5)du(Swt{$-&rb=*de16^gP6g~4j0I&;AQnG2gyv7t}DH#2N#A9>Ke
zAbs_?d(y8q<6Jx`NMRHW`Xq0?o|&v}pvCfs=Y8zH<wa|er2kUPHxjFuk1vrYR3IBu
zgyUamcS|hKa6u;Y*`)V3{YFjf(dsez7r0XHQ3T}iaV@x+XS~eQ%w;w0*#XC>*B^%;
zJ=d3c_X6QTE|W+Yh)CDlyh9T*s~F!M?W%Y!5ac@3$vE-2aVvKoKxphACpt&)Ga2x4
zRItrG6jjP9uFT8dJj)2|rfKRtu5sclw4Oeb?@R<l2#-64o)z$Y4w$M^i6+{rUUs7+
zFy$B+vva!WT6@etqdS}8+fn8}X)+qUH;|a-qU{(^=Htv%Vo%bhbK{@VSo<1_YMxw-
zO92y;QbpN!nCZD`%OX_DGSUS{3K%xrR(F=1_k6%OuC}O4&)Wun(;-rThyq!W<(+G1
zdUKt8<Tb@^L+=1)$&s(kg$(VzD$KmZbF+DePJIwIi5hP>UOE_lenS}>Jl$Xp@i0X%
z8h;$!m|DL<`;tn(SYwte?D~9+*3q{qjG%?vl&;Yi((U4N^Oi+@ES;mPZERll)~B!S
zN$3jGS#F-9F#6?gpmIvNnO(r{`(9(<Fj0!^k_aH_V@bYSdtJ%gQ@0rjg01KN2E!&o
zp2*NeKtA%Wy2iq+?|z|?3dm;%CqcO)aMSm^dWit{lO6P~)g>{W@E+|Ry?fSi8tdVk
zv6V-oR=ac*Gq5N|QW#&aX@`kw^^@S<k)gIau(1s3+6;dPoepbPt4bAXdxR1*B@}xq
zR{88LLiXLKl}nL_9hP&9&>6#42-BMY<>e1qqnTS$Zv^!Tx3wDFvN>maK=FiClhv*f
z2x@*h1Wk43taO(FvZj#|t1VR!Vmf^dp{;3^>&jb#-STTnE<~J{;#p$4#eOvz4paiX
zICiujo@`5y?e0p3_d_$L9bvnJNQdfeC(o$k5+-J3RQn|H#-vGnZW%fzB)zsp>g>PY
zAl;l2`Fw;)?d)2<V9(j{hVce@h~8#-bzXcnY-_sx+L*w}dzSB*_%8B7d@+{fqksO&
zhpqh>P$&-H%}IOHC-S?O;j!%VyysD4@6;5U-urab4zxS=QXmXg_+Kj>+Te$;=-+fw
z3H{oU#Q%fl=0##z$A~@H{~T1^IgQ*C5;srqYO4B!<+k|H?&Gv<Ih!|^tF<Cxn=-!m
ziO=m!{_=<cJj>BxIT~7091}?{&5zgT_#Srbya05S9ZC!0ZfDjV?ap<mcuSqXHc-{)
zc0zw}dU}`5NQEq{=o_XeO#TW7>r1xPkZpj^^kH|L55~iI?tTs=FIsj3!k6l>OXU;G
zE4Gsj-wCjp(lPTTYxgm;pYFG;YMkjrVQvxitjct&dV)OMIY{=(jW|p*ll8Uz?s*0!
z{nu42a5|}70|1@MD_f|f?#(;Ls_v5!Nfu<u{(_-EFTF<ZpM!9UoommcjE;z6wi3=`
zc4Tv)|1Pc76+@1;<bEV@F)YT|)>8O#Vu{*!x-sc)k{L_k&3g9GoTIuIbMDK*{OU)<
z>F+z%{Hyhek{Mxv2p=fN^@Ezt(AZ%UmI^-VvW$K5K37W90OK>0X<S$T4iy}Sls26`
z;#o?$x1aW&Nf)D25W`xjzNXufAGEgYE^%g-`s5qs>T4zS=@K<2KJ~9y8Lp+OUU13w
zF=hG~>3BWa3W#^UIeSk<LF!7ZYMxwjmKb?ovMnZZ4rt1_m8UfPVqzF_Tm+u_viS>A
z0uyWbY!w(8uRT)p;+19E2UIu7ulqYe4~@-4ZQ8$h_Nu;{CBpfU8oJDeCh85L2+YRs
zSwr(LmRXY+MYj^A7|Ye6n|_qx*AhjX)@fOSWjxi0Ye!QG`{a!$ch{n;{9SL*#bUgd
zX5~>+E_IP}tJpv(^3`AYBz!=3K?BhiH&>OHPk@dWg8SO4{SB-m<zOw15DE)cy~?)L
z!`*fa{gWB2;=&cT_Sgh*;WJlHXNh4s<@r0twF7PcLZ+IRA>38oafX|L(aC4xvY__J
zCfVm4REf#?85W{l+$dizQT9I;K*Y4wW1^14I!hstW$r7<)i052{pS;ps8O#|zn!16
zUZh9Vc9V&SX@yYYfvd3^BuiDT2>4{|&Baz#`zy!U59X)9!QSeWfh_di9G(zvUp!F-
z4CG<i#Hl~Ys!6gBncE|;LguUJ1V$#@0Spp}!S%cd<t#P!d(sBw6cCnmN^M70l`oZM
zlFI;gJfVLGJoTFeS<byF;N;>gGkM~R<A_?H=W%ON&Fe_e_;o<RR!j5&D5~~hd3|)l
zMtP6`_Z;!3-p6NQyFL9Ja|IqoLeH#omQ{iHo1Y$KW@PD*#=aPmHeYcb<bj2y0f@d^
zpV^X`0L>{*T){588YwA-<@~DYvVCRkNb8#K!M+9Mp(W5@TU-VvWqitKZmVH~+^#pl
z`@#j-^wlsDBEbFI;yT|Lo}Jn_jdghh4eak2uS{2vN$?CqS^!W=vJtBhnen6oq@SOv
zM}W<BT+tZFAC=uIvoSd!OYm%5)MZ)vi$k(nQ~TuZF+GUm`-uH?SNIzc1gF)DNsZOF
zBZ?f<0g~n7NwYm?m|pB}3|3Si3vK<UN|2<|uDf`g#XL^vCznNB?DHzSw?+Z5P^gLR
z?8@5R=Iud_VyU_dGcqE$@i4&-sao8b55NN_MK9~kpZ6u3DH3T~{;H#IOq9LJ8xX>q
zYt)Ju>^uQ!EFe1>yc{IAo_t{~4p{u=C+e+Be59av9_4r~7Fzn+3ADa+Y~B58j|=}s
zB0)q@8@SzEjl+*Q(gQ=^q5P82+a{A3aGD9zBzokX>VwoH?bI06tv4LQ5I-n7ka5f;
z)qBxHVetJumDj6Acd3^IFNI8uPNM^+_7AyG6Hm*s=LM3DX9%n3<>t6M)GwVgR-F!6
z)}MK)t|uJI#smXhzmpt>c(EggfuTq!xkKA+y2Hlq?~<lE-&bV~bnXyoX(W9^gUUA$
z5hq0YBXXuCrap4$JgIVkeaSh?e9!sSBpAbgdsJD`7!6jAv|`}wz<A(ii;tSs(X!iG
z7AO`M`1FO2_x{6jK}v)@f-Ywq&2;-Yue=^3Df@bTa^-@=w=)zg2eg*==|7&2J5ckq
zjbL%RT8$$TW~#C`8Iky0CZZ_fEYI(0NgHmc&k%88wA?k^HzX{7%RwD%4GIu5Ag-u8
zzZAhNSZZDA#U#!RELP1@ZLiisE(O;?dMo5NVWVIl3B1`lHp|5i#-GzM+V443*Vhpf
zMiAaKdi(fP7*k!^jzz?L*r$m~s!8s9`aa07ylXqO<C2jqK9Jxnt8L>BzSml^3(hWy
zvelXJZi5!u<yOC7K8gNZ$FbIW--{{r$Ph@d5l<<0_zBzD`@VyjAT}2`rpoyi`aR)e
z7y@YhZ6gC4p|Xjp`^ic&GvYn~u>6v6+nYxy+l!~V3dIUz665<v`|knaIro8BEnb>$
zndh8ouM+5k6cB<!o&6Bzv8cT$IM}~TGJn~bD#s@(aqhaGm|8htmKOWA`?_2`ia1>$
zAV%dfY0mV#%Q2&^Pp136+E)tSf>jgWYx*GoQV3b-3!kPqU5~fnVb;p+Lb*p<UQK9(
zS|}=xXnrA`vU`S&blG0*Q?gi$?dbJAZB^^ov3!Bcbk35VspZ!|Y7{-dsqzgqGP9ql
z{aw98F#~1o=gN7Hof-u2TZHG|)lqIRCkZbvI<^C!{|;;cZjz)Awg?<ph5U{dW41{y
z#!-%pIVI1?BU`9LRW!?K&ya#K)<tBC#Zoydb03c_l&(_rd>}lm$qB+@!mlu4>QlYQ
z0mNK3*1ta%yIorjBGq7)RJ_UwJPwvP%k0V`KDNXv7Dv1`k;L*T8meQo|9s=&sFk>z
z1YN*9Rr6A*L!)vNrdBR3XJkq92kNJ(;D}6B2Autx$X|QmmV#-W_n5YJdy-Ldj|wd0
z4HL5$>fIain*azmoE80y!Q^-uTBgEBqOW4sHObZ2!4hAC(N*fu#CO~Wt<eeVU*^i#
zO&YKxxXbFMLeZM|JMUY3=5qVfkd+wW4!zYsJ?9sChE;HK?2;}el9e{P+`>(i#wt38
zV|uxdC)Qa)lo-OT>{m_CdJ-kOPIn`2CN1jXHv)uaCY07q?}s+(*<P%-ULF@$jkOo=
z=wVz(&42Ho63#*>K!{zi0O9S^$aPNcs_$b7OwVo%oDNDpBc%HH8td&ELMs>xFZm8_
zjA(3aTJGG^A0M$q<_+l0`@D(>!0;F~Kec~M=M0o|rq3YDH)gkp0=q&qdhtv=*86&$
z!3>wocy(5$W2?K@1$0wV7IezqewI~f{~m;>JLK8(o_bc7Q?#wi1zqXL$Q_dI6gn8W
zS(aVZ_@em-9X^=N6Lg(bNiHX;9W-677h?F!?dLnRXJQs{>sTrM65o)iuw8;Ta1DDy
z1F$A_u@g9P>A-9Agr{ee;QYBOf0L(;pIDQkLDtU`FK<q0*PLG75Aac4k8X*BOJT6g
z94-a#`Kk`MAM^8XhPTKU6a7N~lPv$Hg}~h7RAgKu*=fSV-qs;KGO`1bPxf(QK*sT>
z-q^~tN@C@1tn$3tIaR_J^L|Qg?R+p<Mh}~Dr-k-cmqK0ByN|*{4eg%oK|s8_uSPNS
zZ2)t+;>{0#&jm2%a@qC_n)LkkXVWwP<Lovq^3!e!w=10r8&cI7<?K_2yA}GWmz=6M
z>0F`}HId+@kh$d0Kloo?$=G}Qa{erNkRhp13|a?~BPSyU2k!Ob7SZB_JK9!S(p`;V
z=J!x!SXBL-PNzz{1g0Y|E4Fx}R}8LTS1d9MdyIvnjnN~_Hs=`2JXD(Y#FgAD?y0e`
z2Wol;s*^p>w|zW3?Y(UqzaN}|m6@P(K7c*zb)hz4f~)JpzTV^8bZ`r5F0v=9Fu>63
z_NxFg<(XmCda&ww>XnRVu_9!1$iwFb;Vk4m2)-9u+BUJCIS>&Xt-2&>HZG7!8N;9O
zjIH6Nb|~VG`Jw4k?jRrw4xKn3)ei(R;-QkUo45w__W0{0_GjSy`jhwLd}TPSWrv%z
zMg#LPdN}%2LD(*|`d?eF4-RY`yf)Wg+E95>KT6e$%ls^7NVjKchDq<}bYEiR(N0C_
zV%!_F5#4o7i!_@Ncz)WSsbbp)>;8&p5Ws2g#su99h4xbH^xWncSNXlF`q{c4XKlx$
zI7E)RV9OF{W5Rgaw@csGH8lf-nBkFS1-!)Z7y9wN4MHk+V59GcAu?QE9%Z-nTF#wk
zs@G9Jo8vYE#{45@&<N&>_V$PJnojl(t8TF?FmFrJt8qP_Na<}W*z4uM8rpY^G|_D#
zDCXB`-9oI1RQ|RfS=e<`)5X>K2EtltUo}6RMyC*V-Ju#7IUTgYF}x@;*6o+bX!Bw4
z1c8sI;3UUwK!NR+2t1ZUXKi6Xrm?K9hV@CuO=r&OD`+EIwmjfQ^VetX*M0=hlPx&d
z6E`GwTP}x8j4e}5feY7KXL|u#vdZjx01OTYZSmWcz#Z;6%C@lwTNQ(0kKg{tSF~mr
zjDZnss!$#<eJAKvDz<{%`aqjXca)A>&dd1<DQU$G*VZ!zSO9>q8~T93HZhmvXwn@c
zIyjymAVYndc|nfz#Lq5Z<?bZE=)hNJoWr~)u8CQoBdLOoo^&zMjZRgwZ$az8NqJf_
z(Ij8vDWLC-1o~js5elzggdv(CI;C+n@+Iekm@rH8?0tMA@M$``owpc3SkV*ZEQ+R1
zdYgprrul%)d>mK^X*$_AqL13<pX^!>b}HwH6r-6HiA8){JMjhDic@6G@<_1R5JZd^
z$7Rqx3qp+Vzrj4?z%kFsT)l^R6VS2R+o$9Dz?LTs8T>29Qfkwt=>`d?uRh0oD}?*i
zRFP*ZF>nxEx_MT2L!+7I1{M<HbPCWvnDs1R*ge)5p&aW<4=hE}f+%DrfBEBAu!?pc
zIe{b86EE4J=|c0&Z%$q%uRUrFBPWu``Yuhf4-&H)ujPyxb#8kE1BX*Z%5PBmfao2U
z=8?&AZyL+rj=DE+Z?<v-HNp&h<Yy&9ZL2kI@<xRU+8P_u#)abqnBWJ<+>FL`Ax2uf
z3mn0UPUZ6r9T2|Z?>NfRdiSX#1QU$4la*m;*qqF(twB+RI|8~$DG=V7kwr`Du-WRg
zXgOPIoTF@5sp)vLakV9X>HczmP;+PByqsU%vai>Ep+?`NSeAnj9_RWcfo;Q!&lAxQ
zWp(*6sYv58BYyg`8-@$c0iFsaRYviz%+zXG0^<&?!p*@l?ylB*nPP->bDGrCk+Kx;
z7cZNdsH}!&&4^CWa#0YnYMN=*&43Pu=Ej#KfIt~g8^dvfT}l_-g)rJ1S_B?%CM^D1
zRT`?F>!rO~C(>3)^#)0k2KX@rrAED#DM~~@_8d~3S0MArmzO2hsKe>U0iz#?P8`o$
z=pCS16;YxBzdoR46#2Il3L|B8+!tCOn03~#5u^EClHb&XyUPxdVgmpXti^0O4kKj~
z*O}<dAKNix^8vc=Kq0~GI`(8u0CPzbV?}o5s>A89mG!XLkX;oPW$y<x)FMJG=t7-E
zZnY6u=8FaU2M%{(Vs$>)c`cT@*JfoZHu)XlKp!f?QO(J-w`ZPDq?gH8KaMN&WA-#W
zLHGL9tUI64e;i?f>Yr|Ms*M0W;F%nEs5ibwYw3VAHJyHX8gL1mqC7S+(L~)C)#5F2
znJTkO^lnpgc)R*_P&JYW;VWNI%T=TJxK3Ql*am)AW|o(7t;U=QE{{6(rwAM-;S-ff
z3Gb@KCR#!xdifOzY(s@iSA^Skc*MnRpXMf?G+k~tI)AmTvw>5|k8eIzz4-->hW!`z
zg~B51D*nE;Sm=SSLrMU1oXyw75c6weoC@c#8A%ofHx9Trrid69423hKK|RJ|UusNX
z1RVxQoYtJHx;DpQuuI-EJJw&42tg`yVAglkJO)cA;U*gWHzPVo7Z<lSt@u{rP2UQ9
zWVConaj*Tjn!GD@#4Zt9|NdnLV2qj#P6a#;^Fi*MxD~5M1m=u}>@kt7p8b2P?5p;i
zn*n?a%5TIe#wR-ipCi5e=}f=6w8-8LbD8P?M$v0yW$QloZT#aL`iTa7zugSOc$H84
z`h@VLkbT}eGRi1I!i&i9Qy~F|p9eT?P@<sYL|UJwi<c=O(Vmi|5=XR1Sn=NICJ~UW
zV1yvHGc#b+5BQ#kkfihNa2{Xi$LD0WYkP7i_)A@;oFc@V8z(5l72umIa%5I5^_4i9
z+J5=W<U-{XN`L<D;j{BBTFSSEXB|)yT)r&ul5Anc4ey_vMuGZQ#A#!Uc^b3@I~o~d
zQ06oF=G2hYYU`q!*^}gV6@mP4I-`qrmxRhGjQu$nF^>P^fj5(PvBU}LaCr>PT?A%I
z_RllNPEJPZ75r!+C17Mzo)+-C#jbGU#oEK^3*baDy(+L8S5%?_)E6A#S8Pt%Z(%P3
zqtGVlNt^cou?njuJHEo*P<}IiAs3ndm9s1`TGgFwt;gjznUTJzuWYvGs*Q2zf~N{-
z?}u3rp!+F(UW%0j#;v8u>Zw>?7&^02T@dsjnB3tJk_8Iuy|hPRP;xY{wu<G(TbIT`
zKkxTxNlB_)Da#rV{e!5`P03S5(LmE-XB7DWmxk$?w#^*FPRghfB5$tl040$yoF`t-
zb-qdnq>3LELvPBkytf1bMNYcZQufnyW(!&(rz(_C8>}r_n3L{|n-E(P%GoP&uyML>
zS2Cn+t%O_W|1Y+_f-TCnTbl+6K~X|dN$G9|QA$#}OS(mxnV}Jo?k)l8?ixzEyBmh?
z9_kx>p7-6y{*L`0?(1IXI&1ln=xci^dKL0PARaZH(Plhg8N5Lo0l%`#_@?v1*&)}h
ztXfe}`hPeofk$kuN28*6li-9A=D@8t+m5EV+u2Q5J3nZ?&~ak0h7=6PT=S6S;4YsW
zAk(|x1$J$8e(cUW@P<SRZhfA(F5%t2YWD2v@%t_hgraSxvSG7@hi8OOI7zwEda*2G
zCMn#!tOiJ94ObWU`Z$^^8WWCC7l3GtL@fDrz<6%$2WPcKwRfih`p40r?Z`Zy9t<~b
zbEerRY@+yQ#gk_-Wn`KA%7<dRfi8P9N_FLj+hwbK->vmLz=%fMr##c!MMt6r*|=OP
zj07&6#*L3Lj-!lDxP(RB$8AYgrWuUA6-F$e?n-rRh2s$nC#RhbQe%gjNUOU#V@YjT
z4Z!eU&MD0lo)%(6M%J&)^kq?y3mLbc@AEZ#mmJU=Xkp``%Svrh=FR2<Rk#^y!ZaY)
zBh7G#yXROW(bGaWGX>Nv8^XmX{MdM^l3Cni?6xkTjz9`Mc<UvAp1!LUbm1ww{uyec
z3y{fg%X}Qsgxrj9_azwtdG;@ONtPp5J~0wf{KXy;nfkA8mTFio$wWTJms#N%EJ@18
zH=qxijkL{dXveVc{*M;=KiFepkLJo^2Vb-Tl3l0|Hs+5cUJ=Fw(qQo6X>)l#FVHLJ
zb80*V<utbJW-78<qpcZudOio*_~wrAgom_IJ%nv%ZOwBc2w+X_uye_KmcAo;{19w6
zleDGYKh-T%NTQe`0=`KY;NF>?mKS>iXnGcl{)jU+ya&q@TXh@z^aM;KxSZ1X{=jIC
zoZ4>7Eh5lPPvi&Bltvo#$EHgS|A%2xH4X0Lw1)qlbo(;Sq?hei$6Fj>yH`@a0RZu~
zf4HS%E*`xg;V-M9zaNeV1Cqv{%womKKgM#b5zg$9*}_k6YpQJkc$xw~;p7ry-tcxs
zlKgrZa8x|W(aYp2)B4W~gYj}sNN&#lNtHQ-bi(f{sjsXA8$I}loJ*MLrsqg}Sipb0
zSw==3;e@4GQHJOD4F-uZTeEl~apPF2QcW30#1$DZpD%iz?3UonQ)3u*zu;(6j45qq
za#myf`zWf?cTRJviuT8dEJ+I-dO+jo1*n#}%Zo|J2%VPRo>*H|=iT*7UPjyv6dsW#
zMtZp|J1a2Kit2yzzd&_R7|N#bxZV8*Hb1QFHfBsN#byFec6r+DtZTX>ocTCaxv|9E
z8K)h>vj!jx#!fG)r8X<ABWJ>LTPpyGu6&!pdi{v?N*(KV&NKbBNZui3a7^!G+t&y7
z%{j<7^VswttUK%4AAOj)7O%e>mln>7e=yYh)Aaj8ffB0XzzWI~8^Gqr^JiGrioV#^
zDdzZC)u+V>ovUcq)mJT%-Q|q0iaW1WG~U;sp%J!}rTi419h=lvA<YKs)ho}sPs>b2
zcb5dw#d$kZsdd|6dD4rtfDdSs2G!`Dz8Jz^!B#x0bgUqDh&DZvMneRl|ME%u=^W(!
z&y!>~qs!k=!ZI3IP!myTt_w}t{;Ha!2s0`)emxuCh~Rp4%DltQb7bVIMQ!S4bK++T
zL)7w{XGOI&I6CPShUKBCtT4Io2W6#A_Uj?WiTpQ+10AXpB)Gc8@`w;mye4W2!*bz=
z(V8aj$}rv0-x^JXzh9xPeBzg9{Ems`Q=d0AOOsF2NDB+W4Ri#0L`mxrmB{f$+}RiR
zqRSg>D%a}ex1{sdG5S`71tUTW<5+*ic$ah%@{A8LX?{ud^Y>@wAIU)O{KJvtLD`;*
z^97Po{?5rWG4VWjpy*;GQ54;!=Bqjsl(!k|8=w`T7F+RtT|ON6=;SmbaK>-kFchtP
z(2#M9#;V3fkR;5fr0{Xk#Tt~hrZ_F!m#YwO6Nm`SiW{zWm5m*3Lw|QC`u+@x9&EmJ
zwf8m7{M-)INBT$MoNJRDOPWlUdf5MQH`+=gy*9^0dFmam2LA22e^}MyQOnMlpi+_Q
z>a6VLM<lFqcw&M@++HtonHKG~mC=V7MdjHMX|THWyX6x~CvJan@Hjh@T&3)G3+xIa
zL}%&Aes*y~hLUhac59yQwp<!Y);HS!)=0$qZ2&+qMR%bsx{DaDD>AE3XS6)OlT#IF
zE~1OyU3wy1(hC8Q0}S<a6C!MMMif)?VLgUJ6V}(nhK7H!M%<g%!S7i)k6TZt0!{+(
z*d<wr#&k8&r5Fv!=?oZ8Q&7SwP4N;3xzj&`cGO`Y2C!(l3^hdKYq9Hna5)ZV@*S=1
z1;i+LsjSuDhbWT*!VKEp*RngT!atoi8Hu){GLRQo1w5@y#i1L5I$0s;B*Pa6S?*~t
zu=|Fv_IzE;haUWOo3`+lKgP=MB{w<tf5P>1P~iE<s<xY%o{dcq-%6(_$4L}-vQaWK
z1T@Tq?9mSmf1c1SfIRhMl{k+bsO9}~iIA<uV&2yMG1#>h>i!^C7*EIaDhmmEVRr$f
zR{{!&(4e^==X_Rq@_n73iW3vEJfz0C31z{;3Pap=ZLa=HmLw%hx_VG|Db5g0P8ZW>
zg&wW)n-}!gK{z<ZBJh4caV6QjP<#zG&gsjj@Sf5JJ<1S@xvBS2X$P3%9$++XT}S8l
zo8`zqvw3HBn=~#vc>(K+*Nrm2eIcvk4`dT}dHr|CLUr8{H*)SbA&SfOa}p#%(HB|I
zGh*wI65^MklPI9o<^mCIW<l@i9Vd6}pk5NX^aOusMKE-dq;~u@ZU{&8&-)*wAmT<e
zNJO!>3WKhO4a(PpnS<G0cDx#~I62Ds>o`8x<ZruYS@rp!FswX<Me2Fy;r^}l`Kc&<
zcVp2Q-LcUflBx$nlWLD11*W7$;cet4Qpe%d9^588gv>mcEZnX|555Vrqxhg{lBID@
z?@HVDgeK?@-hz=cCbee@vxxPY{EMa2^l2yBn;yt`dSwWP#5*yeYUoNI*6Eg$#5-nz
z1U~<T6ek|>Pn5^6@%OTjsB(%NQbX{UVZtlGxs(ctv0u|0p11+`WFzsVc}Itjp3@6h
z9vORS5pgnVZH;ilG-Ei<1=lcPpXJ_7&d%EWkN1VefrQ*Wux_*jT&?w4Sag~hksKJB
zH$NL?pk71m+KFt}Dby>iXO^bs)pcn@W@fnLg5!7TxYI#Rab{_iRd!+&O*ZIwGCxH(
z0HC|?n|jXj;N#(p4wUIy#q=UeUO1B&=qM~Eg>fDy(z~x#)ijn6MuAL<_Rw5(&T>IU
zjc|^10(F?7ETDD|7GgO3frK7zaj64Nmo3<98ifU@-qL%y-LQqkQ>D$~ZfKJn+3$S&
zbxwA_l2`h`YA)2<RNQZ-gsx-%;hA1>nD8Ny<z;IRUu!WrD`v5^(JPAtlVh@4#ci`_
zIP_fq2V<Bfl`ONg3hhE%U2%UFh{Qf24W64RCPHXx#=SbH$B5l~Wfk&wAezWqpb{FP
z?k}iCp_vv8PIK7xcSy$JC$_~sPiy;VD#>$fx+bV~OfCpN+opG8V@<u%#W<9kd@Gk3
zPEhoXrZBDJ6#C0h*!Ace6$#&G#65J6jOO!AqXet5#?sU!E|4330oDVFs&lj(m9T5t
z`B=|Jw^nqd+*Xj;@x$d(5rsJ^vO8h%!mEJv$RppW`<Id}KL!a6fgcRvM2DD4A~VBq
z+32vU%X{A;MsT;k!sFOZ;WAZd9uXoae#r^`q=);_Z_OYRk@iN(Mnc&rd&dA*NNNSW
z2P^P>-Oo@HcwR#(An(5fhbUMgeli<msIE!Xwt|6hR)at+BT^LD!C-f+#}*Ri7mBLw
zUSl?b)#N@LTLoIQn}{p71<v5bqrA_0h7o^Np+A36-}_`;Kjk}o6Z6oy74s{87Wmeu
z<gvrf6_2bF*f~1`)a33$-gayS3fFDyXE-|>Vq7?GE_KGU)rw6LKV!~XL#MI3X8<d1
zk)7(f#zNGh&4OYosYULS;`lkJ5YPTMk0CFz;G2#ZPplfSC*zPVOj~JveZYt;qhEcZ
zuMKmJBX1SzGAFzA(aIUm;4>O<*W*w~M&sX8eJ_V>YnRlA@XB>W@_ueqn}Ye5q~ySt
z&op02_e}b*uOx8{^yK$^%uCrLv~Xv*`nq!6oV*g6x_{6V4ZdPckP+58=~qMJV$Jxx
zpQKe(@>%EXr?+mb=!jXljHScNmom$+XFS$^S9QBc4d+c`)Q3t4pt&yFYEg51Hamv&
zi#s@TK`wcy54q=PsFQv#(0JcUL?phn3VVp2KF!}QV*enJmV?T6#BhYPRHa|z%o#)j
zzr1~FkD6**!H&hdr=6&FcCBJd;p~QnxFdsR-{F5fo(07#vPjd<q}Oeo`tkU6kHoO8
z#(PhhryR4iQETF?sno`1vrh@(jF(F&`LN~kqp)-VP-6}MTL~Ktm}6Ar!?KNX=}YYm
z`V9Hb^~E2{&WbMpqKO2pO$hIGe~yk?M;<!@V&4-$a{wjCn8NeAVm3E_A`d;@d>H!P
zc^a)D6j1BM60fS7d)xW4LV+Y>h$x^0LKiI;VUVre<dU<Aobc!_#ar_-1y$VPN7^Tm
zO!lS^m(1x_C)<4(pmKZ)>^jIQe}OEYg`nMzz?(nl7zi`*E6S!86oev?T$?{pbDq;i
zZT(s)Lxk#rm*V2&G#T9jtHn>=y`x*SCP>>Lx&L_wF?OFVIty}=vXEImF(6qseZ-Pc
zW@S9oT~0nZUlte+n$tf&0w4JzoQ>7`j7@BzX?sT4`F0VkAy6*f{4B8koK0k6Xd;Lt
z)KA&kCk2Ofe~0`SuF5Lu<GC}+7uy?nG-(qaP3ny6tY*PYyq9>yIJ;8VtNpSUpv;uN
zlBy}Mtsln)at+oP_&z9#KST0aQ4IsmGK5zYEtJK^%H;1v!BfSsyG<5rQ5WJxPQE4N
zkO@?E?H0^}7J6w$juBmB>Et`LOk;qPx%_ayGpiRZsn}gmEN2Z50l*A-pwYE(*tP6L
zXBl8wNRpN#xl~ylD)Y>*X}}}I45Oz0{ifXRV@-`1Q#$)*|CLgF`||`zA;qrH<oXzL
z($h#@gC&%V1h-G0l@f8OZxNvOlmu@nfS)Zpr?~M}^2OCTU}Mw_M;EJ-^zp-W-!ABg
zNmw+AZ?@l3-9F9p2dJ<)7R{@V6Bkae(ugM8n`9uoTeQmnd<iq~;?IWpYx1;YuGsHl
zv5{a$WEKyjF>Pq{zqxSI&Je7!p_}%>(4DuJ3uuL87^cD-$g2T75jB6FHL95wo@wBx
z^{%9KFQ@dj-n=Tc0IZL8Ef0cFV`w>ANKtrAJfiggMk?l3P@9Li`Z*9w%VtC(OK`6s
z;sC3`UjEthhVmkZOAE}VjkR9FvInDU<U!S!P(FV{G?Y=vJPO3epBw$3YxR|VSqe47
z05|S5i{~Gk;(yyR2`={?l?r1_U`k0hSL|rFo7?W<{i<rwd|vsaW<YFgpt<pM1x$f<
z);lQ0kA@fDcqo2;@O%;MG%_2r=39BZlnYE4@29?6@dv<U36Ea6i*E`-zzCZ-NTUft
z0}_(?m9ykXT24FXV(BXtuV{Bn4cTN}YUF3DB;0D$5|zmrznQHz(P<-|@zgIc>HnIN
z3|gzNh$IpZKzo;P#+@b}Tk6vV(F`jC1cEMBK81@_Kgkz{MxRSL4+qQN9hpF;og75Z
zyIpuZR-#n#^r!OfyFv24v>vZ3=YGoVgei0Zk;U)IC|7tLY_SWC5@hiul+*d8g*<}%
zzctJAO<ZyVttXiWf=TncIghe-I|hz6YKueLyTaw1W6sYDixm<MUQCn@*oRg{(mp5q
ztWkU8;uBd^b|bg8&H&Oe7TXDK2ubL1j(6Xt#3r#h=a@T`YZY3{DDJwn_*Ce*D6d{I
zS{zIyH2xUZWxaY3L5Ms(6LJ0r!<SiMHp_lz<J|7o>35LPCGzL)e>nrmT>k5(@P}bl
zi5PCF5`+(X7q`jfC1rUWJzSoeKk4xEsY(D<6`_jRhH-5!3lf>>fLbaA?Xu!vaCbPf
z?mQ<U{4$>Ht%N77RYgVvmB-9=NW){n7MU}J3N6W#C*@rpHofPBkd2d^Ogcu?g^k;F
z&-Zr1$gpkd@KvKVw(S6ev!$O~#~(pjkwVzgx)Lq-9zEOoJMV5{B83)@$<`X%)k~M8
zG>KN6SV+vGni17??(11894<`K!3XER->!4+HsD=2o#-c0$<8u2yOJlTjRr{2icHPR
zPJM3}!k1{UtuJU8D<|!D=t{SqG3{$g-;NDBvp9gJmJh>6d%4t{+{DetTd_rnO$$+>
zkJm8(JF$OM3|mHDxQ20{PuqM<Vj<RvK?&(eve3QS_HxUnBk=D0Qna5Qq&I|`pdhB*
z52OB>Hb13DFXD4ftg9yDhJU9YBGx*iG;K!bb~5styMMfL@l6CS-lXaquQ<uFC8sS4
zPbI9&>t=Y^tS-;TZA4gj@5LXE`klp(YkoPbcgJQ+XLj!TmY-7Bz*%rlL6x!UPer}Y
z+AR$m`(@5G|C!!84p<OQCkZ8j&*RRM(|>BNAYgWe$J0n*>rLtYzjQ!mwG}A&APqzI
zqlP}))rPD9Z1>yv$Fn@3tm*9WygJ(R-NKsl6DDD=8%=8+%Pk7vPQ|VA*^Ay`9)<N(
zTmwB=T((8yk5Hp|UddBU#4b+K*96egJTRK@WVHunaa_sLpNw-CrOviz`C9t|O}oV6
zd4|;$mcB+)Ym*b3J3;wtySQv+nRSJu_o}Gw)622&Mj={Zd*)_<lQ)us@2Wf)=8hUd
zA!zk}P`BwvG1$h4X8QT&C01^flZ>6HEb>hqEqOEc_eYF$zaNwK2<3<coE<u7K{nSm
zbh_hvBk#9DPzKhGdF0KPVQVVfY=fsOS5v7#^BdOr3C8lvpz#H5=l$P=b|#Dp){_)i
zKjUZC#`96Xk8opqB|r9sp7W1im<F5BYm@(7{Z}K96M_*U2ZYiL!_jA~<8XFqt?Li!
z4{;{nCx^GdW<yFmj?DVIusmR@i;W2{_4L$RID}on@U*cZN%MWL%Q><(qi*Ali(b=F
zCJmLXn%YsP(Fc_ujB%e)5Q;D}?~`x7(gC(3Y0we~-;S6xW7AoXs4;%pa(W}%_$Z6`
zOHa4<o$y>f`69sJjojlY9V}ZPU61-OSK_LPxW6|S=U8z><5@u?#ty7~C^l~R7cpjY
z)IJAR9KVj?>u{iJ<?%n0T{6vxv-x?tG5UwB&llfg?*HIRiHNNzL)kpux%Ev}(}zCe
zNxF@L+bqtlEoNh?qiS8bTZ!C^XL9}6;Xg@DsDG*CDXq_)TFJ7s+#ygVDnu7GaONWM
zGnd0CgLAE3*dj8oF`>S*l?T+dY;tnn)6k*|)8V-54lX4~xf|Y#ujOnqI6d{Eq*1Il
zmtKc~;S-+&HI$i&L*ml9EiV45a?9WDS%A}&?VS7!2v}+6;FQ;G>aR1_H96&R3Ml?Z
zPGC<97d+(K)D-Qbp0?VB>*<2JFI~Jw_IY0tsx$e-70U=3ECtj`2^$g{uI*Etf6cok
zW_4C+Vl4J@i`kqp3eSPLJXeTywt&taodFRB)7*fz1y`r7Q>8vIAA0EygtK=FtsmQr
zu<0HB#YOCt=sa_UX5-|4Y>~z74Nww%`-KDrcl(BJNzbpovVV2c#Z-AGAKqkUMH2rK
z<EFkVnLfj@H85tlsloUpgWZI|8}yHAFi5f3E|j(|b~g|D@*?AM4;GdwGy8G(VxL)3
zge)x$wT9JTscMe3uiblnR(JmTm5U9%i<ZU9E+F_i^5|*)C!Xn4Anq0hgzO8JaO~bB
zUs-7Cqo0VKKyvKJ$%5=(Nth|~o2>&gVm~WW5YMXfuKbGrd~}y<oI8swaMHFwGZ8I%
zVj3}sreT@bNe;yuaL)_4Q@GBo7kz(}rRT8KBLR=HuW=uuH9U;QTtp7LR-L$T+Lf14
zb37{Rl8kIt_l=6f+W>MO*>*NLCBR#jl_96vW92sQunhES8&FsUjbK$u0ncq+t(kz?
z!RTv3Q#VRATKb|<wR(nf=e>~*MMu`S%fO=0Q$LN^=F_`;;&*roG}X3m)~eF-bIrzU
z{YDpbIK?eIg%uW(516>Z3u+^;6*oCJMVf^aO+>ZpPnfLlaqpFkoO!`-`~7B#0ug15
zj>`Hc0%n~oH4vV}0WmF>r5(77;TGZa`QMSBE8Ln6#o1kRoMhHhYezUkwzZPJm|?@@
z`JM|dPbrJ6x9oUcpizK;0}rW;HEZ0&C>ZabmxRBByIma3&3Tm%FCzat@+-F60?30b
zk$XiVPc3IOqJ%ar!(O}Djt`=aQY_D2d&{Vag32eV143VMnYLDL(^xO5;fXNy!01N3
zZrGAw1Bw;Dy_rt;rgZI9U)GDG56Il*0clDuL;8EJ4gX!(LyadD;Fg4bqQ6sK%p}b{
zS{U!4+Oy?!gw%ASl}Y<m^S5{Nx*;!iyeLU*2EHe?psv`G*VQ#T$%zLLb`KbRBG%ra
zsX2A7Lp%dCkzR1zdQVLLAG6$iDeltsK^IWP#=qo60=dYEwF#N)TM@L)8c|rL_>@*-
zpiOuiMxotMV`kp*(HeAUeQ8>PuFo%=cPPbc4ub8s?3!RV;xa^s21vOF#k}?Dqr6#t
z6PHV_emFix=VJ{1tlk3a`OcEK`Vo-u(5D+e4gxgMxnuSsQ*J51s^im#_TWB=OtSq^
zPWmQyT<tTV!tBZQ5KsWONK^9BQmsC*W`~150J_@`xSiXP>xk#gOk;T<$qtvsO{0Tv
zoII&?yMbPxCaW3avy;pSa)XDNbJBGC8(?;Exdx)`Q}?^b2l`Kwo7ynpW%2;+jo%6O
ze9CS?W2nMSSa8)jYksg!q=ZTc0_5{i1KcSb+|9YK4Y(azP)T?LS2@idDn>PT53{zO
zOH0B+SPDOrmoT2|jJSZi^@t5dzVOy;z$839VEJz596)`Kc%0HpXN}*}>y3xyc6Vw=
z1iKebV2SZzlA7F~3=#r5r<6j3df)Zl7Ys<)7>cRmDvov6C5dcE6dK}Z`**wucPi=r
zu>vsm{g!_<Nh1=ULN+zTgPjSN(RD$++_fv(%4Qplv{PsCw;2%Ex(%lH!5(n4OHlQn
zZAq<sWKVdqY&yDfsnM8R+ZayoqtL!BVod;kH?0Rd)mdcLZ(FusCJa=p)|O(EPN+YT
z`&w6Log=kYc4DWMgX6AS$O#I6_~K5D<MtGh6Fl!BrYgSvaw!$a+k@EO)P1hxZtjQC
zy=P2G?|zgC`{}+^*{Zv+qmbXLAr;uP=<06mLW>?WNkzck5KGkH=WKf?rOd<6iOI%F
zxp}yMxH;~Ba;S%S8iY}IPJA=^)tU8Dv*;)BvjoD<I>-ys{+aK{hz<mHcdU2z$Tr5U
zpabd7{I}Z4k{`6d0(!D|Rb?+s8nVi%34zA*tryHBDE@=<&We=*OJO;TywT)#GA6-W
zaF*P^cMj$Sx1a0EKC?$qV$lEPRWb3<4SB^Tkk+BJYPKKsFpkRDOUMR46B;vI#&flU
zbzs5TNc<A(?A!9gTf3g;>6bWmt-}(R<zC_sTmZ`ND@QHs@<OJ=N&e8Lg&<QF9l1}M
ztpQkCWObn^pm|DjADkp>F{$a-J|$J4S6B!pyoQG41j-#nOV>}_dB_Vu`;%Yv&%xzw
zn#k*nxX>X+O1B9P^b>rHL%#Q=j6b2LXy*?t55I$LfuRxcex{(Foo9fJY~Po@Fd;}K
z^EaD5tzKkxS8jT}l~>MZcMTPkp*YoL9bZm`PklGhHAtr0-np`Z8lA&4cPYb<{xfI^
z2ICoR!#G;5Hu;t8?k)FNVZdeJ3nCl1>QipFhpUv9QBI>4ZS623Ib55&z%QSDjsVTU
zu7iyXt5PgGt0dPErpQkU;Qn5|ddMe~B&+gi7pt{oP{Vw~76BUk{fQ&|_}*W{PO8%1
zjlzRI!)ZPRNx-9b$;6p`S(?${VTXhy@00bUMk3BbE_yki*WeB=lyzFab8#LPYs1tp
z37~vWiZN4m;o^+%+LP3hZKUV_*t05n-`oUO&9BJ*k>W2-cdvFLudHp>m5|;lOuORy
zHvxEeOeT)-Gf_@Af$k6AS%2c;vxQ%Mc`k3@_9~-=b;d{<Zkpi0F(6-u;m0u>#vUjE
zFm6dG;>4v;<gA;f11N67u+%-JkAzAvz8|OOe>l&HhVRbgP_Wk2G*W?gvWhG6ct>~B
zYM|UNF=Qy%!mv-qomljrL3-VlogW^uUr6%pgk+wSE6Y=I4q_GV1fC1PWvN|39++%w
z?z6uvC`i7*bH@<DMjq(U>Mow1$mYjxMbGHPUQv8XX}kuF-0r5m@4^CgWremRyRBR$
z<8tSYV{R#OJT7>rTC5JY{Em9!$-@-W>*v%Y+<qVj1<x=y?sWE{C3N#n&i=e(t1&&l
zFOaj|SV^5p!mR4l!Xl9z(QQjkAYXBJMB8&eh8zxlid7fWXg~CHz;_y1a?V3q#sy{&
zt1{|`P;wrO8TTUA^5pCm1wT9c1DB5fvsl-(Yy>@N@X&uW_?pcCE<BL2sJ4LNp69F(
z*iV=(E#|_tq0z~vLX$<|z1*GWaXXwh2NC}f1YbY#=1ZcKZ=wTcw*$HGtPi{|D7xhF
zr(Sn>`J-(AFjRcjh3A8C1}_9{jr(P%Vl)@CF3y^w)(ZM(s|E;gjf}?Vf;I{>%Iz2>
zzfkz?Bif}rl5Rx)<;&q-*3z9=^^UHneAd&^rwQv+c7hyV^v;PuMpy30&G*n&J78$_
zQ*$*C`*V&}^tGtE<|FkRHj2Lswei<^Jz01UXbd|g8QT%#a8eU%px)`wq=e{tH?5$w
zJ8TlpigTb{FwWOWBpv%HoxtKJlI*v^>J_poDOaVY#{f0UL}k`+4~pM}mo`@%;@`(#
zEuAHBTuC-qjW`N3x~JfB=yjqKJAH@<<*}#G^r%BP+rEu<wM8-~T1qY>2LCgDRnJzR
z?0zwjtnmf)N3%=S=Fd9c{X^D?o4O|tZi3ivbRMVT)k@ec8GVQALO+UtJ!MOMJ?#FD
zUg72pAfW;I@^#OSsFS3Y==!+X<7*3X9Ei}LI9qp<K(+?4!EpjsX7D?ysoKp|s(yHS
zC;L{dv~Z`XBA21Rle0zlb$`L$rs~cm0rv!m^Dx5<G9v@ASiUCRbSoY{Cg$2*U%A;n
z)iN6y=bbY1)h^7xb+CSWlYY%DIQBYtf=a|R1g&%r4|J1I$a=ePMfVO~C*bGaaBZgo
zj(JKRd$~m({n`~$l;jMY79|R4Z!`BRb81QaF${XU3_Gr(BsYwnrN+ItTvz^EC8tdc
z>K1puCEWGp`t=nh`(a1(D#6Rmzy{!2lPV1>iO+q1Tm-4LMIN9lC<dP|)Lg!Fmr5Ts
z;dV1?^r3qW*~2tpJJ;fAsu;ItduEi6NYX~ednTyW0IRLb-dJh0De4l(zD69Fm~Yl9
zTdiQiM8Cc-7@V4E6$amH@xtr}33x(oon?=_dXB9hRviwudAn+!mB_seN&>8X%5__5
z6|rVA$^(%%UOv^iL9$;OrrIE%%ZR~;@x&0z|2d2YD9t`={*SIsxFG7z_RJ96wh+y^
z6R->s(9ut#3a1Ck2AZMi6Y~YyC0X<zRUtsb&F(J^0MuHAN<m*pi*3>*mH=KiVj)KP
zcBb_oAES1d2Yd~OUCVt1;B7EhZy9$4UXYw*&mKV~xE!VX-U~GW>pD7{C>dmJZo3rf
zknI{}Q!g#sGxlHaLq}e-m6f-hFZP9E1BmejiP5H$@Mjx9nN73#ZK+h|_i@XbZR&pL
zGu-*DZ3%eYfVrg83X`nDnbfth$@hm!J_%@j$b}Z_6D$fmdzYqePt~-_H!2Tvp@Mm{
zzINT-uAMK(2Je55Jk`_z2Blhsih#0)@uoA>hsW1`b*EMN>WOdkzWhjg!_PS6gk2Qn
z`^<W&Tqd;vyf&y=P~?A_aUeKmwp^rCGGbX#U1`&jYyHs8uwGYgvjU65p+nxQ>>Rpv
zGvpMl3}iGgFlHuz+CT1Kk<r7u1c~vkY)RQ(V6}GFhm|Tk@;D=nbjCys1)`V!`bmSu
zQ05ECr~An_k~M!8jmJImvmPFqNNxq6z*~_fKH|{5C{IT*Ji53oRUwdeY83(?AEVM$
zC5iBH$m2!h7ukWzB3{?Mx1pI88qEQ48zhM)j(B@(m;FE+Mtu1+?2Az3c;032VT!72
z0e+(L5AuTqD5zZ-A1D#Kn2Q?M4bWTBA)C=vc0daT?QIud0a2M_xDALW2i~Qao2-|>
zv_WINE$?}WCU9A2wEYncXf*z1EK~_f>4B7nX-808=h^X+!$(8W%W1y!dIamE8k%M6
zt_|v8hX6f$-tfBMJkk{>8tQ?e)?88RI!R)JKHNEO3uzD#&m@C<`ry$-p7UZM+<$9@
zUmm;V_8VjMPJwpeB{6PI!yGJ~Q7)y-<Kef&e%nSwj`RGLqFb1PCnC<+8~A@2VzfL(
zk*y<YR47?_mM?j>o8L-}r02^W&PEwA>k*UzPp$r{q1t6#!tEN?k;cWok&^m2vrjQh
z@QEFL2OhzcD;&`+wtUgm(|YwhRf#~|b_a3b_L#sc$BeV}z!(~-F3iUu{}3hD4X^0?
zdgCw(*K{IFjL}{sP3C`4aI9CUS8BeB#r^8o+lCHaGWuW-QI=N<2$YR?FAoG6?WvpU
zkF3vs;Agp!D_TXWdd!6Sqp1Z3lm~B>dfw5P-aovo5#u-x>(?+{5IabBW&O?NQ*<lT
z->{;s2$!S&4J*h~odJsf4J)`cz}NDPi~3%stUKrGoKV7k-rp~K;*UNHz*KoWt-aj-
zG#(`Fq9~}9IcxnkhsYu)NX|Csc#toS{xVJB)}ctcKGvh~*brpVxqs#)dn6Rbg*P_u
z;?tK9_37@hs-%>$ax>Uv_O!Dp$0}dA^o&|ZBeB?J5nK<;M}~&~jV1j4KGb<7n*{6W
zfixfzrdm7TO=%78rikJ`ze(W5iIc)F^FKve;9*WAv^Lo@&H6e#=-z|18UVL)^;~>e
zc)TALk)AGFt#w^TT}*sjXa|{(__5|c*0HLb{w3#gLSU*;H;n}`51zzj3D$J>T~75q
z6V9V@H`S9WAC=;MMs@}3z;&d7^+hY}mxaB0FPyBJD#%BibOH+l^bS~m@x-Tyr_KV`
ztS^5BvYjt6#zwtj33W0+SW*>SSBVo$8s`NWoX!D^PNYz+#|DXK{CQ4SAy9N&K#$-w
zT!t6bA$;=n<sFp9w@nQ}+)2`FYBuRMPa;umc6v0*FU&R&Z*K6X*q@3<<i8RNnAI@Z
zqhV!})-bvns(@)BxNE5pP<Jja<q;)bXm5wLqu3jan#(%4L}od?twR$mblD|~nuLCg
zl=f{U5&bPZHbKt!IBC0oZ>YQQmW))RtxmWFq&S5&_-l2Xu%HUm7oT?#d7ecNOUq#2
z%KG%lL~gcI5^~BMP>B0gm~AuP%3=w3Z%5*?#OH~}hsO|l3-f}ln0oIr_JTo<a1vh<
z@(+nmf%tt49h<=G1u^NGKQAewf6gDuc3QwTH@qj#&A7SmX}xzdhW^SwB2_JM)tlnf
zkzw?ll^&d(FDFtFo$bD`5zh&R(!g;@CE7=RxupOz!?sC@l9Tl)GMk$jn4e}>hR19F
z7KCpc5Id5bM(=5|lMyS%@CT-!dNa9;ZG;5a2VF2nG=67_Urh+_L`a9+(!I|U2pylG
zhx?876<ji3Q!CYwB@T_cxL-wsKf>=Z(*aj?j(m!+FnI?}LfMq&kgK}(3r|yh@p_sW
zs7=Upd3a4GS>t8?y$)eS|Nn<Tc5U@^_r9i|82#RXJ^64V$9;FhntZ!*haU<H$!oR%
zLeyEtfs_r`8y1BWX*ZWal$y(N0pU-LClQDIxrA%NeQ{MjPSo)tY#eB&>0LAazpT9q
zX-VF&g}zu7+z%LD^W7-}?YC!9k|RxxDl8|g1(8olQ-F<rAT9rHqG1?5Z65)aDoMnb
z>~R0Y;j>mP{ofGeXTx==97QaKkb*m$;}B4A9Rp|I({SCKne0zqlURIT!XK7gr?4p$
ziiT6A1@0{1x$47kFzC3;3=&}ncGbcQXEWiUNHa_x)^VzhZFAANK4;C0b`yUCfD7~#
zCW}T;sus9vlIBt$a;2a(l}#LSo3C1rqU(BQRdsRos^b$69Kz1c$qeg;v40a*Hd^`O
zvBTL=^kb{$8_(J1YEkqbavSZgnC+RjoF21Z-7H=joqThBK}1Aq{h`NANe$JNSzSnk
z+ki^Wisy(+1m`}~shhq8mkpGfmW0<)QwM;n!pu{Qs&DZ#a3PbsYto>eOJsm`Bhw|k
zIPZHIioj7k9r;`bdOESQzQYvrQLX@p=sqLVO9KE4l^J?&`BZtLpnmudbs+ecI*4n!
zuriIPJU`vOf;bpUz{$&b;TH*hWe|hI-r4g{f1yfNvvJ9@Iis<8)t0MBZ=17}w73Jf
z+X$ERAeGtby-`$_Ci=9@nH0{0GrZUMe216O2+i2~jH_?;FMUumc`pSJWI#CMP;9Me
zC!qjY<q#4`l$jsH+l6MhudFbs=OCl}j;z|;h^@viwf$#qw-BrCX9Afkkx)G4SOu^3
zI9gi)r3?Ak8twTNkE6F|9$yRP>AsBbZpN(PtEDYLmD@1*nh_~yf{M6EgiaW>+SCsF
zE54swqQxVXVdf;kwFr5#Pk0Gui<UKkFo%p4N?#HJ+SPYN2D%8%g{RO^n{jG5ZIls!
z(1&=LG-RURVnV2D=v^?`X;x7<CUQ-^kj!qvv4%y}1(qa`hkDc!)G`FpT%n5Gf3&HV
z({(#)XyEw<?n5Ia_!fY)isp!#agZ{OrM!;SH})&Gg`uAgUL1mX7AdSfa@c%p(bq&_
z{){5R%Vf$qbT}v4%>f_0((N1kl~DO3SgiF9)T@Q|ktv6%iC8^Z0Zr8uOIZAL>x+*A
zT;JB%4`0KN?!??si33dA%!<a!GiK|In-~R~YzA+JYbHqYX9Iwb0<9O1k<1CU%C?;>
zhAtD!a0%>yB3J~^+s+uNRT$-t1Q+S{MB7J!1VyeaD&C@#{00NZ$v=aUnW7VEEH2ua
zuZ}I)``K**0H+{T-ia|jL>uEa4wqoTtYsk)x5ZlhAZ#$RlTpcQr)L@)u5zX9rUBo`
zZ9(|q9Dj~$zJ4)wD$xCfUbZJ0vi@3Qo{5A`bb685Rr>`|>$5Z@N;CxGmvCJ-jd_N5
zrT3Bo7ATqlKfLg}>#TI%d0bqFhb)F@Vk<Ju#v5o>_-3NsLKS+CWpPm|sI2MK>K$J1
zn{dS;<$6nT>pIHD#d9J<tgF6(?qYRw^JOYtX3Ac>B$K1_lr5aK^h2`^EG$fLW}TDV
z+Nt_NgmX}QVJVjAcmg`sS7o!MhgQ@?rcH_trtp7CF_g*PTtwJnC*1g+BO|j2><+_C
z2Z39hmp1pJr<iZFXU<7FmYAo?xi6-d^fOw!%+A_RcN=0~*>wfk>$eJ>hDwXP&vL^l
z2tW6wKL|u!r35g$zda+-VD;{PaeV%pyKkJe<sh5Enjg;VB1?%R?Ra+x>6ep?4ZC?1
z>(pSpUb|sd4~sTmhu;*pHY9gCUu8Du)%dd52L|pE_M3B4oHuUoD>>34v(;9<#5i>A
zU>cwr9t}ShQe)$7=C{fGuFQ;%l*8oEqTj)?ucipmnVkUX`tUZ&W(bVIqkj6cT@@fR
z<juMbUV6giT{rI7ufZ!vCx}g`A~s*pr{<;#W2AqJ!BTHBI#NL+s}xH){+*h2etp9k
zp65Gok4Px?69vPPwl^;652&%y+Jrk6DZ%Rc-$Hp6d-fcni&I>omNF!)aa^)AcxkuC
z!k;Bu`k>)hY`AGSn#2T3FSO1wYyA6p3xLb0HL&d!5d^?nm$XR_g!}5p2yr#x=Z7|K
zQlv3tOFvIfHT>esVp|Tsl!DCHI)MJ@e!XUp_4dj1FT}(o?-*}~);|`WUp|F9$zj~Z
zdsgSQC)h~st09x1<GcG|&+PX7{M}#h&oH!7+?&&>^)8Y~($Hu^WvKo-E%djdiLw5o
zSFn5yKgL<FR85Rp#TVPSW_7l0Ycf@11g(xU1$DWFBpmGRWYijW%3sGF@M_+*uewf0
z)lTND6ap!&0VV1cB~-Y;{roO3@@<*p#`W=|69G@cUxj#1LJilA*;MMJm}wn*)IFRm
z|H3Rmb(z_LLJj-+oX1=HfDJgbHV?PQ9`L?nh%4)KSKtIRJ#-|wT1iK3)fXibbsqZW
zR+L~G08vP1h#a?G$E051QXC7|zu1G!%%W2i(2L=?6$f@?@m?j9qHDxFu*Jm|;#%~n
z_IAT-ui+IR=sS47YFg4-{!Mq<^egnOQ(?`G1yww>RNtUZ6l-$F(qJoK8{P0q|D%Yw
zi#CnNA6=g#Zjhn;Vs}dj4U<A{n<7W(?l6~z7cDb{|CE`sR&y^E7J6P5*YKnHI|?F{
zMt55m9<&pzj`Mlf{5iBDMr68IdOBIHRcNe>Na_!a{)N!AWWbM#<ci>M&}*(sn@zUc
z6>Ght*DDwM7a*dwSC^I(C%q>{(|4$yN^cp2@%UfZM7%g<=rav_s-ctQB^2}Auv$lF
z(L_C=38YcKvt4pfNde%1-jIKTH~(o&g@$i56Wliaurs-je&OX7{d*@d3uU1qq!>p&
z@hVHJQC}^K^x&&PxvIvN5BFzy`CNuH!*!9j>=K;?imtAWaoAJoTwDO$Fkyndt6pPo
zBZHrTxL?>>`5v1Y#oIhPMe)2Ha1iF$c?vKd`s`r%ZQFBV`|i7CI9`J-8J=-rK+K>M
z4jd~d=gt^0HYHG!+O{^~vP#~7TyfXt|3y~WR3O05hvEIgYdxR$>aCxa{&dghU9emt
z#+NSBDjH3Xrn9J3)Uy`r7)>xCbDR>x?T)!e;hhX$7wV=uA?w{zQ!q{pc)y(FWIEa;
z88LdO!m5nor9Svd8ssV^(Sv8`c+xvQ<puf6@Z^M>addT@16dM9$6l`o2?uzz2i!o^
z1FpKxEe3DV7}rB0K7-)5vb(xm!UK0WHdEdFAJ78=ELE7~J@@Z}A=e&c#Y<IB)l1>K
zDXJeccaPlN8phIhmZizEj@i}qFaMLLaDuxfMn$&ac?x*Y6D#3r)a}<1c&r6^bER2=
z2=@;Fz$Pl^YFAHxG`W~Z%obR2IDPw<^0|4UeBSPCpGm0vgRNZP@zwugD;d`#9KHQ4
z1C)*145#ov<+^ZIdd1m*i(oGsmsr86KlrE{P>l%93H>#o&mtg$rg*U+x+CQ#t0{LH
z!T9a_y5><LCs575@W$WX$W&wSI_ibBs|u2kIgf!b?HtDK%FKLAwlp!rP(ZcZ0A-Pc
zFFIEfW9LY5wxM2m3jp5ZZnBL6Bwi+6kmOt!=GY&fp(0Hn8wT#@xP}ZHElf?zcxJ*>
zWt81`zF5|1YK;Ym{s;=MRs?pZd$y>#MX~7eu}-cFWegu&Z=jf1^QcjFhsq5}s8ptQ
zz%!p4f1ws7j<T7b8Nll6pIUz^X0zEoKQlPi(n35t-nf6}n_**!y~o_C?PJ%NOBjte
zMR+dEAMeql{^XDxVd^7~4y|#8QX!+C$f?6>nw=w^P6iv%g*~=bF2-h?=v1inpU1vp
zD{?u7M7S>f>F8CcQmrt5RhkEYn@v&!?L!<nWDp)`$F&pCF*Y0lpV4F{MdL&}KjzE!
zCB)bojDW%mS-y}IQVKAc8yVdgrfsh@2+;Smmbl!qxv$1aVEX;IMnG>(nvZyowFW?^
zKj_p>reDF=BV8G{EtQ8!*DHFz=F)x3WT9?~_meqe-=(&smn3QP+Hbx$pDAS?V$qvB
zqotz~$xz14nGz_*FLGze-^>OLu0!;(<9x#wE@ZH}o)pZG7dmU?CJ~_8py2j)E<iyu
z8B+oKl2yN1@jYds6B+4Ng=!2p&lfJZqjDOJW$iWwX8^aPbXX)S52?h+mpFh1lj9qX
z0S_5lcvWGUx^Ibk+Hf*Ut`ZNxz}w3g85j4K>G_?twoqQrU3jv-CbqvSx!2|k%DP4V
zZvt|r(<xtGIc~|>qUiq!9&AS2Cnq4-m+$$`1g^A3#xX=7k3o2?Stppg-VZ+}6L4NG
zs_nmrocWDW`x<@arI##ynGGU~GQtX%D7^AE&j!VT?B##D0Pwife0EtrHbCIT0h?JG
zAIR7Y;nlNf$ifO)<3BePCz0&jqD2?s5?wfAKd3*z524Il`-o}tS!)$#F~`_L+xJs2
zwqAWyv!VgJf0@&?-kYHV{+P$}@!yL5Oufl>8w!9|UgH+S5Me=E&^rK=UhUSWw;IQ-
z>uA?Q+X|3ecyV@wZL5%c>!ODoPD6sX2A|{i6Pu2iQ(%*c%&b(In@|L7rlca{hxmYp
za1xuwm2sypL8VJb8-C00VS?WTd|6@W^ViOB>?FtYHT!w85Dbb9@7#Icb^%sN!>?{h
z8S+}{RnYC0{zEgt`OZM1j|eS6vMJ9<e=axJ`NOBvXK%Cv9iFa|n8&;C;yv@QTem+s
z-b+{7lVQyN^l{6H+^>7cz^Wzh+=1qe3Izzin(PH(FhbqeLI>w(s**h<RGRF(E+<;<
z7l({%a5#qR{$!XTfS!%A05tdla07(+EeV=C)YN#&&EltU!$rAX4}709e`{}lvB_K(
zwUob8&#r00jND-hw7_iqSp3<HlaCkE;6Z2!bm(rPT3~N#?}UN-Jt+pYVw`3xPSN2D
z<_w6c`DXQNQc>!$dL;9s^*ux01J4)vh&!~+X|RnYqt{ykKaAw-Z=;n*L*;R$&nbT9
zIjPwTRH}$-)!OGG?R>BoOu;1+tA>Bppr_iii=C{VX@W6^quDvMokp0?Y<LdSuZVD@
z1efZZU_vU~<d+!3S*OB(xP6%db>S=%I^QYIr6cN%2qz*`k*5bgysR2$vHe||WKIz7
zlhYIM7YgB`oGa+6U8Z(NO1R(3YY;~UkdHM$B;Kr;C^!|CPIYNiuCPsIoSeBWy8K3R
z-uAkoVh?NY$}36v1l9o!i;w61n-ZNS^}ATOw_(kG6Z`W$KSF>@i}79qa@U|y2Lj)|
zCw<-S+q*Bz8A9i(yMnGS>Vk1A)>h(+1T!)^P1&ZpzSQi!-F0<5aS>*&Kk6r+N3aE-
zb%;w(MQ(j}8fDxi5*L6tRBsgPmzzF>G;iFuwl0JzKnQ`aQ4%DnUE_Tw4T>srD}Fgl
zd4*N|z<t9FMV2h_V!wuy?>7dz&L*g;bBJ-q<U6iGQN`cNh!EXFj?`_8gIhSa%>Wx2
z=;aY^a;3G(7jK2rJSej5*ewpn-d<O=Y#dmc={L(w)HrVjoL=|%lsL9eJ$|LZyqVkw
zP&+5QY4P>>D^Ud<jVZ#8$zm8SDLyRxC6sg=#RO_DTOE3o*iycW`mZ@!wvp~j0}IC{
zYm9x#7d59}!_~IAy~IPD*V_+7*aFWfP9!d8G-Y;P1A0hJ&JdUD`r-pG6yLd)gg?i*
zDDP!a-2AItp`UWzQl=s1-EH(}Hf1)Eix|Q2&W7)K%@d<UpUxkr^PP50V)9AB+L`&s
zBk~Ms``Y5bt}m)ksQdNaOs|4Y?uX~<@Vq|9+OL-BqkkaJhS3<8u*1Zlx@uOxmFgE5
zdN$5V9~rBBmL{^`Xpx<IHzM=|u=}QG1ANWHgi;;J@8JWFkOJTl(m3`!_&!k0EVseD
zCrKpVuv&h?9zI<2y|)sc^T<00<7)flUfU?;HZs^7@I8)0YKv^j!N_jU{?eKr7#_G+
zfWB1!k;s4?-FwON(tWcW_6-@T2+eEK*(Hp<qJ+o=;O87|b4d!AXXU{}DofXZ&wlG5
z8d)qiP3h`smp0JZQE1h7<!Peza_#=BX^rugmN>Dm-GoqZ>dqg*Yn<2MEoE?0$<gO8
zsdS_lg!|VE8o~l_^9ie28Gka6XwSJ4{L@TkoA|EYVk~-^o!k(YyUu}cakhb=t#IG~
z`FHthWjeK1K_UFs_;&aS`*S;|mI8+1v)ETeuZ9f_u=NUHp=l&8fp|xFpzHstSTTYO
zb{};JAFFq=TB-28x7epE0bCyw!H#KV6?5@dl!mPgCb3d}%_R^j(?3E8@8saJmZx-4
z%p>Fs6>_=?w}H0PK2=$i+zhC>s1t*_{*&;)A)*GY``W!TLOBMHG)O8eH`O9SUzoKP
z%f04%Gc~kjjwVi%zEtYj4)k3v+;}-TrBp-jZmSM_i?hS|yNGtDUln2cbly327>GSB
zBEWKqX_SdxT3fPmF_mvE`|7q?Mspg*(!a@vk`v(O+c;LTXe}G(2L9qT<UCqNE~+@u
z2tP;^9;{q&{C*<&s;(eaQC7IyTZ@Rb&2_q5$wH38Jr_uH<bX<&FZQODboCfoXq|mk
zNWuFjw)3Kc)=WmHGS!#O?=;lI>4au_!N<-<fJ!L5fmT9Cn{VuUT(RuwfLWL<qk-OO
zg|6I9SMB1s?`MoXELfUO#9tuu$stp7hCKRDrEXSVt0-tZjwQ_>5xOa8;Nz9}LsE+f
zCqOpX%-t2%h1NG?7w)0_l_SV1?Gkl>D*ZgnsJTcI20<|L;1o6hG>iEhfAM2pHZc_M
zOM0wyfp15Xo(SD7mrFXcKx5<n0V$e%DKTneG3myK*s1_boY|<?pG}O#OrnKfMm6(J
zJBL0V0UgPQ&lb)?9MB2V&kAl+fL%v-L$@wd4q(q^BXYH7pgIcU{NtaY7?#-AuBC{X
zZD=??V@w&^&J-8DzsRjqKb%z^!n{flp-XM0-f`3LTTIm|v}Z{!KWYv7yRU?rd#xx7
z<|I>bQ!+Uqd#fst<OYlIEK<#}gpj&bvQKlBIxTDm0N3^{)qVL340tsSeF|fAZv=>C
zX<oU~EL$dZ422rksVEGPvB}leuYE;^bF1OV)MNK6ndexWTl6kz@mxSDnG8LwGhZg|
zJioX#+CWp+20>W<G&v)19Xg118<tW=hkoa%Y}TA+%spM1dQ0_5Z}?nQBQh7{Yl5WK
zzKIQX9rL>B_}%g2F~hqR7Qpg2#Q4yE^LY5^uZ8@;9kCJktmHZOpYEFs6DY5K!zC%-
z>a{@67bncCB>Y|1`fg+T`@2Lm+CaCTvbPRKd4pZ99-#DF_s0RNrQ^(5@AC%-(dArH
z^iT9HGq&#*oF@*pAv<8x05=wXD~=E9tf}fhn#TCFTAOs~?$-|z^YZvA%lfND7In1G
zH9rG~x}lolj~cn2)ckIjDY~e`xoN|ZbVFU+I;XE*21kAwwwtr<mYX8R;c?{L7U=@t
z=zMasS;4*;McMHatP`g2(RElP&03vet?5S<B>1ZBoLA$h>;clhT9}~8WFjdEnzyp!
zo2IJW5~r`6S?czUr6^G@<5+V~)9Z*%dY+s+jC$l(GT%%-lw~k2OxO4=J#z8RrnNZw
zp<LjRnRvjV^`!7pSUVLn(bI8irNW>WyJ@hUpQ1TFywtvS%Ut$oQtQ!7uH8=_S1s-b
zD^9!|ZDd>Zn{%Sk6}Nlsv6}m#<@F1SHy(S7YR(itV<eX$V?i7&yQCD$i61BX50-7J
znr5n;GGKMW>B!*6=^cj_OS|TelY+|j83%LYMzAYc;Qfbm+fu>lH6jcZm&ct_VdsD<
zNN$RGuFn_Gtx2bgMwN#Y;(=v}Fl{^bGgj7`mhR3gs^X4n2z0lcf?~PDMqd~WE9o}k
z;oyDBZ3Id9OpPc=sC4f307_1f?wO3`Y|}VTZ8j?QamlW!a<4QUb`|^wI?JAUH~&FL
zFa7+WLQ>AFs~jQ7q>0Q?2#|i@TOB!XRp;4^zk6i+z_R~)agsw<`mENrB`ovV<Xe`#
zoZG`otwZP>e!OSLXAI9r2cy^fq)wI{h2SN$TfKego&8*Vf^2a3mgAB8cC+9_OH0@J
zvh;$^r?oTUcA#f-_oD4MP#1V-Ns4cqwz==FTc}`jRzy6Ou%GjJFxiW$<AFE93QQIp
zqz=+eo?xRr5n`VWFxacRNzQey>5CQyYdn^aYy(@Abr+Uct3tk&Sjf*~nrT^=65C$t
z?l~|IVJ({Su_I+duKd=C=S|iciaYKFU99)W#xE`!VTqMnn|^M|@sAlNK&)FQuFsol
z$<%K>uZP3NmoJEUWMC>4SI0pS?40bgWgccjiJdwM&ndzQ5J+s@+R`eGNInro?<r-t
zcV7yYPthzKS=yHBmxC_@OM%9e{a?n7#t+#;KVzuU)p}B3Uhpmy+IVoMd4D4QkyM(B
zJ0zBhTdh$9?Y<NWo9tRQ-^9QV26vzjbWij>QY3uUdcOBI;tR_8TS!x{*RsR8P<j~E
z9H$a+?or4^cc#=pf&NxZ*wz;D{vB7AI?3!;y~)Y*!SWKeJ7lPCF$kG;VaHoqEkYrd
z4*kb{IGC5M+o{?r6A4;cm|7piSU6oxm^>X3*-}!bceXE=+3Z7+r>L{*Nb;s|2yMxP
zBMbovgVGBD$(}J|R?gk2S)G=3#(*OV{<zxL>$nDs7H)Td|Btixj%T}j|Hn&>s-mUU
z8%2jvHEY(^YO6|UslE4%*u;v_>a=G>&{|cq_6j;}X{{h6)G9$r5E0}1>ixdo<9FZp
z=kt4i`j1ECm7JW{b<Vl2=XqYw>%3-BHJ;~8s6`@cP0mH6Pe;=VXN5T&2i}z15fxzQ
zR$V}s><Y6HB=Cb!NBOq+St8`MFUbZgJYcA<`f7GE3SnvMpHO5VZS!zg9&hwP`=(Ed
z-&?AWz)3_qbLagtml<g2yu4`+%I6p$wt;LkbSJ$<I>>w(w(G6Il#7av{t3<-4=S}c
zup9mBt#Z$_rayDsxqOvrkA?hMxxV7D>NBbCB&JNZF9v%@4UhaLWYa*Ks~(;U-M?*T
z=5Fnw6fkpJ^patm0kklXLYqA3_=Pw|5+-FeT47cX?ymzPL>nxo%KU26Y<-x)wIE|R
z>bqdG?_}<^d)#z=%FJ#W70%6&(GOOPbc=(TA#(J`GTXBz)*H$P=`T6X@qljOpGvuZ
zzH8R9l{feNj$~c$nMB~+Q`1WH@)y4wdq$DTr!<ZLccd|0bjlT**Lu1;?N&3wM8)Pu
zX!s&1Ch<s6?d<*;LCE%t!Pg7r)xJY~Zd(Iv74F@58A(4?^U4>k<3;r=(vWYzQK{~P
zeoLq0P8rSf%v|^r8{?T!Y1a*DlX|fiM`%sxHp}^@vW%|6G<(GAdgn4C)b~Yl6KwpQ
zXg;5OA{^DY)8egS6lZ@*W14|u8h_WTioq%9q{fk`-;Vu22{X8wxTQVz$VhF#j->VQ
zGF)qm+q+^E(|`UXgtogMk%LCIpM=Z{r)JU}#PUEuy6>*jU6d{ovQ<k&Cz|kRkH1$e
zyg{uzD*oP|u0oV1ywDyI+N+IaI3r*<k!n1JM!<jvs_sX&DmoVJfulEmJK4xbx1t-m
z%Z3Mfc$s6d+|O!N?n6#G#iPDACHGYDa-2!!jSDGe2eo2m?buN1Sxl5hT{6^hx;Jj_
zLz16v-qssJ-scBb6E(VN$L9(;<>t37{B$mcH)M0M@~Vrg4;<+1zOcBdVR8Oi(IsGN
z|31GlO&VFJyPakt<9(OD2@<I8<O}WHFS`sYwx6}TSkDYLT=ow&JsKio#!+XuJg}cM
z7&=J{ulD|sM$e^rga$)9qRXECvQoYtr*|!4+k8nb@cIiIUSh~>nYSVH$4~f25O<A0
zJ{r3BoPc%T7ujF`Ip(ovrbG4LgUwmC`%_doV0i6D(9M2(ksqrBHn?e&%3HBVBOgv(
z9@-XF<T(RFa=b4&+G}YQ_2h*cFv*(dJXxY1UPu%SckfOVYVuS#y!ZM#>BKQhU`TWm
zdR_;w+=rr|_iX4+Hm=icDrE>;C~-u34+P{5#}&WhyYSE3R(PzD{4qmW*IEkrvd^VF
z-c!DgAkk3Pobv?J$wY(WwCP7+h*^zBW7>0}n7cWv7ytFe+#~251sg<7=dnpoS|&lE
zsP-A0rxvabYa`ufqa0cf%(~wV`+xj%GJ*CKyi1Bdq4jj!ueIP^PS+&`E1w&e_@xd+
zYP24|>8L0C^jY1CpNMtCjhX-B9sJWm$1I&_08==5%Rm0hjjYjEJLz6B8!S#04~_2`
zf6ctc{3Ktl=X8(67DVzQUf1dZH6h#I${qLQMDi6UgYl~UL_&bsg_+|5I$1Z5&-b|+
zd4Gu4^cCSO5it<bxkB-COq?ywcf>?><tdkU8oK+bj4wV4&siA@vee5_bty*(-SX{D
zQAM76rgDifzFFNl#(0_`8!o5m-ko(J&2!367l=U(+fr(1i<bTs`BoZjjy?&&y8;Gc
z`sq~z<)v0jV>pZKWrT#$@$NM7@}V-<p=~}T5iR|kr}FzD$UHDo@?!q!euPmV|BKTo
z2`yxMAeyy4e`xDdP7o?gzP+Y)(yFA&Q4e8oyWjHCtn+>V>cM_<iOY>f$(xRMFM)~T
z!b1m>mrLbWYgW7-&YA>$jF6ZJnoB*W7@;)nlO*7CacRTWX}tO{Q#YqwZQ54>`yzJa
zxeg6!kFxdflkbeZ7+)|%{@V80pT6{Whx*Sy><=|=7S%dt>Yo(9F8HTwCpFIJb&wJs
zq{Nd=l5bbWrEZyA7*jE9evmBg;6DCV(m*fw`NnYRp$^;KRcT7$;`b(L{~llTrngos
zYCADiG}*AHcK^zx(G3ZcYbMT$p=;4A*Sy8%s>M#K(~^xug>nN*AZHH7T4o))W2dg-
z?k%70c09oF&V7GcV?Z9iKodihy90~BvyKM7QJ3pF&Jg|<8sLVndR0sPp=DMT_*kxT
z0ZeiF(#zHp`Sf`qnau29S^2QaK93|VLD+tf-?Op#!Dv2-&q3vS^tumjBA{&oBOltL
zFzd46sO`9=VCA$h2pX(I&;54lBW6p!p3GT{Y%0BRfwIvQt5@?1M7X*c#6_iMxeir!
zGLaFs1AO4+I};DORY%leGq0G|tew`TNORF#?Zz=fTl3~4f<oAl=^2+S<20GY0Yp5E
zagLCi-n9ZeKHT6mf$r3k)$r@exOtRd%sHjN3IBBEGmbh@E_ELFtgRzzi~7v#jB@rI
zqwA)(BK9UiEl~c}TpM>Cps*b=u64qdP~Teg&yYE(EIu~}zg#l;)~1!=apx_>Eo_vj
zURRnpsz4jAdvKLEe&xd3rMOzhdoCU!LkjIFatJcEX6NQVhx^|nT)`Z5EG19;{@e8M
zJ4d~(WY4Dk`9sqSr=Ng-BwENR-+R3ks^0Z&t3{<0pCws3EOY%yKFD|^lkUPNt?AXC
zm-^ky{h@_hp|h%6j&sY$Psq|N-STrvJK<*7HTUT74*8vogHcq1^3)}^Q8BNHVe$@1
zqE@dddXV^t>hyxiH@ugwW!XEQv5!$n5@lttymtEJZ~TkpR_M}ja7{y~OvL9~9bsWs
z5Qk8Rk2`u&XzXp#()7HlfB5TX1^UPvYQHIBL#xFop^x`ks87(fg!K$o7SS%|evhsq
z<YUK8h({k*A^y(Oz3~FCN6`j2e`7>VNU8q{RB?xFzLNWM?1nEDVY4^Z9Tv*z7aBv{
zt8V6~@eJ9UN<P%^Br*r)1>x79&-LaWoOmm@I1YHFbS*+!I=olDyBW+_{-}aHi@^;6
z{EytV*0}EKb_e`bxZSyLeovmuKPT*t^EN$e*qtnPU44<J9Lhi$Z3PqTJ*`XT46n5R
z1df05o+eu7FZw9~=#y2>;`*OQEh_W)NBQ8c)xcR%DFroJ$gF7OQ2BU&bJ*yK5~qQT
zRi~XwQGuY*69$Ejd?jC<60@Hw@jE2HDS81pASZ^Ydz80wo!>ba8rUkd+p-`0w)(c(
ze%9K<g08PKbF$`@p@wZ(cEdJ9<#t^^ZmoX@o_KVj(l}I?T2MEcEQm}6W618{jW^)V
zkM%ueXspFJng=D{v$!gyog$FVL{z`>$k!!_K{8wvK|Y6a-`c<>0{$&D;s(EslhXI{
z@n(H<6iM?&<#K>k`xx%*H_@Hl5cP=Fn2VE<&`?V0I+qQY6Vc3gJTn0VFMIwM!yL2p
z_!%w;oVL_Ine3Rry{Hpz26wlx8`@h2P{E6a?i7rpC$EEay_XD}6ZKeMcY3V{M(*1D
z#8U{JGB6mYqq62U5BA(G>2*uApa0fWa2pPQR};>Z^{v-?QXX-hV-Z~~zj>%UWpXby
zxY#gxU%q{=MKGld-)s{LGP|(Kou2V8m-ur7d%0!!avE^dfA0mL;Z%GEI2~`|xh>LS
z8~<Xk@ctQ!-L_420P%iPsr`i-8;T=lW_ANR2&$g0TpisINfAsVPhe_jlLFo!ToQI#
z$16L%-`kSLI2MhRJtIGmxM&k^a~ZpB<8x26|D%~SEKoZ|2=0ju)s4tP85@Hq77Y_L
zq8dJtvd*_%xm9S|c1#g?&Yl@0A<U%=eaq^H8J?O!Ej^oI-Y`!d4%paZ@$I2=3uQD7
zU4it9QXt(Ibre=)sm-7RT!^B@>mX><=aGtWWMQH0K%f1$Q%<Yt`y2cG9!}(UU9P3U
zkV@Aa&uYT74_p?4)K8Bfrq!-)?p(1ED?X<V)pO>Vwc+$kB%PHAk#vrGJT$O<x2}gX
zk$YiGJX0pWWRc0N%DF{%pTr+pzbGTLmXmhK18t2kqu7+14{pb-C(BqcK-)D{p>4zm
zaC_-~DjSmTwZJL(P){gOfFyT!F=Jw$`A)p9n-k^pl=MI*pEC5b`K_9)16(n(Ks!wr
z2ojekeDXS%-XHMJcYHPUB{P3eK|DoALKVOSlxNkfM8$wkOZNK0o?77Y3)!~()JbEh
z8#(*FZ&nojCpXsHatgJRbU6=DRtsel3vkFKC3-prB}knvs$%NCQf`65ETMiiBT2@%
zd!}nB&?g6-X^B-4W&Dka+?-z;+R)wa?X@6veP)-F0oC>$DmP@gxCr;aFGHHmXRWBZ
z+xN?z*DT1!;zCWA2D_Jr7M<Ffg!fcjkl8As1LhLhgmT38kMTyzrzITw+SdE_GTZjY
z98$TRmYuRPs0pMTIo0WKCH?IJh!cmIzqgo;QdjNlOB<xG*4f8CzpF%Ih!<9ePnTF<
z_CrV8#RD59GokRk%qI1HK?o~Fe8T*ZpL4SBEx&GQKmJX&%pgCQj~|X|@}9cO9xxLP
zbpY9km`SyGN@3!kl17!CDdg;y3pp>}Uu7!>?-M-L&o23|78J&)LB4-kd`w?W>X>(-
z(O1<}fjm?SEQ{Wc7^7}4jX@0rfDNEsjy5}-I;Zb<SU=#>?>p7FP@e7*>o4Nir0C2D
zvJ~p%t)4E8vTi8N=o5XcmtCL3w#oGlW~O>r?V>G8WXlETfOT|0B+Fg$Liom~om)8*
zO^RMBqR_ZTlw|OWm~+f%xza1-2UjivsII!c0KA1s5100wIF3%QW4WP<8DHJ(eFd9K
zILs+QCD;%bE&6Zc3j&!$;F2u?mE%>jkuS2|PN?K(Z+gm%-MO~)b!&_I`B_}(oXgN!
zP}bs((t;WB{U@F3;3+*WNKO;78cE<0@^6y9<!6ds*xkS65i2V_m-e{`?9%<j#)Q5!
ztFC_wOYTjyNw?@7mw4HxAAFX(NB9APo|;qG>DIQwHD7mKrd7c$uHB;zy`q5DIDl|{
z@i46-1_?4drqpkV1`h;<OJHtpp!z9oz1hU5`XxoR53LLz3+-x=F0_9R568{}pzNZ9
zyL2C8m7VmTuPT&BI`{KYjr{-+iae+2b9);e`TQcZ+LTXn3$ey=qSeb$f%1W_M9Wd{
zk|4--vQ1NX&X424`p{&+t9Kelt;0I#7#CAgTwXb%-#HkJ(J5Os2H#iXlQRJx0lMU{
zH^32ew??UO?iEwycq=uLDR|(b^0rn_bRD+*h{$0iMFL>@0QghaGZYzNrDitxQ5yX9
zHnf6xTC_t`;a)eLW5Rdb0|tF-_h>hrEDh15*RP)^PYqL&pVC6VuB0$LERc_?bqJA7
zc?GQrS>8f#$4CeF_;U2s>t#njx_jnHBE$w}I#{49gax@o=L;PvHO(nA{_=%n10pdE
z2Oe)lRhnO=RLxo?18~?31+8St(}PGKDVDpwN}c=K06UghVp%h-@W!XKxWXKrvN)jq
zyy3H10A^#i?MLLWd{n~XfK4K@$crAN@sbt7M%8RXG)-``ZRg)YVdwfgJuGOn5rMqy
zEOQc$N~-7NXkM4&C^+HoUtpn!YbvhMn=(4?v#)5hxijZf{af2#sT|%3xO(+k_19t5
z8pVapMvHB<#L}?etL$rjiua5#Oby6@af}5fy>m^%ffwQtXU8<ebOHQk&Y1CGLp#Ol
z?AzGPW-I}ltB%6Fr|T)sa2F~KYfkNUifCswt^#-Fn9ypjI@RruKnC{$28$w~L(sXZ
z(_Kks?1*}Ehl#d+sydX`fAvI-J~>BBCLLV;yh@EIhZGG7LYeGlb*K_GUhf>w3>vCG
z=w(n|`?lO#+sh>%09SF0o;QS(cBbDN4lcy-m$9lHU}|Js&^oMs@kliu!2}dJhDm6W
zxE`R?i5$Q_(RG^(^@|(!3n0#LjLM0+jQX=fH_B8-JYI>7S78l{;u}%*l(Ll{&k=-p
z7-I7KqVolg%SzkGg;6N1;~Zl~-~LT3VfMb?Tv~e2P3FwQGM(_Rgm)r-3A;g<>)pv}
z<pD$su#$wT*Fg8s;wypStx-_uHQC}>)TjQf_a(Z;ZU9kN_hG`8<IWqd@vSU=JEct^
zaqylSQ1h(k44i*Cph#8OwV%8};0yn@sW|SY1eXg5uQe+7?n5r~dzu&dmpIzB#}{$*
zF}dw*97EU1jwvaj`}aSsLW%8Qtkd+zPlIiCf}&%VmHHvM!|{MRh)b9!h<CeeVS%eh
zLOBuI2quj0z%Fh3B^|h{^DL2KStk@%Yz%D<J#?>O_BAjbrMB(-+igp#l_+T74(1%<
z(}r_R{Lms*FQxiX4MOj^(;Pp?Yp{Ay8LrmEyj=me$aPm4!V2BGKv2A&D=t&0<7Oo+
zj|g|QTUpifXojjD%3iZk#@02Lz6j8VyRChKu%PzN%`7yoV|me)UTe%Ve9Ym^@`<}f
z&w}e;g6mwTSShw2&v}?Pq64-S50)~a3*%6DUBwh@!sc(YODE0y{CCd%u)oyw$)903
zw3ou1Q4rkb>ASPz2A!O=K_$587q;GhU!DLwGE%`=;=rWZSx>xSAubWM(DHQZs)jN=
zM16K?g9X$%sIQFA&#w+ZpCW`5p$}t(B<d=3W`HNV%h!D<+t+nzdAO@)2Oi!#*7*<b
zIKLTY4+$Ngme@cK9L*upD@`3jyOyX^s|^du82-{#MZCh=HP`UmknLWZvc-sE@aH-1
zlNqtwYNV%s#fA^rzqCVzuZ&hF9AE{G{@E=aJAXb4wAsQ3Dz`0gY0tjcE{+#FtNWQ4
zHZIeZm%*b0)Y_U70mV;W5_i{2c&9L2ES;FuH=a~H5OO-Sw%mihx!onYP)-@;{JP)k
z;J2%rBe#tiC_+<Oq0;>gvNYOLAn)xyK|}%d3m!-q)oVj&x75CSXLJjged!Te=9R+d
zx!+&f8b*x<%H6qrv`nswfD8;WH#>!w9`Z*hjnPOb;Xb66bGgdxv>3x_H%9ze=ASS<
zD8)hZ2I?7D;=?FkvxLT$8FN>@AH2K49W1jg&S49wE(xM|zG7Oz+m%;FX*z_c*vDbk
z<mY@}E)*LkK1FKpsc}pfUvE=#?I3#y{h*G}wD-^rt)CyO^8IdToQGnFg|b2FN<Exz
z@!Hao81zh?>Dd<gvaCY_+bnv{c8efGLCNEy4Z)S)WGb%94XK4&ZX;}`2b}RMFLt@_
z$n^Q2%yg`tX`6&KyYLpT7V4zEcU)}k>?y#F&_#Gu!C6^!g%;5{Zy@v+0{Ax(E6Tp_
zk2i)6I`)L^&b--J-8{1~1AAxXHDM;xIq-ez_JQm>JN>ZDnt)cf>BV9pQ8(mq`uQjm
ztzcZ@NsFMVg!e^9-_IrR%RqEZMIk40N>X&CtS^<AU#y&5-?Y^aHJ9mQ10P-y+{hH$
zrxpO@`ux2)5z($PEkv_Hrz3*A)|EG&C`|SgZ_k>pa%tQ7B=LTCg}Smos_2uT$hI2z
zm1`Y%K5G#ena<)r`Dp~|mXVLNQTy#GR;e9*Kn{%6z|;&10a>UF?x)*huFlbivL0_(
z4;CBsNa~QfzOSl$^|Ug|;kz|rW-!HTZDC30q&Hz~W{{%b>5-%y4NwC{e#*J(-D*H*
z3CL^MPX^VruxG3E)-{$Qtd5w5hTbvq!)?j%J~0r`U*?diBu5@ds@l@qwJF)g3U@Vo
z%=Qe{X&Vt*M@d+|?1~02><5Wns>~Okvj9wNDYKn@N4vm0nS8%ZftO_)u2AVOg%J){
zj$v4G4+Nut6Zd3fHOwE|E@lrjkhPQ({bewf>ir1wl@+vCe_gBh<28WP&>8ybQOT6W
z@2J$ZgrMI%V0ZNf@L?!U89WsD6&f;S2FBgUM~koW7$-`^K@tK{L8KE-8LN(KfXSA@
z`W8+(3dZKV+7Y$FX1RKp%zK#dVnUt%OY8PAY7vBY`Nz^t0!1djJ9+;nbDKvV9!0fn
zQPoX(Pa0%4aEBl0YL-|@wAUW)2*X{fI|+I4cb#oh05KPzte3m*sT#UWiVD;qxaAnu
z)>tFRu-cx%`Bm!HE|{^*VT`(Z*DIb!yw}Y;)W+LS?E5|#ph#W?yzwJhy5!CR(LsI9
zKS9N`rtv3fgqEpt#_^A!;JQ-0pjDSk!bcSV0Juuz0XT09oGf}{7kNXbi@X++OVLYu
z=by^82Gxn-ei2dw4-o(Ug(OTE*O$ptkI*+Otto1Id0w7|WS;BYrvH$@@w&g2j9m&%
zKO{YsfUq6VkfL%P(}uSb4hLh5i?QFz)f%4Hsv+ySQamC#IWuC_(&o<onTZ2{U8Kg%
z1%JA~hjxV>yh4{K8XN*IqefBfHs2lYy>-<~@sUEL`4}FZ2>5a&eOBmlh5I6nv5;@*
zBUzE;-oXn<r*D&68$FStQ6oz2j!~Y{2UA*3n~>6ZB;=sV7`|zzlj5WjH%a~0pmv?i
zeMGSiGn@R$F=2}}lmD>7`J|o*3+SZ(Fok*Bxjga^9zM}?HDzhP&E&TE&}v66)T17L
z<V~(>?{b$yrCdF2Ho>3Ao&MNzEx?2Xn6X^$bBdN}K&&+3Vt7>yW=pQ;bhsU!=U_44
z_tOv-rMk4R!8WX|q%&=$h@Qo2GN=fj<I}@OTAgB)d#mGG3b$HjRimCYXE7un*hjaT
z9JFXngwM5rD(%bfgFncYq?plk;7CQ=VST$>)*N${npLZA8V_nF3LPiD!Bn`GI#Hx2
zbNxB@Ta}qi>EZlH-7kB04T<WQ)oP(8Hy4(V=WL^G)cG4Uc0s20XWe)?c6;HkNu#xm
z-k4}>S8I?`rr0}NlzklWvK{KGMvWOvCg4$>D)ljMBxY~*tusG)BIOpkGzlWV#ng&{
zt7kg2zJ^*{-x`RS+ga-6y}ucj38}t(SQk*KKYGtfO^tS8suo=3gp6-#RFYivjZlCz
ze;*7@HVBTj#niNjo=KN%o^q-1WA58p+gP_}bPjR(vZW63NR#V?L;XGzVw`(+#!aG2
z0`dVO*v088Y^}E>r$GmRR?sW_jslYey(;;pQ)o~NC^TH%h9OJrJx;TevCl$0%ZSXB
ziJ?q9)rol_m(r>V%+fYq$3CKm3Rhu3&d`=|@nbAsbJ@_z?~Ox|6z|Hjdh@&b%$!n(
zJ^6A4;F#mS4NFgEVd{j#R;b0(rD4OVR&7n?T{`7Of5i4d*frn!Fy($SNLmRW*CfHe
zmWMpMY$9<5E!$*ue6Drx_L=@FRfq2O4Wye+i(!^kPAT<yFA0Z>B^R#_dXy=u30o<u
z$t4EZ9mWgA9C9_0nqH1x@ydO<QjP4Jsx1!+-|s}yF2q<lL|c)O6_^8T4XlA&{<wQh
zZL~ID)irQ~uPEiA^9pf(tJOT;-<kko!a?kyCAR{g-`bw3kv&?@QTt^R+V)Xm_{PpG
zPkbeRh(juL7CrxBcY6cy8KJy~`U+(FhRz#R(**Ba!it~DgN|0U;_nFG+M$yD7lqU}
zyxg1Mn=fO%3HkHi$#F6Z{ZeO?w;Pl;CY-S22R3VmrCaiskq5C$bNLVkSG$}B<6u?D
zlFI6sDe6I+DSh8#YWPLVTw5^b_t5mU=YVU_t6>DTNw#QBJv{L}OJ>57-1!QY)%^vI
zztHk0j|rVjx++IQdKa1b=k!QNzmToVXuxrH-|8<K@sD8O1kNz4reF!KgU=tN#~h*i
zPBRR-MslxLJIUte@D6?jE>$^GPfDW1E1CyZ>bWa5We0<Y^eOXS9GUBmE~E&8E|xwH
zNRvZsn~yW?n|yak$A}RN`3?trG~5^u!uE%9f9}H7o(D<6t!!MaH7CNPtU2LgjY^G7
znPdswm=7C{I+FCD1s|5a9*!hyz7U66rg|k?@rBc4gT!`?kGYFwDeE-{$wmk=#sA0;
z3B22+NMwz{dbaepxT0^TuN6DF3P%}GYINrH_CE>CvnmQ`XW!Yl?U-okjQ8r#0Odd%
zv$AE7r?1o=PM9kUZ?`Jsfg8fS&%#^WJ!+?&iSz!GU}eIFUz@vRx2|yPeHmkO2>)0u
zwQ5%F^Qaa6UY^-<3j9T3kU#I-l3235lP~-*fN{K;{6uAE!Zp`waJ$k{r6JV~gDH-y
zD?78WW8)x=ZU`YWqLl&}%=^E%yEJ(jloqt&U*_n`hlD=bIrekc^fG-*{U5ugb=I&3
zP_z|VwhKC+SR59AOIb?Bv}12bh-1?b^d_@`PFD&ZA6{dUArbt%mGlw0F|zY$V?_VC
zl?}EQ7n1FW&iss{M=xsSFLbXMeZ?O?wbIP-2Bh)`k;F4I8CGFtG_+Jytw_Edg0r?K
zI+W0!D&n~N+?9s39fo2%(*?ip>(YN-u4f@bYdJMpJsoltGMnit$u4D!tBK@d8s)?F
zLK7I3)+Q|_TYH&h`NV7^c6dN#1jAX3)-8+urwnJx6&h5wan}fO$KMSoT8-oQiAUyK
zA7wGkWGa`Rb<e`ptV#3QFQ<xM4$5?Stm|gj<Hq5NouaeU&uPb*Pp$5M>WA{bj;Mc5
zCdHyw@-p~SvjCz|rJ)fTJ1G6fQnunR)-R5v+{0vQ{EiHU<O8x$kb`&Vtt+RiaqOE5
ziM<fkYD@!OUdH$H6(|vFHtN`a+h$OO{9xq^+PaVA7GzF}a2_Ohf3j~X@JC37=UkZN
zQ^<)6j%y5G2nZFUV{WT2J+;wPkqM1o!9BP^-`7xLqh}2cc-$nhl6q>$1Wr7vtirpu
z0)9l|dZT6@8-X{ix645LCF@BVUTcA34gJ<5KJ$ZdsYcgaI0=d-8S8u#Sq*nk_PC2@
z5GP1DY;|wouG*;z{VI9pO;w!+!Y1l{MFOlNtZMN>C@&EWggl23mM0#X#Aca)DnkB)
zrKV$lBE{s-e#T>5_yvrc<pJH$AF_sj6a3S+*>`rEsD(c>6!l=6T+gJa?fXX+7b<X9
zctiDmn9Z&4I?cn%-6^`HLnmOfZ9s)z$az6JDlDF4?QnKSQmC@NOa#0pPGriIOj0jB
z<INAg-p)kM)NR7*E(9qzqLqJiS`V{2yHRHns=ZfPJ*p9rP?q?W-Fs(#($d<wLXYYW
zD9mR;MPozkNg|*w;OY(7!pk?lur2%KF**uTHON{>a!-pv*YuotZ>5zB5g1b_wr#&t
zy}MNoi#przxdri}OdRBFT&(*Z$Lw*^>@lOL_DC{Rpo!@=X6ECP->Az)jyW)6-{Xm#
zy7w^km3kgo=+iKHp%4pYae`{U+oYEZvN&MPIoeqi-r>*73Rk%BBB#wD7NH@btka^G
zP#&7b-UP}s;1ItXyXPxtSanc=6!foB4mNGi<bO$v7=_>^#qmw-Qn}r&Ms^iTN2<o?
zUX4S}|F(DcQq%sZ$}5P(57^P`VRU^hZrFRhyZk{u0oDwn!oyoD842dv+$nYKfejao
zWyYi60H$7*UJVS`&6b75v<^eE2p)*^Ew{zpWJQNJuAf+Upl=uZnP;qnZqz*`-}ZXw
zH#G3jx@gtJSAMw%q2;e$C(~;{T8M+|C}?BUOq876gj0X!jMyocZdQ6It*8ZC`Z|No
z26lusuG*bh`*A6Ib|6%a<>6+#bugOk_hq`2H?UAH-hH&(9Yj>yQQ&e>3Zw@D@AcyS
zb&0XKCUVGCE`4{U&yz-Pt6Fi*>5g|Z4EUC=8Xrtl<7*pQ7LO?`hUbMa_<hy04AA8~
z90a#jD?J!r^vbLDZ{9yqIQy<AaH!tgIPaZ^Ev~|)5zX^5p0^mxIH90GLvpWzk}tT8
z&Qe_wUD;}BVmr<G-Fj`-)@v|I+?}X3j8_7}l}CnSr9tcwwa<e`In7C*q{bOdZ}XUH
zxj3w+x0*Np35$p?E(cAwTB}RItuvVqaToS=8Ak*OLD&)I9WJl%+DHw&!reKva~p@s
zmHmD{zg(XT{EI?f8HF{K%L%P#P$)vW=w+LBZ&(@a!iW7o)?O{%o&Ec@5hwt#x8=kp
zi9tXmKep4w((-6_TgoGk*VMkhX4H;71Xf@7vtyZTg&)KI47$B8Mm2x}9sA2lqgJ>h
zIoyw(?((szv)?ew*nP#N<|0ACyv@9vQW!R_9$MD1p=eW|v0ihSj$!P7QokZB6#3w2
z&*~9JmYbM)fULMoOvvN~Lqp%cfswnH{O(_mp=L+R0C663K3+uC!eZ;tZU8S0+mcT)
z+p7XJ1rL-I-iYa|nU2%-B}j8Eu$dbj=NwDM(hXq5Qf%I2^oR!Zo~=!XY^_~0Yx7A!
zDaYsP(U4f)aHd%6k0{Wz41v<OddK}yCTml5QN!)1st2BU8@(LVxg$hXn@)&ms@3fP
zh>*(*{4oyiHXzS8-bQ?~GRE&#9WS3`53Pnu*Tqic1dWgP@#o7P3!5yf8=P{~W0P+L
zyAZ2u4~*{4B`Jdz696?<mmSA7m`eksZ1!DfQ)Y8Jen!I0p!8wT{jZ-NgRF$I&P?(}
z*TM3Rn6h}kv8sq1{vx)0R-!vPg179vH8IkrW$!;iW;X4{O1O{TKUSS*8&mRR_>WB4
zaKExTx8g{R!@!{v8~uH9)!4I!b7N130@K3P*m#u%0mdyb983}s=#ccPP<}b_F_c5$
zeUn=Q2<fHignl`TYZ0dOSx6U=-Df$Z4#%dPbk7HX$L(=9*QX#Jj#Ksf3rc527%%B}
zPe5|(aUp|+WC49eJ&c9I>WoMiMBwM*OVhwG6P>a@$I$l?TK5#C%^(&&<|f79tK|A{
zEj>C^@v^TTHGe3;+am&6K6Y3eQ%cQh=nHd;hECyZRvbjLNox1NF-<#+eJw!bTcsDp
zg0Kv4TJ(aBXR-yv`S?w-)vjt#og3V)aV?CT_xbkmXLjlpxF}I^4S1GI9SJLp?{8S3
z+K^Y%fY7!bg3Ar$no%P)t8&uP+q6I{{F*Bn+!?1DHj8G*d5b<gcK*<gR*5OnhW808
zqsRx?S+C`M0^M%g%xS60RiuD6dlP{IS?PzWAx0$xiS_NIH*|ei9+r7vr|Q42K`kfI
z@)j%U<1K3=I%(Y2N3ZQ0-B4vSV}|Y@Q?ON&sHD+DM+Bzb;F{=N{~NlEj^q4?Fe%=J
zf61i&h;`l^$5kv_3R*F3IsO#S<h?fgnuJIOQCH5*d|`BO5##Z>su&JNT}v@kdwcf!
z*P7%HPZ%oJ)Wa;f+t;mXn>f^6MQ)Ltw*b<Rwx%uk#vi)ibH~`hf|X2qQR>^C#nUf<
zSX-JgAgXEYCZ<PqWqk0MM+$<`QkR={-Qi*Deb_{pOQUHIK|hmUJKX`t(8V6O(`o|q
z)Qh%$akng=DYZE3{2`E{yz{|Ci_%9rn5SsH(e9**!uuA~d!i4eiCB`$rn`sJa{1WH
zTse{9?VkWkne`li;LLK>FKET*`g(e>*kV=&&VtencqeOXT#iOu(pPA+%5gWiWzBO<
zGeVY^hn8igxmY*-!2+3Zxp?4q_Y|6?M*2-i2E5O4Hg{{DV{~sqpDmsFtRzvVs-sAQ
zrYgwfikOXm3)){|r{BGXO?gTj9d_`1Z}|(8;6JvHubuW2er_LQ(l}N^(x+NO{Oa9`
z0kGTKf<Lg6dugbV2WuIB7pS)wOZKr%XhGGF6X<vS{ic{kgcK&4#^1Lp<^u&0u|xa4
zY8kCEeF@>E@YCqC7e<uXQaM~I{P_l7ti!@^5@kTPboJD0&<Dk}Rt$?j>WB4bH_Mni
zkgHVVdMmtZO`XF;xY6^w6yY{jN+2Adl{i;w)wda@vap0lyPlRL;}V;~*C&vz!z3XF
zVt{PQR+j>z=Zi>h!Q%H`UN}H0Pv($u*!s?YES2!s<Hq%f`Z~h$=F({?{$=jjg=S(c
z2+8S+pQP&}hi&kc&d#qQ8Sc!L)TklcO;L@|nod<?;nz#g70gL{l~kN)qoP+UhQt@-
zXX6b3!Q*X#B+Etrct&?d;{M<|APeX@K|1kffV=7dKbw7M|E)-^**A~K19(znt+*?<
z=C)b)1vh|WsXT;5RvSqNKg^`RVT`^m&#S(JA@n4+H}vqrD^Ogno?6s|E{0SY6J!=%
zd$epE9jdF92&Pu3xGVysX#{b|*m$o6%OS<T@{`220uHwGfwDY_d)dG|`yV*)550%R
zc|fFC(k;b*?D5i{uTH+8rBu5liU_^-qT=!gceaROw2L@*6HJd99-tmxjbj6jadxeT
z<_0ETgc@)RtBndLYQ|Uq^~My<;__4=d22Qww%!-+8#MoZL!IONK?>9921b_Xq4RdU
zD<?=w2R_B2b5Y!%%8m#Vr|tT;sr`rCy@M<*D)1Xq42`lSMg}<IJ$)c44pcOde1D{R
z4XK;H{$sQDwc6FaYMzZ)mngPm06#&>2gOp3Hiy*eCORE=$!NghL{d1*6yTr?i{9@E
z?39|G1Y%uk$#eN0KO4}xZV)$+dd$t0ey2f3DGj=8_u;^|WNs@!!&86Cc3g6hQ$afb
zFZ}L_V$RaRB`Y42^a{|Mo=d8qyWW5@u;v+WV>AIdUGnkO_U$rG*H9MSBhHn@YjQNt
z{6Kl%=EL`@W~T;s;w}2Ibk11~$IG@-lY}i8;CnuzW{qCODwJ+Ik7h(*M1hycPkvy-
z{cuSQPO-on8e4~!rMIfCuu;4g+*5qi0@t?HSmdMNx$#ZeaicXHhjFdr_3<hpi{QbR
zi*)dokWx80(<9bD!(Cf0z9B};s$J*RfKBR~!i_sy#SHLu<^x135b-c^jc!<tUM1c?
zK<3!iN~sIaUDUHjb4$1sr_a@(^x{Ls3XXkjd51WclP|in5Bk<*BK$`RT5jWOh?DLQ
zb301#@Hw-V`3)#>d&1dBpo^^mgVX@q^LHu?HkpY*I4P7E<7z18g4@RD-}JGr!WrvC
z`HUM)H9L-(hud3^3mgwt3`XesLURoR&oA=#Hr!dX=1?u4@ka$<`EuR^c^zPpb7uTI
z@?ps+yCGez(xf)t@=c{OuKYt6C0<_OkOg3!dtuyQE4z(y7>&VNk(A!|?LiZ_u0^Da
z`#yiMwEhH88XGEYXMZQjp8_AMEpX)rHtqe?bmUb3W6A5KomlwBFI7nZqT}yNKHyD*
zYQKoB^&)-q=SI{T7Q23Uq88#syTF6Le?x60IAiHaBhLS3_S*POrJ+-sE<++RrIg3g
zENeK}T!9?=u$gG~?!`aX{y(VSn&B5XuwyC|2gRt6$6^qRO2vMY?Yx_<E7TjBiayeJ
zbC&()LFY=6g;U&e)g+##2qc?ZF@`E>Ol(!DPYr8fm^Q;dh}gExTR9a_XY1y*NDFT;
ztvJg<2*=L)zE(L=XdO77>a*}Y1U(jl#I)JblU7VL+xF~UZtg?h>Q%>P@RtMHpa(wy
zHT|~A+~&Ss0*TRsGsE4Ap=YK`6f)$ar0{K-dzv3;MC$F*Da%q%nsH~`X5Dxz%Oje<
zQb6A9=WTJ?kKF#^BIalVZNGlzWh~EIMLv$#L2b~NM+UMSjGVU(J$Aa|6-h4G=K<N-
zcf&tb*Sb+}G^@j>KXtt5I#e5RrRj`rn;rE+>FY8sgI+R3A){}}&<r~qN%p<vd*^7%
z)xePjRfD>l*15p;@6~VP`*tFkqBVP-v@03=H5P*fcO=9KY4y<;SEpUYCq;gAPQ0ef
z@Mpgqk{kLqS*e_<cT`JPgNzs2327*kzdj3OtA0wunuIbHovH-}Vei?;YYA1S<!In+
z7!fD>V{Y}EwlpN}k7Pu*eYQk^FPExcS{;kkVcVNef<ZS!pc_L^r9<aATi(RyO3GFW
z@p2opvqa*X7c-6GC0wz&YC*VQuf#ZIRvkd~HLu5Ueh)K>8r%-YYuFsV*8%hbKE(P&
zULl8hK%CKim1G=ME%aq?W}>isTi0WG1sKY9RhDW=a8K|soj9*rpm~=6p&sk4oND=e
zu)=cxW5GjlxZ~$!kTkgx%x*W)zJ;0>%<tCS{ivnhW6yEEA_fsSs&r_(+)Dn!M6ny?
z9&aUQKDeB2$UV|H(nAX)>U;o1NGU}q`$aF8DNj$OOJ&%=FK>zu6E+scc&GB=x@J2G
zD)^u`a#)eBE^A5CBV`PDb^CY`-p~E!q7at-DeL~lpG?wjIn`+-eP68?+a6|*yD^Ql
z!sd9vn%yi8onroQE?VSwhap8Y?GuW{2J4gG_|L7t;t9KYtIk1llu&{iyne@K96H??
zP$s8<l;6&rt(@t-r1EaUs}kJYZySUCJvHC8SkxQ<=oY#yEv-f&%C>9DJaez0A3p4l
zJnQyJx!xAtEnRW_2Owmsf3iwA{Hgiy2=^VjUg*3OR%8fb?S_jZ`!<*}gPL*8V7B6V
z7II?^h9wYHmEp5{LI!pW_Rq5bIHf9kv5?#M^A#7YVV@_}*P2jIh9y$)#YatE`wjf=
zW3FQSwD7cms@dL8lGjNoSJ4KtTD__#1&B?uNWL*pi*Baw3{}*ygvGrLgoasoOJv|f
zWk8Z!_Y6UOUNODU+CZ4w=j!_eY;DzoKK$-*MlVd(Z&g$t2IoaWTXJT8*DdWel(he2
z!)qQ7mcpy}?bZ7~ckEB>3HjXTqI5lgYX1z4u*j~Un#ZyNTi#v|%7K5VO;y|nMNWSm
zeEXE{h9g?wQc(pk1=-Ay?<Z9-ighW5%A2qQni8wFNL?9T6_?5hd#8+c>h^nswmW*H
zmB!&ApOGM<<lzE<LvH^Ahj6P*5kD~&q&EfjTi1<*Slr<wSx!}%`v4M~ss}RY4}jCD
z3<#W^9d>@VZL#Ra7)k8+s|<7<9Js+e>X{+EpceGJDbV>&hWR$%(@n=r%=~`t<LL1A
zQaju$xv|z;9;467r6K*saIc(zO|FTh$*KhOnDx;Ws-^`gu=LR(YU+xmCRJQoOD{Vq
ztH_}w9EsU?{{L#ke-{mV0&-zjv7d5biT1M-IX%LE$+Ayw(k2Xxi}x?5rm_RFw2S#Z
zqjUq|kmvyQeXok_xaQ<3rF%!7vzWegWnCJ6UCm^U7A(=-4&s&V+AIh1QM4ad=Qj<H
zN?5z!H@t$+vXJ$@Uz6!E9U7QIA<?H?|Em0<Rict>*e1NTXwq6bfhp{6d5R-`CS?N<
zo=LkMgb;%EXHM@pp#6^ze1WoIB;2BjkQ57&R<QH~C3<GJs-Ck`Yc<iE0jexte!J%L
zG+SZ3BiGG*M7Rqr(si?Dv<>?<hiR_QNzsD~3rgH=!4GUW3Sr!$82X(LEr;9<8g5)K
z<+w5B(th=NbkgXzW;~Jy??nss(>~5I4C``yGHlDu!mi{_JFUqQWOP}82yb?hy1t@x
zPAy{M_^6kUi5tfW*z=!!X7RDZ)g}IH+38KxsT!app*Nt~<VjcR?E_48`U6p9r(qjI
zV}zr$pX5fbz&S5vk8wFjuOy_dT(n8Is+9Gtgmr4#;aU=A7Y*Rg1hb({E#0Y_0)276
zwvZe3@Rc+cYpxj)H0<L?_wLHvx-(N~ZYu^eGdOYr|GSTI{>TsL!#uuf;SX@ap>3$P
z2nOKz8tVaAYb=wPQt*ne3&SCFo9Hz$3LDqxL`o>U3f)wY{SG|RIpbZ=TLKZLifvwe
z!W2JwIsCKuMt20^C)RE#s?*UPQW7jkRXocstmnw<(Jnb9M$9DX#PqZ>0_ksJ0P^#c
zWsraP;qQqmNO3WL^Hgh8!9&-`0#@#mhkIuYo%HbA(k}DH`W>w~#po=8zeUPZ6QZIL
zpvBd&{;muX3Low{UO^nB-d&i}z*sb_+JU<Wj}fzaCd`4TA6MijTwh001d2Gun1O-?
zB_SP1R5rYPOFuU*`BahSsEN9Gy5HdxRTJr_M|Cjy90&FF!)I;IIK1Mm<=ew|C1OOx
zTQomB8|+hQcYQ3!yJ?Dvw@F#3OlfoGm$2U0FFvV2J}ZvyhgSB6vc0p+rd<e_^3Hu3
zomM{o5L@5unRnq{N2>%87WcF}K>bVL(NzRC5-JxAWTTpD!t4kWc}O>anKQY)*F3QZ
zzfU;zy%~b}y6WRlxwyZy-F9;AZ65ZuYjlya+#5&wSP$Wf5OlZ$SZVTi2vfo<t9e*j
zzLt1fh@&ac^Xp6^)cBmUk~ypVAr<L08b;)w8T}`CvChE6v#9owrg@!6W@z|sm|Bm&
z9?~nCTBkWX0%R^`f&D-2YQtJS>x3~-H4kpnbV{2o9_Vfz!OrD>^(#~GT2T&}6t=a_
zAj9~M0}w`;_dCVlaN9oll8!l=r-K&B<Kx5P9kR`gxrZN+`xfUs8r0W`<Ed=v`5Wf#
zCdYYOHEt%3e^(v+@v6f@LngvSj)tHN`aCLge-Y)<#ElVa<t`}WveC~`J?lU9pgRRV
z{X({S#PJxJ&5ODAReJc|W>X?fK-4Iktkuy1xl47tmw$6rWEn#{XV<T&abGGPE|R&<
zm%<c;j^bc<t6vQK(s84I0yakXiOR+;mODf@3YiL$b^MWh*vuW7iD^A^{wdQjoO3j*
zWag2Ydof;;u=p2ttIrwcPWQpJFX|)H_O-%dULfl^yp#!u<F%mrHC67~ReQqPgH9f3
z7NS0`-{)+P)Ff%J{TwQ%P#SJZ&TMf0IFffA+K_20t*Q=e3YK)|9z^I?fc56bh9<3p
zCTsC=-d@W*p!ggW57dPZ@_xI+RKpodc%Sd$dnI{VE67y+V?!(Up4t`opgC`O;JIrH
zyKSci)E;_NkaIo?om3cZnr{b%8|vm*3?dXh-83hAA5!$%ABV!e225p>^{~Fm{rxfz
zURTf7fM-d~{O;|OeHhj=zZZ=|dtu5z*7Go6E2x1?uh1FIz~j+*gt)kt3B;`tY-rY~
z2yFYrg5~pMfbR-MA6Mk#-&)7Lw$`kT3(Sm1;CLfY8Bd8m3Tk>_PQCq2aSNAMuil5~
zVK(0HM-;E-^WLnzWc!-+q`6m^)zSA?hru?b@}uD{e+eW}4}nKdR&+__{=h!v{#Ui!
zpCRtw6h{2VM;cE9z*z9N=l?2B{Eut@`ldp%MvtSm!)9zYPj_VaUrH%{hucv+Cg<O`
znx&l}DR@z<UH-0_Ki>0Zp-*R9x>#Z;&=M<m47Ie_mUYGO>^?`x_4L2o;vY!9LX!q4
z<M?npzvq8xH&VlrDbY@?LO_J^uN#1$EwjG@>a%2l`m84`n#jMbqkrd*{<l~5!Wtc6
zD|@CqfBzHzf32R60t)`_>cmp$CgdM5|6&`Qw5PZX0e*y8-T2o3*4O{JGk5ZUCWcN*
z<!WGK-T%xy{*Ckb*G%{i^MAZ?{-U8d?SjKh=bQg{`|m#bKfTBF;HUnYb^*wO-V^_G
zI^lor{eRAqDAQv%9d$K3!o>DW&-|i2qmBd9CQAOq$c<mK<`bmGO(E&NPQApszvLqS
zyB66Cj&Ln-IM&<~`9&*?{YM>XJ^fp?zW~brX$bx_a!lGCJyNjl6HFxr!}Pyq&LdHc
zC-2<s2(y$jVEDCeXxw1`GPyz5CtSe!QsPe?{BQsD5dzj}_I-nszuJXU04;yRjcGaR
zuL{}!#+E0GY0pYpp9W@yh{&T~TwwyI0k6k#SLYtvFV2c<X8_Egrzmpb*GBUEg=3bj
z!S|14>K_xo&imi3$G`m2H_OOK$~ECajbFS64{`6MLBXHZYPbJdt@huH1mMorFKNV5
zc6<sS{AwRAd#``H1@u7^CjX0-;wSZKfzm(@u}{Akr!6g_bTTB8><%X6X)Lt<JFoKR
z5qrWGMG&&J7TqOpA2kpQGS<!#@Ch@$C-iGeq=QAkdy1|vSA|2cL0wS;=VqhNZ6Yc3
zlwGhnDl5wB?@_{ErpMp(@urabfkD{ma~V$VXGHzE&)>hlI3Fh;FrQ>D_^mp)=NFxH
zBMp7U^GFJ)g-s^~)1G3&S1AtY>XQ!83aPJ}YH*SL?<9V4nSM;`2skB$_n4$Ld+S#D
zB6#ZpmzrN1Q<lw@A$2!#0OmXwW$gJyb2PrAV-M@tTNbAl=n%W5=kq%S!k6cK*Y@a3
z4%?G9e210|+I?qu$`r?Ve{pU%vfueaLlV}@O?li56E0uQNEzMoBCU|Vv9!z~lWLqc
zS`tEvu15cw7mSQ-(1-@ac`5<M=HZ+9lg2+dp_L$BeIz<tS+bHfM`Q@7aTJVE(rE@t
z!AZaUqLDN-=q0RMFEdHo9t;X5>4gh*U*(Wh|CaVSS;dXL^pivu7kV2h#Ee->)Hy5B
zQ;C|mvrsGI2KqIF(a?p_Nx*kVbZ4b1(?VcCQlWh{^2DJHhj#Y0B%>v#!?koiO;`r4
zqD(I{n@Pqf|KVkskot5*;6M?i6Dc&EG_D!(i}%^+M$c~9v6qh0ntMxzrGACTr?rj`
z_ST1YI(~eS2Jkiv&>}Y@H?xM?Fe&F8OX;QcUe2Bil3U0t`_>^E?r8(CA^D5Sf1|1T
zZ`|m#sQ1^8*}?!Zpi>l4m&-3Csb*=kR$^&t&8=eSyici|G^=~kifxYnSv+5#b!3;(
zhF9dM4OqY`6qHVVb2g<;h-bfX4HQm}$NzcJ|0kgPUp$1D`A;7xSQbfXuV2e>hQudv
zJ00)J5~t3+bN^IuKkl1>7(`xs(?&+sLApoMx<QBCs#PG)BO_6m$2fIYk}bnVEkaki
zP#ZcVFZ8Qs@V<5aol_>ix(hN));)e$W_&&uVs2DjsJ~jWdW&O9{YQq=pi5tvcDn3S
zm66(K{>_!IvY#tS##!?Ss^&BrzB!FvHOo2mYf~=@VR1f5TLvcb@?_Z7?8R}|#*0>x
z>8h*IZos%Rbeq(jEDt(Pp`g-}WpvCv;2gzhGp+@^r-jLygpJfhi0*%B=0A^4BZZFL
zGM3WDageI2rQaKxfZ49S4J45_*2gH)cH8*D^{8iqudKOJplWGyFjCHk!PQccY9H(c
zu03;ylKU4cT~u%Xxy}EkE7J>SOlyP9x{#FyO*gunOs97_@7&{BfMqx6#qKxX5Ne&e
zQNOBu1y(kBF{Y?2@!2iEo?dbHJ8NP~Vyl2Cp$F32(DgWf@lGK-)N$ZhzceM^SSV3#
zYio*o7&sm0|K1~e@h{b27mA<u_eki}7a1!h)5Fe?{L_ikbP`t00!&wIBlhECHh%En
zwZGmtRc%L#5V`-Ia|u)a(s5rhztuPxdvFKZx~T7~vQZo6P~AgR_P-meXCvWY4ZHS^
z#_+-~^yp;cE-jGes|&pJc$=fT-)29sncG759u08!*2&wspi~E8Jsos>koL=LxZwR)
zH(y0<)L=YQ><rU;N5hjg=3>(3aCaZgcRiIE+(W({TwG!>C=6aJo%tmHf3r?w3B816
z<9Xm`>rdQGyDR~haq-=}7QXO8%&hr+mdQ&?E}+i7Zr1mu&}}|-2~m@MCvoGNkTaqc
zQo~ADkub51#xm2lcjI$a1f3wFf>7T@f2-jQBM-;*Z%)ZqjIM|zs#n%UY|M2Fgx-|z
zhF^MIa3^Up0A7~(gN{?&`ig2OIjw~-nk=kbs~vo%;C6b)ML&sHZu2^Vr#O3x7>T;Q
zno&oP@7m^VDe!(tYfwE`o-Crd>x$5Q(%HLEZsD{zpqhLkTuH>CB1mERq$Jk@q3xQO
zvGs!56@GOyeFj}~A?!Ba+a9H}0oPgi)GqjH3uwj;Ckq)#dxQ{n=K%%j?9bv{?d&mV
z4Ukt$=B(3ELOWjhKccEe_G=N}9;TKWV9Z_aw5u7EI?Hu#HF!=51<853_am-(Jxpz^
z%lv6W39GidSq*Ep;`I^pwAxv+Zm*5(WnptcvvWu`^_1slB|}DG(`~yO-HfUN+Q|Yr
zZZB`IK?d)Rf_FN7-aZg9yt^N|mg=I^pzv;|>0E}L{R&<Dx#y{>E#y1Zj@<=!W}@F-
z5i>PIqlT@7KuC!aQ0J2~u!9TQwDi@V-!PPg$<ZCpc;gBF4C>gk=D3XCqL`>6p{)cc
z(JH8?lh`g&VpzPPs|T1ilz%JP?owx_EhSkxVpAcf8TaIpPmWz%a4FhhbyJTTl6=+b
zE+u5pzEs%s+s&u_{X$6sa%WQnwEGU9rrg<;6`70E^0*7g(&pboIh^=yU5BcoWh<?e
zIxI6%IGz>&ilFKOeZlTzh9_UhS2nUsF!d-cxdFV)ceT@fOOuF!nlDD@o~l6gB!Z_V
z1KJ0Ro|zHrfYW4pmueO(hjGD$3Qlf_@efI}E-Uv5GG^5R$@25_tS8lE`Xm=V(fSUz
z-s%XwlO|m<!hjq4=Ap8@cS|vFFo+seU+DF;AA52$?wB^auym&uyY_M&K5Eoq*C|Rf
zskmH0`(v6`Y^{jkc)(mGDub2ZB&L^^3$(8o@om{P@7#a6%A*=N8&4fw0LrKZz{;u)
zpCaW#@}dgl#(xNdC`R#oszUmR>1{9lfD?$X%C>D`P1v%n_;YF(E$UZ)q$Y{FuyV<S
z<;^t;wzzO#^11Y5_M^zgh6lu~-p@tvnbFI4J-b-PGel+EC&MKHk5wic?aJyu^k9rT
zz#V(-i25hah3diIs|s`w##f9lUmCA=PI4;pLl=o-%a9@ljgc>S6dw#0fgJX8P9|g^
z1Z~x<rTa46FeU?89ZO??N~ka~2_l;W99Yv0DQ)Pw#c?yFd+*C}n^ym?o4eXq`aRMU
z+1e4Jc#zE*e?#sL&x7YR7s{FD_$lTbB3Yt3UDCySP4|H;#YoQ!h-CH{-GTm2Ug7Bh
z_;`+gzna{&hJLMCr}5aS9HqIwbnA%yIUh99>$df8KT36N8sF9YKg!-S9L_cR8{H{L
zBx0u^l87`!Z$Wg4-s=!`h!%Y-gTa`HAklkgqBDbu-bP8&dm9WU+9;!hF&GTz+3$P)
z=bTUPwT}-zcwCoj+|Rw%`jxeohBIj<{WE)gqPYlIZd&Y1+uN?-T#A%IMbInOqkfp&
z*d{nOM~Zi%<$5i=P7dJ&^e0WCe~a?B1)E}mOMu3<lCM#^t`}G86qTIEE&vSIy{3xa
z{Cjo<y$<JN;g%{v0x$i@#@r^)9HXU`emc(a)bDUP=D+ou`%{U3pY||*qi7GRt1-N!
zs?`-AP)r&!9qUn%wu%lQ*>JnXveW*@<Nued?1;H5bUsLj=>0Q-@3ZC4)QH1^tEb=@
z;)>0!N6pF2WMc|+w!uas3}}k2vUGt`D3!V78*FlXyvCKOe)1dqEn2kuA1I_=KhAe@
zngkbi-L<l12BBMg-E&*pzwAxj8wU1-S>8?8*UVa#VcvBf{X^SufwTjkHE(0x1zJSn
zb;B8sdw~h{7#g@nR;;dh))wWP`Ck0``y{;x;MlG3_in8MR$HaqM9&&*ui&-GzGAir
z+u2TzYxZd&g0j!iH_{(_o4D>KCq35IpnU0@t6l}ved{T9!UPxR#tF}L8ZZ0Q7G9QA
zadMwJr(uL%=p?EKXKOcCOdVl%dxQEIG_z0%42=5qvF&zRcN$*skE>KwPp>R>Ogs@7
zF*j8EkBUyNBo_ca^#%j&PueGH7j!)&4$FgQF88O2vhiT(7}D8~PpR`sGD}@LxhXhl
z^5JRa)47Kg0y+1M_A{8l?Waxd5i)0IaaBBWpgp_My=~lblfy(sKM4qd;k;;EGniJ#
zij!pQmQ;qQOD$hF?D|@GWM1KlYxBG(B!85mVo<P82HH%gSBNsU7YW)W7l1!WGB#|g
z(2G5~RATp^kNfT8ztb*|q<yz<F$m3JAX!%*4RO^u8z*H;1|?|=h?!<(HMBiAYX08=
zzYKKp4IeF}?l0IA%CM8NzdqU<jd$pqft;%?yrx->-DuD}*t}`8W8c7Hl?E;zif3to
zBmmj5YO<zgkVViyiSzsg&t~;SntmLO>wGgPvu?xM9*u^nLRe2B9)YQ=q}e9#YS&-R
zrnPn%cD?adNKhG{GCfPJ$nQYrz59~PPzxaMI#;BPlpD6WI+Ynn24Hfwe0S!^&vdu5
z<%&+_Tq;jnpiy`DE!1k=rTD;gDyahIHZ(_Al)3r1{lP3vVqfjpr9<rD<<p(1CiCK<
zqXD~7yuhz0<^*Zt?9B@Pii-n`+F#098&>&G4WH;{C%<(F^qXi^G$_)r7kmpl_BiSI
zrnuL&NvU>Q)hW{}t~F|H&3DWptq%1KFBGhFT}@iSYnxY)w{BcxlxPNvI1Vmz2hJVC
zmvwDhU|j<0F0naY4Jp;Jtv@-PDsL<#+hey<KV5--v4QDMAAFj7$ZLGYp&Z4W=v-Xc
z@bW>DujEX~Ygp)3fu%Siga-KR4)$;?#|vw@>@QH@&OkOKm|J~Y58g^RVT<i+dxK7=
zO{xj#_9Ew$$UUPH-^rksoJ(wiCkO2Dk|gE~TfeB}=T=JFl_us-;t=sylS<4!|B$YA
z+nSDr-5`4A2;0(n526z!Nh}&lll_G3Qaj5_ve)QXJ?Yc&EgtP!r}mkJYPqi;dXPV5
z%XzC11m8T<OhZ>~fPOvbx(Td;;1;tPj3m8>21<xo2i0E9KKJSm`YZ$Kw3ywLT!1ro
zrzxwP@7O@|&V5Y3dZ7wmWUR<<8h}NLwFQ9gnE2AtYYQyQp&W)qYMf2LtiM(EG6BEj
z{#Bme(7F0cfQfP>)_j6*J4xP|qfDEE4S4CZSUbKc(p|FjDr^*LH_pr0gq&G3by>;z
zCW<b%tv-ey9y~P|<kdVNKNLcDfeps;I-G`=PCl%M+_FDw|7YQCt+H2^IM($f6L#i&
z1GuOOnYs+A-o;N9XMhnMX6UZlK^+)}4QwoJ6;$|V+Rz*qNR!Z-IbJoxe1TN8Xlwr;
zFIfnR?{5~sBK2{)a%`;HZkh)%Q=*Y!kV~BD;kqKG*AcWU0$Mo@yC%};AxNp!l{ano
zEYLO8^>Y`T%iUNL<sTNr2T7aFpBKix`{(o{dwAcg+v#)7iYC*wP?xD!4ZhQPfRNqv
zIjN+Fgl=<Myp_~_Dj%FsZdz%Vfsi9HLKjjbR{E!Fd=n-e=VhAg#wDn*YE#^`pralZ
z&L#4@+t=3aw;PweW~CfQ4V8Zh3^c`UWrcv%2An~gJ(H^>hn9PMxI#}w%F&!eg%g<Z
zR3!j5GDQDQ(D~v5@MbNVa+y}!?M1C?eTAI}K(|-6^Si=j?fNp6RTzkl7q>{bq;lOY
zp<(2fVfA^(1;qM{{vx%(Dk*aUJ>E0#OKsUuGrc`NU*iWxz%Ug)>a4<z=tA`*GaZB+
ze-ZD*9{1RpeXlM6ZJvbjjhTSq*o_ByuTJJeeQ(_ru0>B=c$8he*_<NEcDpkM^ETg}
z);Uh94yoBbB){u(JZ!(^^?h2^GWT)gdp|(hXVn?T;NDX*$=hi_?XEr+@i3kd4}Iz%
zc9!MRP&2l>2gQf%*|&d_TUpyZTCB+_vc<9}OM9Kx1SB}N9ZH@aoXFY}>vM9U&6|$w
ztxpdn8gan!d@}67z*;91PSJsIzO5D+u9E&Hdqyc(f5W98H+mbeEt7~{W+9KAsfF8)
z%Q&z}@0Y8Z%lV3rs#-0+42k^mQri(=C_FDL8vSZ^^IwP8zEH^YE)yT3+s;qG;t{I0
zr3GWemul!`r*mIOO-e5ZatwgW-Uh?eKxTEP4=F?Ge4A2h-(K$iNHv(UtI)mjqXt&e
zQyX?)2K4Xa)gbamV8GsYQU0k<2g5G^HlmyjJsf(QAzG9`1Fru!F<}Ecf)2$Y%Y$At
zu!Ej6WsfX<&gazejGDbTXwCOO;Iuw)7R-ad6iJBJ_Yki!Y2rcL`(#-`QgAWHYIX!w
zVN470Bu2B0N!!R|Nf?iME}y!VN&5!zrVxChXZq29#3KrPm*3tOLiea6f(XhK+esN-
z7m6aIc=9ag7$qpl=_~@lWj@_?0v{Rct*@A<z4Q_?3%H5cUSx8a=<qJAQyI2}Sur&|
z{dfZK{<9DlNBb_vO4*;+I|NWa$pl+$$p86tby4n}y~)2d<^wq|r5C?Xaj#$;(7k0V
zO*(c4F6&_20h^a&D5vo&*hvuI;W)}RM$oGH^^9+j%3!Xvi%6nLb+s0|5HMiJz8T2G
zV|E#Wk8HykQ?IX&L3xDNvKI1LE9znoXH8X|C(C*04t6A_C(noGEjv^_>(24*?-f3@
z0AI|4?!V@oxQCga4>MyIl{H2d4J@K?+PfEvYJbh~`@gq7l)UXQHMiNR_C9{-G*?>M
zi_qU6=+JNq9y+wBQE(3o(3qEzTxl>hEI%kVx4uMjGAv1sh<m7+L|ey!;gM_cU)LZz
zyuW5pw^*{bn%DlUmA)`dkox(7bg)4x+6*-#CsJuMS&OK!C2p)k?$;$orJ>bqK-9Ly
z68mVal^IA@Oki>74$=73fq`B~vGaH;O#qxUBgUhNOy;&52-n`jF2JLMiR0xwinRL%
zzudvykzz#qjDT=ol*UQGJ@H2Lu4%oICz<)f+9>?bl?*YDJf+XKlxON)pG?;{q!K0E
zd#0`?DVt2575eLE9Q3XIMYhk)vi)mjH~0>>g+lBDifS<atLgT9i{J#0iCzdHcoKK9
zKlq|oOy{p7k}6&2A(g_}zA+{9hzZMfc-5^hgkgYATnG=iGDZ9r43-{>BM&obo#&^p
zxO)!<`cF2GFnp#}D$VD^L+`B0^<HrsHa7+^d-QJ9-H*n9=QTk$UGFc^PSSYNqM91X
zq|sOBB4H$U3_<cxFWD+|hJ&tgDDT<Dme@3Gnpj)GRrhza>iJlUtj~g+{~3EVT^?LR
z#<3)FY4Vt3`D=(oMXTXUpI^%ed0c$(5~3VFIQJNiXfB>FvZ-X4a-2vsweu%>d2K|N
zjIUF(cy@Mf%P>yO2R9f{{MGLW7B6e0sqNWm@F-V5OL_5m@h)2MPoQplgE2KYHXHK~
z?p@)fy}7L9_{X9RrqU~YsTPF&D;7+CF00nLrd6bLpL6@x3Dm<ELevN|gXc+j@Ez|6
zIxF2G*R%{T-LRU0GT-%0k+1en-XllXw?ZfhVB_T8FwrT?BovM12(^L#ygNOtWjSwv
zG}EkMwQkm)j+*-bgT1@n@2Huhz<hv02mhW(6OGooO!(0qLlF6Il5<F$Qir$@`p1TT
zff6LZetszTUWjw6=Su!`B8Rt1!Q2PsK46~D<9yyo!3=pz9}X|?d%^^kjF<M!&$Qwd
z&ZaQER|=0=(&L!LkmVLKIDrQ<yIDJSTb%<cYR4Uw+Qu)ZWnycFAom;8B0K`#WH}q5
z_(G3^xVE=1F!m91F5ODUP7HXn@VI^K4TNJsnc{ogoo2N@OiaJq9yiY%`Ge-Bvt?v=
z)K<(Gl<5ZVW6}JuKwnYue;Z|cO)6Y2y9AQgo($Z>iuxrOmJDey)x~9HW$~E`S&9_v
zI=WtSwzk^AI84i+5K(CYn(L8u(Y8drvs2cjXlt~)qjCRa9!@c^zEtCQf$UsBPvv1c
z6V%6i($e>!6~Yp~1}3F~yW1|o%X+5}y=yj?q7NLp-w00K;2Z91&Trk;G?~X&A87mg
zt@q-KaEGv%VQQ>4%E!=lln|9#nK&1CpxG)lQ4~+VnKc%h6IiI+qH~MG%TBV^4+XKR
zJRUvCSarDnzP^>c{t(oFZ#e(*!hK@CG+sV<JkB5wquV*UsoHRLO>Conu(;}Wap|A)
ztZz35XZk5*7RVMf$L;txcKuP10+;N&j>+$64N?e0zkI+l2Y>sK#*GI-r10xh-^hGr
z`reWiO?7v&_~o2mbvgYft|yqaM}7ii>EA0W_Sa=tWoK8LuqT!nA7$i(yDO&d8z_w8
z13>h>u$o^#=1LR}B*oqrxu(o?+Nj=G=bAtn*UHj>Nx?J($Py<5Q4O)vUUwi0Zz0oD
z=QOgP=hbZ~BA|{TP=-9XYrtu<^5o``Zj8`Z_*MjOX)X6s?@u(UFVgZ{-4rwzh(^AZ
zb3O1C3*fRoIoU9gh3ikiF^eerwJ`6Z<YSI%jbl4cJTkLxNjNs!5N*2F)M1wM%tnh+
zXRckgJ7)o1r1m?uO2x$#m}~6$d#FH7r7wG`?A|L__W5=AXCtckTygOa%zK6;Hl%7$
zokT@FFe|n8JN%2b#qVM3qYBzqN?eRww;q!Kdi!qyM$HiDZL<i%i8lVpaqb$omy*P^
zG==16OwI1VK)K{LbuW_G52y>9|CIpUq;b7OIxx2ooTeqTkT<!2N<2Xzr!8J^rv58#
zeV$5}*r3L0J9ogq`^+iv=b3T3$5?)u&(7$#N_NYXCZ#6l&Sq_w)KcVf&sIIK>fL~8
zsQnZfaT>UpUZ);G@pc$;=BM-Fd=vtmGl4R>PB6`A)4^_V$XD1r=rp|x89Y@U^&9@D
zCtEnQ+)SkFouhGyPR5grHKNb;^^IZ7JhSjyrGnP8+v6P=TOrFsdn=*@n|zueu5KI^
zy}n!~YEY#DvkfLTuNafJ5?5Thi+D|z8>S68JhmU8%};_{XEEAsN64(TS9i^^f)d7=
zkC)yE+jgJHi_ci%0X}Fvi#~|<#+qL6{=1QA*eQJzj&0b%=5SuV=rer{vF8A~ixMQw
zx?UPSn~RIhnNYX^a%zJv9go(iIxhJ;$cHqk*s5~DAMm22ot^~Kbmi2Y>rK+w3B8A}
zZa9Bc0CMW_OR3E^|7mB6TaSq3>0!HX#9*#i)IM=S+sm%+ZH2^6%@!%Y9l?Y=x$ZSx
zNA^?yTRwNfYUnz<=qpa`jD_m&K||X)MbO)bos6aeN=_}Tv)?TiaYjP`_Qh~zh#Xz7
z9XXkA^46tKD}OXJ@fQoO;r+{llRSRn>9I6Jzsq|TL2%C^n`+Tea?Dvkq1HWB!s(xk
z>qZwS<Q84E=;seb@(pRA%PahrT;)kD7p~7`(P`v7iLI^32Gb*Z*F9~Om=8bQ?AQKw
zP^N$XhSigZSgZPDS2N)Tp9&MB-XKv+_j#yY#SXqWdz`vFkoIlnx1Gb-H&L(S88#P9
zl2=nX2|LkmvMtHY>&KR2-oV}~y2Ely*uY=?u6%Kj*(1QUpJ_V#WGc?6O3Fa=I2*N}
z%T+QoUu~=!wek3btG@0eE~;+CL1o9hnW)tiK+UZa*SO<1eW+;;(L&s`A%uUun~ufG
zx$g>4pp@XGSG@#v-X&?1s#Ha<@Qxt04O%e%G9h#*G55b-hSygA<`~pFX<Ed9Xk+<n
z;uh#HGu`?S3jG8Txv{z$O;!db;>fw3Z_c(1y*Y&}-sRRW|Joh`HAzV(-4S?t$SxCK
z^^{h#h~D0f(MAG}8#8pC@OYetwn(XUGElF5ryuiId1Vk<k<@(aEbeJ%&nEQRO5c#V
zMqosIyQQP^x9jEgZqr81kb1_wEVtIyRu0uO-RR%zzk_9qwjC$zwvGoztNQ$INgMMq
z-N0Lm*U2$HlzRdcUk1~dD|^^BHx<yj+@<i|S$wM6FE4w$*|o>U=Ist2?xi;{9A{Fo
z&cm<I<o3|}n`bff+u}kdQEo@@zL_EwGJMP8s}fCt_Cu!BxCcEyoY9T~maR`#1uaCr
ze}nJf-7OHTB7-TSS$w%CD9aP?RY8sEUIZ)AmG15llNUCIEL!FM!&ow4voTxNPoL&U
zu&0TXR^BF2ZuZ>CphP5<y3r>iVa{^C-KE47{4nqJaQ#U-^)lgJMG{10$>gg{ZTJe=
zo))+`w{Nt7Dl6rmhd^<$XmI;uY2U3R2J`yfSowqQ8pk1}cFTnZ(<Bb>;_E7gBstvt
zi9ISf&7+;jySvz#AdACJ`#SZbEo!W!{B~AEgydnPZ@8^$<L82NS`JfFTqf0X%qHyA
z&U1Zn4_HpG^|Q;?j=6u0na2lR3rFECyKIA=_wC3Cp#?1>%1w4;Ibg-^x6oYkI{eke
z+K-Z2CgbOkQotbEl5+7~Bl{zLHs0QlB@?^N?{g~PNfj<psUu5MkQBP`EKS1lE%>oJ
zR|{qWNj!Y0KH=fm2Sb+_%ge(om3fvmdF9bFf=j_T`--6??$7;1(=M|EmtyLWi+$9+
z7uGu7Cle_TxNmoF4#4}$A@H8Mtiu8AHo2weHE0)>UD53G24o}{Tg=n8{ZqyR%r;a0
z628<HGy`oOxR)R<wx`Jgk?G<trzN0g10Jm;Cp_fK=aT)f(~&IrEV3)>W?;SX@rmdD
zsrK~gDl0`7X4M8U*_PW+b#%5?QfjzzOFFaVSrogbSF!H%i71DJkDi-g$3lFYko^F{
zi&&Yq_U+C!P)eZeI?RQ6$Q9J!p~u-$sC`TTsSqSBNI}odZ{#F|Zb<vSVi;|NoL9*N
zA6rm=hbOHiJXOzsIr7Xl^2i`hPpT(J;Byns97b^7t&xEq%&t8(-?&`;6%1SQ_n25G
z=3tTEp3&)GSUVC`EWH&WTfy2Tf`Pq3<T(*8*c_WPQ{olpzdyCb{aD@6JJ*A8yKnH{
zz>o9iTbbT@RnIQPi#p7XU)so>gB~e8LDqj>R7oi>yQMyGE905@hSJ7-mh23iR$S=(
zPgTQd+hO76+2Mz5&}xAB+*6p9@DtT!yQ^<Ca<8iw8suG16!CQR^i*4d-jni(fIOMI
zpQ?vt(FwNnRxsX?5|G%IOKco@s(FLlV%lQI+*2gyriwsz8R=LybD;d#)7o{xNtzN5
zy9-K&#=V)XZvBjW!a6Q$pwh~;oHScDffKOE3F~H89qbdgFDc1(x~(~p&${xZ89Zjp
zp7_)eegC9b<Bq0ASqNvHhF$8r4J)Dl>hQsUFW@>(Yr(;Zx{)V?QR|{If!mm5)M8RX
z4MYFxb3FqL1`{1MoM&K?R5@%><IDlSM5-Lj(<(Ak`RgRY9jqBu%wWl;LSt}J`hML^
zJxx5NKSxggtx}x8fEk?o<i@GJkvI6IV`MFH805P(C-{T*FvV<wr)g8u<BFQ~8U8$0
zo!qP)6YQY%kn30Eon$9bLU;U4TMk(Bc(pIZqb=5RVUdH|vMRMIn6#s5v~sjOO6c>j
zBOc_8HU_(`<Hj8S`G96)Gsd8Sb>;9lje&rH=$g-)3y&9!&Uz<mRY3JRxqP2rUSrKV
zxy&JizSJvway_ABUXE24_OLA3mcYjv-SBX&4bLgGgQvb}v?~h2JAQelk^V0bm}yM@
zVo~7qdt=P>-8|^cEQp<bBY-WNvAcF>C^Vm~zXwf(<A7r7Iu%Nom2^6>ceMRmC1aGs
zZglEqr-S1m^td0`7IdVWXx4hcwje<9<5Df;gndJLei~vOTutB4a<!@Bw5r{=ET}MR
z&MB<30~36|Bk*c}me<%Md$K;sH}b~OjE=tStbH(EYVWj2cg2TooB^F!yf6`0AYfK`
zDQTd0IeDAspLP`x%1>O`H|{ydUQxm}Ia2)=(;t}0Sn(yt!XLV*@zTE#PgSDVIHlq4
z709KQzE)M;BL9f8MXJ=@2UeE-;ras{rn75jxw*E$pr<sZm3}5&iv6?|{BVN7XP6wp
zTvX_}zNv#F{_&U=5M9os_scRINHn!qbHNsD__Q=-#dW`5H}AKMR@nW}2H^<Y_&6!$
z%?ZR6GTFokbTnku;$qPK(*vd1lU-JB?@gGL6=ZGu&1kx?*d&h2KqQQt-wH34U@{U&
z9I+_MMY9-CTO@tEYQ$&ywYH5dHI~)vE1(-xi_{$%PI;t+)LI}@eA%mv2cxa}p1Ysy
z&O`6U!`yHm?X1r*^i=G2ox;P?_@><aX4S+LdGXZ3-5mH%E^^1Q@0;dIM-NIR(2vY!
zRhqjV&AoKLZ)iM=f3G&zn!$QXra4SYKh(y-<E5*sAGyT7NM;X`^JMZp4bJxhLqGA`
z9cf_DTh~v9#j@9X!P*H%pW3~tPYlpTz9a1sv17JO?n86VAL@>WdJuiX6nJ-jh1?~+
zat3EkUmr#azEND|t`!<yNGmmPME#<r=b_`Dcc!?AH4-v3U>&Z<6srCG!>Q&o??I1l
zl<$2U5_N$M3^RV?e3-kle_ZT~e*CMt#Ak+)_rF2l3zz3}I&icEqPP=39V3;W8VE@X
zCkOF-Jb@g*AIk8Nv+9L2r)Xae{BE#?c+csX_z&iyKk9#jO^zdq)bdUR81)N{?3+AE
z#n;#76z`3buNLBg+R<6U+2-<gjpM)*F5R3|E?q=#WLV8JmsBl*lhOMZZ>6(~x#w%8
z@1t%G;!oNkDom@E0AMs^8uyD^7EnE#b+_YmW2^;42`BO|>@8Wd7m|&EH3`=q$Ob2#
z%6Mkp;Wg58&|-7M&8`F$TPQD6NUI`Fv;S}#ZrpD1b(8i@;5YZ{b`(Q(4_|1FaU1;5
zM$ic<6GBtH%D&wi0%PJCP#~s5qq2T?i{N9(W(O?+!t`fx1^M~L&_?80MW&c>%Ch0T
zSP750)bAX;_f~hsL!dyJ@l}7xeh*z!Xw>so#Qya8lK-nFl{9Pd`>u+l;ILnAzLa+k
zY^aeFKWfO;exf5lYkO}rT@|F+Tk&-kho#bgXFTbt^upAfVEoQ6IE^n}ONohnbX-Bd
z&4Yg@t(_sK86NvU*Lt3r;|gg<R_NRyOrCC#g6KCt$7YS0gngo`=N44It&|o+H*`;4
ztJ!N$licozY`uX+nSS2h=5*sBB<%4lQ#H_EGrSzs_-v(&QZH8(+<g_8rTth6HI(mw
zr}5exhY(+`fa0O9fe4dNYbpE@0!fyt0&j4@yc14E^VF(T%Ym1)1YnltUky7l)u^xR
z`e7wcOHC@)6wWjwUR`O%rwc#no4@Lo^YAqyFl&K#8OWC9TUVEq)3)U6YEyFteD1cW
zh)-iKJksfZUJcq>svP{~N#7R&wX|>B$F`e2E0}m65xG%8SD$nyXLRP9ivH4a<Cp5^
zJ0o{P^LV4AX_Fx<M@*sjK2>H{mVBWloD58Hk|d@h+Q<smEG;cfjIkb}{>bk~^+}cK
zRwgvnCv|*oEmFgz$E@jCt{Q#Wf}G9@eLM@oFsg#5#Di^Y)M*(0^`4MWA3>tblaf7J
z<D`yYn*g_TV7$2VFV3Dz2Tg8BJDuK5G-CMBRJcu<z#UeQXG8)sk3>owEx~z|_m>Ie
zrZ}@kLx*x%yN~37+oOk%G9#K*ofSr?UAi%N4ezWoJ`_()9JRO_jep(Maa!ns>Pagw
zzMn#JJH(P;6COq|vUw2~+l)sMyz8v#9bXpQ$DWeD5%W;D6<qr5s>l4-yoN6Qc3D!u
zM5@u}rSyRcU0g>{)2R~(LP2?%Gd%DV-^v*ud>LNjRt{`B`%l7-zu!fV`|0d2Tx+!u
zVqhd{WA|yqex0;uj;<v9EWc1A<-6Gq*t*T`bG``V`#V%??sPGaXoGP|2Dui#%K4dX
z4EjyAwROBiY<Y2oSELcF`&6w0yRL51jh_3OGTQ>jzZpbGl=LGg#c%7XMtj)LFOr&j
zp$$7Htftw%Zkc@z;5vx_=+U2qWp0DcZtcNr5vxdM0c&jF`M0NblbA4rTI&lLl5Uu)
zfpUck)S`!3&6~xapWPaC5f>BzMzheM=q*&e6q!j}A45Wx_oqptUv#uthgYRht@YTv
zUGoN6#b-ijMx$0=L(1WlFnBT`t1TGa702=F)IVS(Jv%IVzzv{;(6~lrsh}~%w_TAO
z0r4LM7F~6u{dSTZ+@$VCdE8DvBnGc-f(M!hmfLN+io8n%3t>3s&fO1QF$5@S-J;`q
z2eINTYz1<^2Bt8R`x0u#GvWHhFDcBsL_IgV?V9P~`guXWWuuYTYOg>PK}&Q-s%0qd
zAyj?)dr`~|X6rp$Yv{v$!v@d$l6yPw%LImRU(QF`-FE7}W8}!Z4eT0W9*&WR#K_5q
z$V}44f_BmLZw@a?r>s1>5{(QFUY~?zGzTFjDqX+rtAKpi_F&ktUCoA~fH=uXn>nNR
zJ}bXf5;=Ra;@3W=oY-x?MmYC2+eCg8wqJ?w)Cp}dR(0+a7V>Z(dqog*29_Q+jj17(
zszC3=v*`x{`pyc{?58m2J)o?}-2j9Ra?$66XHd1*P1;LGj=lN&rWx$p_nu4}?Pqlx
z*y%!E0*kx+v_Lkv!bqHTvX}DL`>zkuP4Hqpvv$$Hrs~b))-4)J>&hK{u0Tr$tRrdd
zy)|OqvT`Wy`8)sol64a^nMeLng6=tuf%g$Y9m}bZN6@Y#@lGlhylJ>$I-WAR1BGg$
z*wa|I@=JM^Y}+gOs`8uf_eo*O@snRlIB;<qLuL14;P2O09yr}rJJ|?(7TEkzMZq+p
z3PN)%Y9ec&CAD1$qKiI*n9EX6ww(w6XBL25?PvPUcIY5%lJ?X?jgEkjh3CzmepRVI
zhfGS9Jw%EGdyB1g`W~-tLY$<mKl?-FMU7c{QZ0hl4YV2lf*QWU1JM2c`Xh|^P>x(e
z5ccSHPw{-^mv-rZ_@M<+la($>>E%CVE-LV5w+7l@g<(i>4{4fbLhbHDSJ%azLWLi_
z-a+j+wro%egW7x&wWzU5dIb~PGC_QSXHA7X?K=r$Cfjc!O3hv*U3W6qnH}E=la!<-
z-2NHK1E2tdp@@jJ-vQsJ^jFp>=3Yt}e5_M?i>Plx^SxDljdj(#9Zog(xsy3EYD=?C
z_8ion=!5<NpBLzukio6Q##1D6I4hLTfGd(ilTK_Ov^6g-#BRBDt|z-h5ArI}d={2+
zJ{O^DzlvWi{CY2axCF{gZ0!FprsscK;V|+c4M3%X?A11h=>75r_r{;K7S<yj+;zqr
z`V$^M?bHBPpsgIPkT|L%B92(nu_p(VHq;9w7<VPr3gBDsy>Q{h8Y%BSn6Bv^rHl=1
z=L8>YODGZe%{bS`ic(pVI!(WMS*kZ{6%GCD>nr)oZY&&9)F2fLPhw5?C?6~_UyW5E
zxkyx^kjLlU-`dX-i~6v4L6a`VXucn`2jU`X4ha4k7zf}TNwrf?>^?P3dght`u@j)@
z&bSbM8xEIUPRN^;l@lc*=TtgIqrciJ@2;9Pe~do!d=KbB(^FmLUR%ZVyY80lvl}Sy
zL%C|N0kh9cyv5OX$5l1%2<GqE%!|BRdv5ymT~n2Zno&BIEi2E4?GHlQHs5YAeg0)`
zgH-V9cB|c7XN3V}%uB>!`H^kw^t`ygtE(Q|f`(8B!rib0<qCY*oIhw0`}7+DfSZ_R
z?Oy`}+V$LVN@%*j*H)VV&isGrS(R=8kUAb^$jQmtqCPL#?&`)KDw^!GQ%QCiFYLpW
zBJZfDmO74Nd>yHGx$@5%n^nA}5p6WCs6M)9f1v}fXjxk|2!f01vnBmrjTUKh{GcVL
zJeaOto9N8CPv{5p{ZNTBX?o{DDPCILvu{c56gN3+vRws)jPQZZERHrRL6f_zEl$FH
zK5?4F($hJBi^kK-HZJ|d2Sx|)vy-;&jd8`LEGpBR63JS?hn_eL%o#5OX;a${YH@@{
zp+8;vBDRAU0goz*FJqM?y}ofcIot4VoyUvX$sjgWhPb!COfshR#zh=cUR@@L4erN8
z*sb-Sv+DFDb*AR=Oi?Cu+ll>!!t3#6x%;Xw$#C?!Ja>X<O08Z9mfq6wUI>WI*;1}B
zukU@si29W?)=H$jt~sRy^6?pRbf1SQJZ|IWh?(C4u)w-D3K@yMJ?=ajatKn~R3sbQ
zX0ZZ<J*-t8g&h7>{j9->;xKuogVFGUKSGi9{$d$&7v5NU53Tr1xjmcbkX^P)swYLV
zjPEF~zRp!z6f*aUHSc=|VY!$m=UkHFowjfe1V*fiX=XI&yo1!l3LWK2g~B#6eey$R
z>H_({rpouEm~kS%)Kl2Lieqv|JS<DgX*081f`{G|poWRxSj%qV7~O|oZ9V~OiO;O@
zEE844lKh49rywPlenXD?(`<PjRB*Aifh8~*KmFOt8(dBUZ1#Go$Qg=&i(!dbSRt(9
z!=#tBBf!7+EOou0y}dRJ)hjlD8k``1yB`#^2d;v%*3V3kfB8v?J$j`p0RoY9rHB4T
zm&n;bsZ=xZuWg_v{N@i~AvAW?&}P>Z`60lcOG3-!6pi1JpzO?Q7hHn@-^?@;{YUx*
zezgPhtQ)E~7-$@hEbx7-cx<ApQ_z{PD`Y=_5FT)%M6~H!{`m{nd5_Bc0eEVZcTi|-
z*wulVk5{6~X;JIL=YG?nxrTl!wvH%*af9$7O<W#tj2@<K+@NW+do7kJ<^r2>m$<0;
zjqC*UxcT$k*5IYEhnGiNOx0UfXT*g(wr5%s?iuL`qnq9twPLpuCZPYF&Vc`~5XSpI
zNZwPpCy6tGFGIAncQ0*a3V8RLcUpou__HKL2$nQ22ZrBKL=fHK12_(=*_Vkz!50fY
zG|lS^60N;PpM8!AwxBlouUEhD!08Wy8w;yNwi8WrqOb*BUVHnjPrtZtvjD2YNDBVi
za-UnJ*Rc~VA;&$awfb$7$X*hC81Zd!eNw&KaAD5EmzpHWYR3fg2AP$;6qJgnV;;4j
zOQ-b0#jWLq0#%hYaX^Ofq7t+vVTA0eI5#ox*4KgJCKKZb8JM$c+->RlwJ&~v@=)kM
z@?9leuJ9sBN}968NVTW*igo@D*J2&jtS<a)#I$AWMV^5??U#cS?0RxUvpn4^Uv~x+
zpoE$#<H5~u`E9=_)|TpX*zYZic)gQXPm(H1uGG^MuxxsAoEgQ!%cqNwNrl1BIIiCQ
znO4xHd$+5Wp}%E=*K%fD=Mt$o6!?)wXt7(xNrI><v!w57vQ2sDkge*CRQeT-`(2}O
zpvIaU>_56S972J?9~$AuWDH6>vL0lj!^L?o-cQHZIkx+39JkK45|b9jLv<HBV>wm@
zt;AoGnu$+nNPUeX@*4ejM`E5fH4o_`0yLxQ+3fHk?XH7rOcOD;l%-G|R0Xm4unr8H
z_7@hp^bX7ogS54m+7C;=_zHk3{N3ZsR5)y5%2FaOO3@Q>%UQDxnI_kc<?k?p(rcDY
z#+IAti#lT;nu?!~e=o&6co$<mmFKWS@!IcaK$Yl5IV1~%jlQOmquav6LsPr+3ew8S
z&>F6^ra2eWzCnj<8iMAE`qSG|CSuXqTLm#lawad=5an_n<UZRZ)lo%tX>3}~Hgz)<
zoZ4D8wUft_<-v~aEfsOcS(yyEzpzetAhk|nw`t{%Kz?ogsw<0g@Fm&E3W2|FDS>w9
zR@v_!o6b=+&HEh5gG;02G)QOljrMagF-_+OcJhWZ;egs@08lB|q#J_7zaZcG4??*B
zz};T?eZt=8?g@pcM@rrnD{Mp(wy=eWrCI*qR4!y>YpxlJe#sKFvj0T~kS4wy*lag=
zzc&AjdVM}vycIEFen+LembQF(sPx0OEb(qIpzVkv^NG}b`4@1axhiPpkjiKeT<l=f
z4+pU;9QxT37yP?y!OiQUdMb=Q!-h$Fk}DC#95GO8S9{0lW=w?raKD@J$u8I=p_(#k
z2K?6q@IjBn+7YPvmkXr+BJEq|#wdvk>6hXk0I$>WsezcnBgMU=!Di7((2092(|6s3
zN5y<5p)c~Mu3zz*)jy|Y&|8)D7_+fW3f95KyyM}%-Nrh#a5sG@K|GId&3p*Iir;<1
z_kSGd@c-$e#z=?!zS2*uvBbF6@fm(|vYb9CYtSA17n+PJhOP9aaXVSY!$T<RNuBp>
zRy}VQ_bzeiMh^#GU`nPQ_thJ(IHE*ZL>pvfi|`#ctIvNwE--6xFa9x^!kd~>35LWw
z)ew4qa*uKNmcOa?`Q}q_u`R0dr>V6S-R^D9XhGJ|qJ+!|lv+mOFVMHSD>^NWl{`yv
zcTb`=jq@xlIlvM2qK@5<?E8}AZy*|~MHK3#T?)8G9s1f}bjo;k*>xWB76?LYMu2ME
zoclfSRhlX>8PB_PvXi?LWD7si_rgc&o66s`S`{OMU-JMk>TL1XHC8czTG@fOEFbk4
zc7C~R$slJ^={nkO;@6Wdmjh`7f<to%3JBcw04+Hh*rE6IBRY+ob$w$T$um=5Krh99
zO#GDcl-Ia1{`%UOq6VlmFDuf`+DfoxqYv%vjbYzTnB~x|+%#x+*DkZj%if;MJl*I*
zyVOcq11nL18;_;K_)sGE@5@+FgQ>iJ+w)?Buiz$zC0YXZ8n7ppZO7lYrMI!LgS`M(
zqa=KjA42#aF58(GqZrdmO`c1sFWjedJ5J5<HYwLYWl+RrM<E~PaiIS(h#NuPEBl8{
zH%!M7_1ohq6A!%Tdr|X~2G0-2q$2uk6iurNJUEdnC5U8d1FD)U`5shW`mox@$NTfm
zU$Uhox0b1~R*l?s!Ra2<_ZxZ}ix<coF38Jm$EUCz^>vwTKNpxklhK?|b<;D$i5yGq
z!Hc9zGbw3OzeHPRe!Y=@4QfR=8<MRM*j)9kXT{eF<c(<7Cl!ON%JQX$w@S|SH0kX%
z9Q?9Rc#bTOQR{nuAa_kXTrFkWeJTupR_1KIe#6*L{HNtc6Op_6-lu=m!WIYCH<@$`
zE>Z>p8I|K+yBdi{H1({k7I4icq6d_S8Cl2=+rJ)s*uHSJUmlcqxD_$jvlS7y5=rkX
z!H>{f?26skYb1o<Vk?QPw5u#hP1#dx2>&&p9dZ_A0+c~-mzZ}_5ossa=|_eR<2GWL
zb;of`$7jvcN0uXQ8>t58f1E)oL&urGodg!iB?*wDj-6K<7yI;4_M~rPof|<srSc^v
zY^cw`)d;6D_kP2M8dev@3Pv4E7~!>D{7OWRB@7t9zo{WM*1_rmvcgRD@j$7;dxAdF
zr};gH$K3oeqd)LK(p!6D|7^gF49R)D2PJ=)tVXd4lCzmjJSzS7o4wBU$St5bf?uDo
zkUVPD(V%1DuoHwY|F8YuM=vj9T3c5DQUN*Y|F)nPs(|h-2V}iHK-MdaU*lVB@@9Ef
zwxLQl9x7$o6fiI)roO23YU|0=!C1(8Ix+yVnJ#>ByhQvZbR$}SLQ4PpWt|`7dNx_W
zev<G+`GuEDJrO@~+Iqq`{^dO}kw=-{(=YDMX2b;3B3K4qNy|IsC`tZu(JjkpZt11x
z{GGqZ#LE`s6|CHGaJHnk4zQw$`3ZIvTQ$x6Pso?c1h+u!CE<Ni0;e_)AXV73tXB{u
zT<1Br+BZ0_E_S6^nqx5_unlaL@re*x^kl$DAsAoPcWZ?IL%CkwAbYV}qGDI&5ft9$
zVr-CGy0KrddTvwe9k<2_V8ZxX^~Iwm@IM~ot9a*So@p}H6h$;rU+R_u4NOn_tWRDl
zn{lg`IS6)edpK2(85dZPI^71u@s!0w?K6vf=n<9uQ&~HE{7q6&(Ec|cg(F7Lw2b?U
zRj`^Mlk)(YC$HV#(#>LL?9W*CXp6eKtc!LQV{U?=YDIM_nNogSRfRbC-)Zd`$mZ;`
zO)(wcCg@PGbWD`#Pn$or(r8;4OW&`%Ze<Ay*R{vmD_kV`N?*2q)o%H_GT^>a-9ztX
zKpn7+`+dEixZ}BZbm62cr)De%S5g`9^aByTIS=1AawcaBrnw(u=#>xi=x}Q;qlScJ
zPy1lRaX!BCw`(<kV26)ii0S32)h7>T&QzFVsPgNQ_61b})yDu?U?^u&&=q7=vJ80Z
zR^~b2MDRH71ttb|Kc$bmb=(82001TrHHcVzSN3s(z*C5(gD5lGB~sHUS2CrQ*mO#_
z*AJny@6Kj(FsTkMgcbR_geGO&lkZQlUG-o!zlZ$xs5L9C+6*wsK;D4QE7zS5wf;Xj
z=>H7GkGOu{O+Q4-;%+KD+Pu0s?bm^ia-ZG1R-j#S;HGrGW2r;O$eyq+N>J}QsNhgM
zuJw)B-m?UoR&Dr|feNax-=FGozke;{_7Sk0ZGcWNp;cAzz9YWbOs-7-MUAUWknyb1
z-#G17-=72g7$qb0?C`5zwVU6|c)Ak+x%09Ca_j}KP`TgsOlf*;WxB*a^d8g42ccaC
zrZm5Ikh<Q-&F(iT7_(sSk!?e|SWQUoW30zq!{lmDwh@7<hcold_PpM&svklOy>P`s
z*E~=me2Br{+KSz8E#FcE_A8ip=ZWfMm$M^{6J+8XgRG`3VJ}$C390A5skT=VbzyfD
z1>PJ))9zhF1IP1hE$*eBy;m{W!jhJU77W(IA={!R?tP1Hs`h<|l8N_GtDT?Jyd&c2
z`-vx8<mC(t{UIW=nBL;Qrow@iI3+}qB#ooB918iR?TZKO^KbA~2<i6?M8KbL_?ReJ
z199<~)i^wMj7Q9x3%2JUi>j~(l)N)pGj#4r;e{(l9&%r3Goph<yX}@r35hbVv<krO
z7fESG6X(@<t%g{9JH(VJ0B|gwNEDz+XGDotwUvn`&69!-n~QhT0i`=)-)Wb#dwXi<
zeFn~MyYok<vzrX{B-42w?$Y|Bn<BluGbRxYyJoM$DH?p#pN@qC*lx!2N4LYRSFNex
zSN|I!473)XU%t|R!u8Yl^7nd$0%macJoSu@pj{-{e)c4c9)r8?g^RVc>zib|#i4P>
zY4l61-C(j60A-$;*YCvtfS>a&fO6gUjuH&2mGnt3DAzx9(A`Xj=UrU>7nYt6&c6`&
zrVYwq#}`Ew>fANwM4uVvqPBQyP-lmuN6{?2kv?bTUwv{KUx{x@+W1ZDKT#F=(9M18
za_j3l%ZLkarhJdGgM{A}S^gs*i9Frj-p0JH+uqB=8bS{?!zNnV2#}{)n$?XX<&b*O
z*bvH_s{G#E-3qs?mpP0Y)@KBmAf@of3uu`Y&08JC_VVWw*BphIb;0E1Ui_fA1Z&2$
za1Kvj31zI+bk$CPkB$IYlhI77O4ayLjdX^S5+|#-`nOKv?7tQN*xPB!^4eLjZ3^zv
zlmT)031&&$nyQyr4SfpaDXhnopN2S_48Pw5bk?Y=)pIpL#(&f8Fet0*g?y-}5Ss2g
z-=+ze+D*q7?Ut)(Ezeak%T>U#U5|59I-xfxQd4Px#9pfpfl^hXbL1Nm?gksxN*v;;
zJ2Xzhb{S2jl~t9?YFSfn4tRymyX04k$Z>rY)M8}h0U+tsrc$%GNo1d<(|~_;E`jD+
zb-fXK7+dQzqEy%lX@kbX_i*5-u6lCeaMIpZUc3;fpeL`pIM;n;01U(r%#F(=yg%-@
zHryDz{$D-srOc0n*pVLWTyYAYu3hF7I+sKCxx5F$ipKflrvRSB!&Y9{0?c|rI5`bq
zf5I9kx`N*WdFXt9+MBzG=Xu~fxf)~mESf{K?OdyqZ;qe$>=2>RcjBs1^gVSfa6FOQ
z<t!OWgdy3?rCW1>Ws6bQJ<JC^A)ol#4PLD|D5mwa!3EkN=Md1R=Ju$+>uiCsJ=yQ7
zU0iwLajeN5n5DmHVeuQiK5H&x(^+S!uSDz3x?=B)Xd7R5e_jTfnm}^{Cyfr2OVpLp
zuJc!^M?X)AI=ZePWU>*tm1Mk`gh<;l3}v#C|3gs8(zS$1x7`y;5Vd?_+P+g*x8in@
zbo|a7M6=Ic?4Bqs?xFEj3NCwF2Ly}Tc&J}pqWK)2(^$+?D=%9Av9see<hDs+PscCc
z$<PT=D??dgure7)1TAnU-jQ(yw)0|Ym!M|Sg{TS#??7xShBfhCA7CPt*p%e}^eWG0
zMBQjyhHguLJPEtQ%6~6;pz<QAC<fZq5wzN@TvQRz5`kL(x5lcur?v|yUr*YhKG#t9
z0g*_GeA2e3dXdC@L-fBUj$r!Jowzv_o2l&S8uiU7VXAAN%H_YWWL*qApnz@8EKO4U
ze7Od5S{|K0ly)~ti@W)>*-i^#RbA>#(l1c)oXm!V+&Ox5k%WuQP8y1+`~%q-De&(G
zYyoyZzvooj^~vX>kmqN%wiy`0`~ElN67)emZ>L`wr@ePcy(QBVl4Iq3f(Cw&KDEt|
zE0%*d{6(r7(z$MFUjXnmPR$j&C#T@X6~eHFGEBqgOAv)~A_CjfJl8d#o%ljuYg#71
zsczGm6FArV`zP8raxe}fr{j5vM$ePy%_c+d(AVcYXGHj$6Zf_Jne^iRevDE2d`I8l
zS>)q7xgH*|D94*|YVLb#bpu$3e6jpB;EbOVcH+xiZp^TmM=U*6y2AC)SwU&@T|$vh
z?)WIi;Gy~hiRO_?yAmg_0aBhY`wZ|>#4x3_<#0Qq=jvJ<TECi6I}0_LvDg6bFu)Lj
z{V0A*HnOE@dSz7r#NAe;U3B#8(uR8d_~+;Y;J_Q$<+!%O+bOW@GfQpmY_YJurI+r{
z3uvEOwn6c4=1MJe)+fpfh1sV%g1Saf_DdHK9YK+og;%2P(L7*e`eHBJ_$7M)_xwsf
z-KQ9p|9as6_wW6EIV4RG+#ARU_@wu=dLcPBCYJLDW}{qjyz&s_vy(V*f`O!ApFao|
zI6`RuH?YRto3>;oqj{Zfb$K?+HX6rTR-1G3;T*9!=1TYwzZP0Fix1?OWe9AR<s%fZ
zRLY$A%>9K+jwGq_5^2?AHceMrSAtP+;YUPLPJ8WbMkd10IYkM2wi#BpRf0xogatX3
z+nb2mhzX%Xdnlm0RwnThC3ClNWq&tEG(8ucWJ_dUJsmQOEx))II+F|no!F}PDpher
zsw%l;N#3>yq1->j6n>Ww{Yiw>`LiYO7@@u_4<%|DaDBGTF1fKStrIq*o!AnWdl#i>
zXl)g-B7J_^Qa(p2mTGS~9+ZOt3xl=Uz`;aw@a*{E$g~}MI-{WZghHaf@G1MZI;V4|
zbs>kkiIqv=it*o<5IfD_5Q?|6o(@gcE6Gq?vdJYb5p(L1grNchvhn<=Y^2<6B51V9
zO5axQYY2tC*fo&@cP@6IeM_*}l~Ps&kGL`Hdy#bEZT`*w7<~U{ve4yM3afSaK<nT^
z!c&odj+y0k+y8Bp_@c}`y@!QToHw0YzSe`KIW_MZ79W;!0G#h1)U>%9s(>egy{ha%
zt^o9b>1cc2+FzCMvCo<fg=TTU6ljfQUEZX2<l6=vK@1UKa2+fmZg8B1Iay@7NG0L=
z=-ZB4t<&jml@8-!JZkLm|Jwer+mes*(O{RG_UcUF)Elnv_=y>O+FeMKOJ&a*G84Pv
zxQP>4Oxa=MF|_D&nV@ps{`0pL^v+?F`X9#K=Vx+``vr=NhRq;GJsQ$1Kb#q+OCEm>
z%H5g&+9=GPEZ<~y%BP!4*-znzTr{0Rw+X8~eGa2E428o=mQkMV<|!0;-V6{ZK=(P-
z(N&)qbWqQbDt+Jx&<2;(naL<F(}}Y)ZBoO7gy8n$(@ABMO92Pk?py)?e8@cosy^@0
z$zt6a`ljWUPQ;PlOWPAurh4?d+x0ux>e_L`_L2a4SL@)@L|KvGX)9YW)v;^H?OCwa
zIUW64eK@Mw2>(Ms=}N!LW6u91z5l;MT&{439NtTB_aTNP?}#W`%^1!5VutgZ#=0AC
zFcl7Vgo)IGBqcq23<GrLt;3?&aMA*+J?Tmgu=9*Q=aJa0OEp0RWQozSZ~dGA11}+U
zK1O4zg5;9tyaV;x>mQKNHp<_RyXwYawcqVAS=MxTGab>o`}KNe(|}am5fbS$==0ew
zN!xzg`Il(lSKpNi@!)}vzdBBrN`^Q*h*$UaAh*mTe#iB1KEG)+Jd<4sl}k>{Db9%c
zw@P6hY5M@gS%=Q%P@vQ3hKsk}CDL?OT$<w$Z2oTibDbB{<vbC%Tm<B=ELIOtjI3kd
zu5kxOS(z!_V}F5;&^msfKQc&IIcx~QYLfJ-_1jy@Z<Ws9AB!)s^tIWh#gL`CD|t(^
zn0~tnSemvb%WULkI$SbOOPb-RnG*Mu!Uz4iHBG{E*qV=Qa@(05W*SQa1$DE2%+6|e
z)wPD0gRmOTq;)*ZVT*{>+Ho?sTbO)moWya7s5xmQw{Qm7c_g-_`PnAkb9iq6jY2@V
zjkVY()pQ<uuT)hFrany>f1aRTU7~JR$0g*UFBJMeckTZSxc;A~-}wIQt@It5*qk-d
z_m~(y?iEdwwX`yZf(9^tONpZaM<SBG2gOQpivpKsQj@w9o~U(=xcoeUC_AUIVdnMp
zXtcN>WdaWqW=~!2m2SDIpi|lCbj(j0%aD80T@4B8`g0YKvw`v%h(%k@*TKr^KZ3j(
z6W>`kCtKq>PBVC&6%-mIE?s<5M%4UUI@6-rb4aSeszO7vz(9@(Rgog#@ZHSXs{Q*y
zjTLFR-MfMBrlZZOVo9Y&Xxp_4afV((yxf51zbtjGzkCwLjkEV!);G>(kswbdwfY>N
zzgxOll43ymvQK(u7PKd1qn&X|)#7Yig5z-^xwn4BRDM|GKdo@bd-mU(Zahz((DfG6
zD^z_%8~H}MEf;FSM8MqubN}nAkvc8Utt(V0Uhdrcb^mZ>ta5C^`T=5~DnFom=V_+K
zgNSduKp9`S!N5#ZeL?cp8?=GM-Dh~ickHLD`>&g=t<<z*Rbc}S5J}vq!@h2smgs|K
zB(*#jq26{~y@HxEFl&6+W_Bp)b<&nrC8^WjT@BOX{k%pX9Yg^y0HU<vYVw*8Xgg3=
z?0C%M^&5)q)6bg^N2V7lAkF#bSY&>?<hw!_>Jy%K2>gtW^?bfH?SBSR|2qtPFjZKE
z;x)r4Sv(!n!TUUtUVE8+K%<>dD=_54I82MB=QGLUV%Lb#yWpubrsd8YRT1k>W@sK#
zmd*}oDb=#?WM&Yi{DZErsohP6T`qxV&f)VawaXZH(KM;Ae8<_e??OhCKdH?KlxNKL
zUc4l~$)KmUa$-Pvi3Gb$fHXE3t*(2K4it$NMhk8zWMd0`@0sK}>8~tWRqM95yIKZv
zx@N?n)6A<}3x%)G-q%4Uhvo}dil)C5O%^9OKT@=h2)RC~l9j=`F>p2OMs8x&HNQSZ
z5D1sO_$&H}CY|^`(;N7gi`^8Q&WkK{C$e$aRZFB<U##eH)CqMtrrNbjzePI<WZm|W
zJ%pmh^SreX4pT=w$(;+Xw;`wN%h(P4;mjYJn5cc*CA==?mgL`Fse#6coxDg3!Y<!7
zX*p_{KX_1Gr1R+7$pj1Ab;d!b_4C+XMniGr>S4-=8>$z&jH5jO?XtL2RgZP>Z(G0R
z`}UNJd;yt`47L7ik{};5J9jAfv0S3{5o)yp%x#PLL%+Y=-H>plmJ$HNdBk*4dkCe*
z`Hx23&Z;SB3j%=E<}~hGowdhbb4G@YhRU++sclJ}&Qyoc5jLKl5}Gm7fq#i;>A^RF
zdf|gO8!D|4f2R6z{d0bO+3W~{VA-oH6B8Y!s=AnprAoF*rGHBe{@dvd&(r^Zj;;%_
zX7(3kBC!8oq<v*noL#nNAP@*7xC96g+}+*XA-F?;;K3aN32wpN-66QUyE}yz?(XyQ
zb@!chXL|K~x$}ob71Uej?0wGmy&vwYSd7ltem>8iTS~-%H0J)yv5k}$w{3%qup@gX
zc2F@6i1@Tkbp>N?OFMXHgM}WH(M@D+)bEw^YvbT97ryAeZYneET&9#>?jV&eslB#R
z7R8Po0MAX0ZUMGle;#NgI(QcJ*)lwx)_xXByWmMC{R%icmx0HMv-1;coWt;i%A85>
ztkiq7F0Pr_A<v)ix^e~B(NTCg8>5C3+lD#cfG0^pHyFjAq<wp>mrf)1o$#?Uz_SS!
z``<Z>d3P806xH4req-ITJ`dhG_T$)vTj!W0#c)!d1|?s-@=J1R&Yt|hGPgPO-mdzx
z;QpD|gwkAn)S1_rP-IcAMsQuEGAHt>M6%%cvvVNUuy$s?0OAi5>p1oO=igUFYV<!Y
z%+)0g=D5A?TwiKt?35b;m#uOkk?C^kd$cEwR8p|_6OeY?m%QO*w#HFJwD7kv6pe{6
z(+lOm<#7@+yM7uj%q|PBu(XicC_y*IIj`Ibmol2=!yFdDTCDgTUHdkX3w~(72XG7`
ztZ^`+)F@%gUhg$5`|dmCw79yp{pjUYp1)+`kW5kS7QC|lbyC*RbmX-HZZ%pBu~f-%
zeB{apQT}3*0fNYlR}-Td+mB>t({s~jvjyg^Y=#4ol&RD^O1c-CghLcS^9gQO+0(LC
zz3sjCeCTHXFEw>lMNnv;%H>^NA@*ZGV4K~p8kvm+jM|mRv=nNKFDQE{sp~ok0<!7L
zpUNgd{?!zf_}L6iZFSH6b|zZ7ZW-Thlj{PSMTC^N=4Y+)h1;p0p66^$LCxWx(WA_-
z63MPD3!5~#*b~MDE^>Zgi}!rFLa#|-zI0NK%8)X8j$q5sXzpx?7$%7c4jT1zxM_V!
z)e{UJCNdXBYr3*f>zBCcdb`jm<2FvsPHwIIV2io9l-ON84gs`)UeA{qjypEgh1cg#
z+G$0H5*xk00t*e?UHMWQSsG=<<KCK=&|aj6eGW9hf_Ma`m~}1Q`!1ckQk#@6q2ngc
zP6C0O0{Jsb4!g^+3hv*{h2M3%cmq71$CYlgH<(>4&fmQDIKH@WnRY)@UM95F^-V9b
zPoe<|s2FGV`5HRh2cQ_bg_IGz3c{|%d0@6nS6CMI4lAa=$1u7~_ODw$?}(s(3#SW)
zVP*#ZIO_$fq@o{juO<Fzx>q--jMkrlIMUdZcR=w#X{yA+7wf`g&G*woMwc`G0|OiV
zmD@dgbqtw(H8v&0nG142YnKa60SpV!g3>XUOVvsyh13Zf#`n2&dz$~lqU1y90Qhsv
zjZ^?H%pwKQ!sr2VlUe?9Z49C9%V(3kgQDs?O_cA#)3(#`-eG8VJ1abb$x<+3uEeja
z2J2PEEDX?@aNStA!ai=lN;q!aOHao0iP+awCsQQ!%e#@fqBmw*iq;y=r+4bphXeU+
zWFbIdDyQ7NIbiBgp8Xr7#s4yE{+&PBPIEFsHMHO6UfCXO1R5WtEhDLb!<5@olreMX
zle>6($KsH$B)*<6Iq{fhbybwGT;uY%FOkX|crXL)xRwmpuCl|}X;phrIB=G^;&3<v
zZNC=dLs1~OJ8N0UnkR>+8jJ8%Puao~I659y!*A$L9Y!<7Y~p0HH1jEMjv$()(HA^v
z>ouP&W?RHlna|9(3mx}|eBCGyw9A);?HI<=I6vSeqk~`DLEg=&D|N>)?%ip89-zWI
zvhqACP4UvG(#$R6`HJc2Sfd0ucAJ17oqa{7o_%-{^LyjiPLzp9&G0b5xJU1e9p7UL
zPVJXk>2HeYIxr=*g_QfQ3pSg{7xxZDTEE{4Bzeqvx(eGzxf=cMk7I%FKX#K92kmNx
z40HZywVv3PrK(vxIyU1aetj+k20GgJS3Zwf%d`4lSg8z*!d;!S;YWCumC2;p0k+E*
zjqt?v(l>N-(BNs`@S98@>J?96$7i?x=`D#(apas06X<M_EqAm0@Z*=`(Hz&3#x#o?
z&9J9F4kByK4WR7OX;ve>&DBx36b<WZNqhr1&|I8uTVWv&mU$K`KhiEL_h++P;b|y0
zRkjtn?szIKfvR$qA1;6Dy;ylW>FBrIXTP`IoKlXPRUo#;?$4&Qd2TRB8)OChb<8VC
zo(H*PFP9sEDZTi_915uul$x}CZ=n~TViJm;tGH&u4+o`2m;(X68|#<DT^`-+Cszk2
z6>2o6%kcyjQo8RKq%E}c8oN;|L%4gEajLkfG6mN>leLyESX<7lP2WE5Nl2qRBkok~
zglC-<39WK!??Evh4F*9Rc6`15tlV6By8N-x<IGr!;5Cp((KMk2g0VCXZo_PtuOAD_
zF0a>QUN@)JcY^ZDB(8O5l7c-w_X_97l^qU+Z4AY8Aa`^0YBo`bka~=_P0E}HoTAtU
zSVsNN<dxyQaw+Y_<Y$ptB#8s@I3lNLQe?0TDYqh~&NK32xWfABsIC$l2XCwk#TT+|
zN{sA`506k8RiL-ic)c>-WHzBZ*7yeOCC`%MYbR*Qg-1KJCTMQ0o>KKxIDFEy2GV$>
z<J?OmZVkc{S^72-NL+>EEBpOS1tmw}Sn;%pL^&508WVFEb9^kG@kDZIcb`oW4_ZbR
z_U)2yg)FnMpG^uIny#7B+S!hdkiY1I-o&O=dR#VO4&-~bLZ6*P)J|u+WyxiKIr`iJ
zdCugOPvSC37NNe6*xwW?wz-l;mYL?D?V!zvx;ypwVWPCDD|C&k%F3}61U2?$jBrB+
za&7t%Z@MD$i!?H5>0tjnqd~P3d?-)w7~JDAY3+j)qd7Y&V$Txrk_PW-raz7;LzoI8
z+k2XM@GPw^aLI93EVEZJpKrzT0EMTtQoJ^?WGWol-<~ecJ<fQ8A*?iNLF(|{LnAi!
zX774nIva*;Nb$AEMKqy4^=*zh%lMnWp91@*=xSSp+iBVWI+OQNSv#vs<#eD)98@OK
z3cGpl{h11d??Ky1S-VJ=i?Y0V#=6S4miL!sa?dr54Y}z@+jD8whWKv1j!!iAM`FuX
zd`E$mS5LT|j*Yq=i#2vE_;njF!(FFybkj1E)2;YBZ4Y+n@v7dAxV&L|c;m1QTs5_P
zVzb-nLaQs3eI<)x0Z6ihq5+@Qbp5w1@2B*SVZze}qR4;}ixyhEy}I$~Q-^NbUhDA3
zipQ3?n%-~8P6xd<Zt}6iZpU-A^((EsxYv^(?(T5^61m>e{UJwH$Ibq{-Y$peLcX(?
zi_jmJlW`ZXoFRC`aOG#$ZhQB1niZe(s8)OBuPGywIE`N+n7K(mcH;c<_&BP~S0<-?
zqr+Er=Ux@r0{$97^k#?qqgNKB>tWb-JL4b5p+2ojucp9&Q&OPzfxc(&F~U_<J>Dv<
z*V})pQeb~VLuhNox4Em;O==NA!a^mz^1ju}$|m|l@x=eB3mSIFpPc~)SWdXa_qK;#
zd$xLvKYYqfJaj(&GXqGw^gRTWpz!xL_ki*Via(_d(g7r$ZVMXa5DXU;F5&mKUTS{5
zC&QLTEu24mlDh>Y6qv7uYvA(Jcm4o4q<BOH9nQa7*YIC~Cm&^CALX_aSdg&pFDq+~
z>|T710lM}j*c~c>HirnHFUa#CZus)=Hh%t>jgTR`3e-Lc>hVr3v&w$>Lx=gF{qmna
z0egI%DU9=ntorBnyyZzw_NJ*Qhx`k<diwu|xB*aV-{H<7ax)43kU#$<1pilL=i4(9
zbg<Ci@H+S3?X&wo<^@2~^6T-gs#FR8&6b}3V(&km11kbqrqi6+;ZEM5oBXF^b^o=G
zSHKm5K?*YdcedZ(crQZ=IA}Y-_tX3j>G%n%qhRWxh`%cDkMG>S@OUx=fi>jU$s`m1
z57(ggLIahMtG}_|fA=pLf}fUd;p23CgP696|A$8b2{xVoC+r%@(r{Ak3qwL)7{afH
zQg`Sgw%!wn8%vvD{)d=G-tx3av|8*8&)Z-y=^8LZs7X<Yyp>uO|K-wts(aaUE&1ag
z3IKj_xSjN-)S<SfQ<v)_9wHjKue`*&yDz9uupYpz76S2Xg!~x|V2dD))pT@QIjo_;
z#~?2~Rh`sTcQp^;IxAqEZ91zpd3jx-sJ)&fQvZ(l|LMIp7-BuY4O}^iGDLjdrk`#n
zs~OsQD-{HTe|<<_X?4a@E)X-W&3&%vUW?_=4o`+s8!LZVaKFFX%?Yyi?U)N4hxrR#
zg<n(>IbF)%Ei?VsJ%ojw18RV-*YJ4G2<h=5$LwFU>Q6@q$n%Ux1ly<ow9S7Lyha)s
z+-LB1Nqzm7gw=(7>0`Y)UBA;9h5PHBKlt&98Ft6)9N=tc%KAruv)<RA0M*8mZYTZ+
z4|x%Au&myyWje_5h^#W4FIXkKjKJpb=ihJH{vTrT|M3#m5YoyD8K827+sM|7^oMvU
zQqZIPQ>3>x7;=8!Tf~#xZ;}9Y+x!WEZ3)$*Cd2&ML4bu4`Q(0c@;M$6?&JLnH}wSo
zaimr^_+r}ple_<hL;n(9|NCF?Yx&vf%6iLqkEAyD{-S{ouq0k`vx7fPPv8fAPfEf;
z2lGWIwY$750Y4G2un-T!zVZI=ulrlSA*n$CCe1%YBmW0vfX<>;%yEBW@VP@l4m#n*
zfoeWR7-Cv^L8+df>Imkd+2rW#9w=sg?Qyb=_)CdBa7BPW0c+wXM+3eE&Kf%}<Zn^!
zAKUoJ;4Q^=)W7QD)pz7Y=UYLAxE!a+Zq9hyqR$`^`^h*!M;wr@Z-@Nz>HoT!8EOEJ
z$Xi^JIsbr1NTN^+&sBcq?&Qt0oXmV{`vU~7S5{V5z}@&9Kk{-l<N>RX7Y)QMi~9$L
z5$tQo!KWL!yU``&H>DRF&0Q<QK~lp8>VgN5y3MX4dc0lsyDx?o?AD8Xy?wuV@dxtN
zJ6tQ>^I639A#+>IGY0>9%Sake4CA5{)c_NVKoAP@oFG@K_b;+z0%RYs{*)K~2V{5O
zgsfkbzUwQax6oS2pg0t~5bShu;qgSz6ic^z5f9$-6aYm&udvEu{|QByUToknP25QD
z+iz<f3i?kQ&eC-+lIzpWi`r_X;Q1q~4=N2f{;QSlX*|Bb*oWyNRVXlMdw6RO*ms-%
zi=i&m!j=4IhPwA{_y*P|`e&OZu~Ntv<~Y1CXPIW>=btc#o&@;vjk@KR-gUvXrY5}B
zJNEp)Hu}nY_2nKUCtmpe0Y5$=Edk5;p?UFmA*T2ASZDVF?Dc5~9`GX0!(YAn$6fhb
zGN}!Q23XpU79I#*4xnn`pLR0;w-<**R_5-Hu%=+G072hQbLV*n-{0n5_ic?hIc|1C
z^>}-N{V%Ka|BDB(z$0%?fUE8GG5oD607{o3u{t#mZ+o^RqMN5x@mWE4e`OmE^88pS
z&G3(O@(mfk-U?sFSOpId(gUPB?&vEMK=9#5d`B1zPhth_qB~ej^H1c+uGuf%t4ZiR
zdF0zk|A|WU{{BMD{3-usTIn}0md_`kJ?y#s_??MAz;Y-7y~CN5-&W`Nve(4)$I-qq
zf51K9^8myh@F|k1l6U=WO+B#NTbDP=--@_TuVP)`F<|l+>ulB~FM&b1mY1HFIJJ>>
zn6wf=)o`}aq+ib+pr-pT=6TT*Dvbxoq2V{*%Y&Hz(%8%|(|_W<mqRD-3%BJrDg_e^
z6e~WDBZ8v~=%3q{;AElx;Fj~Z1-|ljAtTTDrY!yj-02IC$>@FSc6}sO@mm?PD}}@G
zjXJwY;rP|D*He@z4KEuQSPe0}u^cN{x5=5H9xjFvoHSKNv)o|M2);}Mn)>^JM}%(K
zn@);P<tr3h4t+Xdc)QfFP2w-79cS)@Cw@VW7s;sbu0N8{Ti71{c%PAOSsoOOb4{W#
zB_2uSAgH^@cY$tF<~lIF7#=byoy1&29D+N%MREMJ9oeM#97kfr9f;2Jd;ADw$F{lB
znHNdzX)h5$A3NwFWcvf5XTP8ImDk<@^!UD9O1++i9Wb?3DoT*E#zN0x(rf5yS23@A
zzt;?@gDHcC{&{tcsPkZ{y9j{#pk#O=!jvU8i|#{Va%B$8c<M!Sgw|<sr|6YSivzHV
zBqoGUr&}>Iu|MD)MTBe<sSJHU;car&ix(_uyG*L>K0or%-Nxt9_#%<~$y+#J^}aRE
zOgi_W=D?}mWxI5$Oh;h7H+aMRIlZ{9XeHKucfjHF^CPJwl3XOI?AHej=$tY{Q(!!3
zS-((OFAAHZv;>m03jV}pbFf{#=SHmaiksd?N*kZLOfNS<SGdw`t>?xsTX&WKR<kRG
zW@dS79<EmJ<uyOP!t2N9qvgtDIj=Huhr;McVjIG&<p)q~U(ob^jz=SgVrKlPM?KKs
zldSq|y}2`<DG_#{{&*Pv=Kp!F`M+W~V|u%!aJ@9Tw@Ry8t;AK%9^Ea5y=j3KWTY>H
zuk{!AbpdK2nJ=HCR?1Ek8kh^dOpSTZ#5}XRhZNXYd;Mz`z{BG)!|sU-JcVNZ_lgx@
z22^5oQnuLflW61oB&m4m$NA!xc!5<zq`K!mO~1z)rI}+c5@1+NRbw`>P1fM{^tr@e
zRTw~}D8Hx9Y2K!E62I|9zG*EDGxgMdqqwZr6|-!$YlZYg?K~N+9G7lm{~0hm<92I*
zK#{y?)aw^7e!b)sULzq56*w}i8m?i9jhHQ7dE=77e#;q`k?F^oYl<bi=Th1EVGV~l
zs6zSmc>Aprhi^^W1L!#=+VniOfmkw;z6FggS`2P`bnCYaKU<SLsJn>G>ccQ9SwNXj
z9WrFYK9@CS;s^_|4IZB-CC{73%`+rGutY%C+ll)|ijWuxv&9|Govgu8Ygek*96RDM
zhvq-w(*Qt3k$x;x5*;@-CBbzWf>%F!Zr&{wYdoQ%L(+b+gdZ5vX8CG=XH7M=7+HF=
zz~fZ&PO(+R=rjPWf3{}qw?Rh;wC%%`3x(?M^3N2SgjLB`Fb=7mJ#uk_v+hs#3hdU7
z1!bxItBKsx{Oiw^P8h3}M4D*4%ZyBh14F+U?FNR1maGyIuxf{fD43X-vO`P<WE7V?
zj#q4YBXD8Zc1d?rj-{xjvLY^|VoMV2Mjf6Xup$VBg{k4p#z@jj&vVRcS07?D?ce*i
z??5aM3y9LCXrFAPwIVaQ+6TA&`o2)g8wOgtoFr34BVRjbIW>v9`Z`fwDyW$0&T?X1
zBY1U7?{??RVtv$M6wm91_uFXr=N7#2Gs4d12jA~VNRWd3u&@vWpP+vJUoQv}+k)fh
zY_^X)$|cnHK0Ash5?7>!T~F`V-kfeUc5?#Nk7QBAi*J5fAUN#YaBTKPBJ@WQ|5h92
zv*wj|lk2kx8XiI+3kVND?!3=Sc(zXopYlK61N*U87!qjBl|S#cJOqV;>fPiL&dY5q
z@2X6Zs8pnNt*-{-tewx+Nm`z71bX5~i5kbeeu@HvAdwjaPq?mIcuzhlo<8~`I^Pa-
z_clw!amFxaUKA2~SuHOuH)|Aw$wKhus`d9%Pq{pd)qdWejH52Ooge{26@|~TdEpB!
zy|>&RN)~0EuhyY=2M&I5tD|5?U0S@$pM7Lo^pH&(4=*h(q`=z_m0KVy3rb4jTJDs=
z4&XzAGo8$4RCQ>$<_|?rG8q%z3_y+m1c7xKo#Es6#3yv0+x&}12glTYq@~73ou+fh
zo?`Yr?U+xk)UKPb;vd=IT0EX%WceJDTMhDFE76bM<L~&~nkiEn%za;Z4vK*VKcn-i
zb9_K`z6GN$NH2x;(&A4k{Ctm!J+IUa<F&Tze1UzWD}%^<NVzSzFIhh<hMf$3E<3uC
zKJ)7mY#4|_@bOC4ECg2H5<c=rre3P{rqdyxG4GrGw-|$!=S>)GmGMtUon*YFhW2T-
zR!sCOFedHpD7JP8Vm>Xc&rkTt+B$24v-rls=u+sS2?o$Z$B#_ynOzyE;Cy8mM{^m(
z?iMfhi_xp6Va|3_-REJOyQ<P^Jzk@;uIMC4=kqIEUe7b<zQJEJ2qoB4RlA}`ldNBE
zy`=cz!9?TNqQA58aGgd|bk{b-CON{S`F3t~1`v-L4%olFvj#Q&5Slj#5J+KuqM^o4
z74SKev*$VG&6bXU8YdKMe-s-%iR>!YLWx*(-=2B@!&2-QEEt&M6+h!9FuNYV8$1+x
z;=oueM>c?gMlZlw#A?-B06+VS%}ta!U%kHxHx)Ku|AE3G@qou35^FL?v?W=6_z*FT
z9j6TBk^Mc|wl9t<$;Ff3ayGLa>8Xc2UM`LFeP(ZYig&tfC?&b}@A%9L^J9U7rAkB@
z3H~%9O$-(}sB?k`!H7=O|8R8#S8EB{*89CXdkhxCmT$Jb@ZJQI1floLMf~uvoMJW|
zQRH^L>p*40<C03@rZ7_?1(Oqp%xtw)D9!!er)SKm6xtW9zO>+L<@I<%k(#mSros-M
z^tJQMlS%m)`jwi<3@s{NgARV6tWg~1ca;67<waJwU!Q!^U5iJEtB%H<kZ5)5tya2E
zzQE38stZ+_&rflWHU{E29c`55>|3Y=3JG9e)mLVIS#w{3^R_IdX7Uix>jYbVV6;sR
zcK{%m<cxiEV7x4r9boUnQ?6=KPJc8Oy+YBv4gqa3*`1s)yu;?j_?VwAb)Z&3@2cjt
zIT|N6dUop25uKpc+CNSxPGIME0iZ<SE6(SfR6VsWTg9b5+N}PP7)v2h5-rxUnBaF=
zKpKu`@_K9hRLxHVCuF#YDTha|N~M-bXlf;mH8ad)N+`M6*B8ye^XBp~>H^0T{*19^
zBW_ohCcgFZ1bwB!qoO|8ZFHrx&_mUN7M_-=2yNthh2_9%H;yXWu>t3Es{!cco<Wcc
z$kGFvPK!_^C||Mfyo#p%;rbYKdbR9^0&~#YRZv-n%`uHAHZz13v(u&W1t&N}my>HU
zEjTDhLR=v@L-16NVRQ>Okf7D$-tPo$`NNOQuXRl>=NL{YM+8L6A?$m@4er@}g+S*B
z0YqT=I?hkEnaj;)q?7j$4O$Y^#{reKX+`_?{8=63ab)iUPoy&`9aGcFkDxw=gH(ox
zceEg&D~XjS+tum$96BkeR~)bosJ(Va;JIBdAq+L+1QWRN#!W>%1!U;0(FQA(xG`x`
zYcU3J!iD6_Yh6kQeO$Ac9?KjP5J!A&-wL_LLkB#|zwz0&KjyPrYnb<F5bcg6j|36*
z37=mdntwydfXVZ?r15&5VuAxNG8g!Um?|bF*<>Ija>*i=oA!FT=N&+BFy;wuEGQ2h
z^@D>Lk+a`^ZRc*(`X&}b``~f6v&%H3Q-!VD^2o1ncc7Z*#?K!o!-cRq7Fa2cM8>+n
zS|nq&h$lG9b&Y2L&SWu*dT;hQ-Qo?Yf;s=OkX|jB&#jl(oXxTR0hc@60rjXi+Q=q&
zqDt1t)};UB82hQd#>waQ)%<tNP-n9EYXkIzLuiOBJ<qEu8}ew-N^s)JC`NnJwfmQX
z|ERYFKh+_P5sF}tW6)@QhdNuUI9}CvC*e_Q)|ehEQ)Sb|4Z;|jwI>hc6HHhN0yQ?Q
zaT?ipiDDQ2v@y(*+7~t6zLu*x*hvWPizRrE5~ZHvHK5Iiklgr%rsEffL7?E3cr-m8
zZ_9JQ;x+#IL^W3c9u1tU<5y#Xsq0Zk&uPxqA2)Fh4keuSy#VYSGK(2nG==g<V4_5K
z!g*YD#dbDB=a3)oip{LgtvGV0!pvS~Vd3I7U7Z-hQaB!8rwJp>a1_mJEPiEDo@ghU
ze#U1c09KKE#$xV^oigSGuTF!z%reYK+8j(vt+R5KUQ2)nEpY(OpmFts%kQE#n3p@c
z##Ctn61dpoi{{1WFNhTRH8B!)R8;%z;zpv|@vcjO{Bzs(X^X-Jso`{kOaKxAWDv$c
zcvm3GT30_)ox?TlavV{I%`ziAjTyhiEP4EPRHMtGVp4~@j!K3G4>!RuG-espdA+SM
zlL?K>=>+tw)zatdP+&~B!R`arW~}uDbD=2YE~pG+sP<#y+ul-MgzT)_<D~b2J}ytG
z@QOYzVIf1YW$~Pgp?fpJWq2vmFL!d6X?rZPCEF6c5v{-6Vc9lV1UN%&)Is)Z7nlv-
zh^3-LFUK-%c;t|kLN#hsb&+n*!R_QhH)}~<)8=ebFt=s9sPb*RWma#BW-Yrijf&a}
zDD44YYPd)ClCZ0iB-i_`%>BV4q;k@4JL^LBN!6OeM=C`4*l~ka+9DonHQ24t+s7@!
z;}#V3Ifm-Wy=3hVZnI_VZs%CEAScm|xrhiN8OSfvM{70a%^9l4S~fqePQrCPKl7<5
zk%k2V%_W4kP=n%~+9pS9Tfi956at0=l&-G8BDrr@BTUgFF>o#uZgr0uwPgTaOF)o^
zYJMM3TOqYE@ffF8e@qEyB;mK4GPrMsQ3hP}GU(%`C?zrHFSB}UjpGWbzL#3bM|^%5
zGnM;Ii6;4j$Bpkk6oD%Po>Uu#{L$K*e6G(yuD#9du6K|mu#j)faER0+e*%adPmeIP
zpt|?661}D!2E8GE76}sytI_@^mqXn}&KH}|VG1x1agb<_ALBlPCvzpei33sM7tduh
z!2`@|k`y6FJnlgzbSbB79{9F-!mcO|I7GLhmtGGyIM?`m-IgfpqUixvNBMpHm!XK!
zEz7fFa%n)h7^eNw@iYUOOfnKh)IFU@v<?1`i7F=_m*zCgvX##WF!oe})3)96P4c|W
zeGhx!rvym#)YY{plTAfD7*i$E+B#l)5gpGoMzO9yTpV?#+>8JX)ulQQL|U{16S48i
zCY`!(vDfm=v>^DjNryJVeL8!Y+^kVgTgjpioK*$qlE4(cH6mKAdVzDHtgqhOde?jA
zwMT1FMUB3nlD)*1Gu(#Z&CXxfr=53N44_FMr<GRx`rL#vv~Q?YX~ZU*+zd6sKVB)M
z#DfDvL7D1>W-^$(^6)AT^X^LP+v6JQGhy7}b-qdqdl34?O-laaI)ZQSsBXTUb;_2H
z($sR(mhchwF~u|LuTMG_)qD^0tQh<Idl=BJzz*;$3`9jrixY-uKU#m~E7f9K9z;>v
zHYBx$3dib1dsVo&VeVg+@fj_-Tj0&?@lw|QUA=AZC_exz)peb0I}9Ai{n}%Sx(kT6
z?H~fr<oM`RhMc^^y~F#<)Vx{v(lU3N_i60#)+=6$gttIxM$xCzp<Sg+<xY(iyx5jw
z?sSAMpjy9;R^8y-8crwThiB=8(`@Xr|L`H;)I_IRcchm$Q?L)+ae4`c(K_woq3(st
zldF6xgBxKkd$3#IDLB7qzQJ|8@X!<6eY&{B4CNHJGZ`)Rxx<^h_Fu7bmlQBd;|jiQ
z=^a+Ho~?Utd=`?LcH=hmIH*dT{qCJQQ}*TA%8npt7;$Ii?qSQko4|94-QF_q%-)*W
zil|QJUW|Se;e3>Wh6pBXd&JaL=R^W{1Jh(gr!A*wHiBM&8^C@H{fIX)-_<?amSBhZ
zElIJgCD#JW(Xl_mzb1;%g)!;UDEB|>1%6nlcivK}r5UD0VTBdbgWHpHHfAit3)z&_
z*b1?iW$_HAAt)2~RU$O;Y0Oo5d7hWm%zlo^J!6m)oBr1(yNNV)-!3uk9IXU$b8V;{
zZH9AG*lnKR%v32ueQs?vsNoB(Jz-9d0qH|;x?llkCH`HeD2}{RlNX;GW4sciCmf88
zj-x`8Z6kdAgB%du_7xAr@pJ|@lJh6ub{A;soDW&yChN;2X1_=4is_97RLoTwaZ$$7
zgfbAlac$J6iMO7uLYT;tU9;5Ig!l3v4Vj6%I-W*%kRU4@yqJflcUnV1qf$hgBnz9V
zv}{>v+W5KfKJf<=$51LOo{R04{H2=MqDk8~U=%+-!q$M^#R&xX^0h&u27Oxc1y%Uh
zcQq0}IBzP=Va{1Ex`4Frc$ExUIo@@9XRi(%81s>3m|LZPzs1%iw1<Xk70Z-(q1wvt
zsw8oj^z|VNIUKmt?`^1GP9<gMh?JA=Dt7`5j#L77K?Ji7bDjH5NJ+0%p~%+ZB%#6q
zIlEJERmyd;!cXQ54n?vyvFkE+*Dd7a)Mge|eTL!0ii`gBHeMx0VFdg)d8K^aIc{{P
zKZb-tNj!(hzmfmK0C_$9$Z4b_u$-79PyKO$J5H$AQMmC{kaK#^mx)jrC93r61EmtH
zPpFvH`f}cAPcEc8Cp|9M#pFk|UW;-sp5*G6?2)ijirv=@E{BZg2hA`D8>75GhIa$i
zhK~03%yd!-EU~F|nR^A3Gpwm^ZIi47^F|YXMl?k#(DUideXy`u%2-&p%uD|)A}7v%
zw$Y2oQuZom=El57n1$x~=XYJ$i^NJyw^0xof!oL85AvOZ%5orQze|7XPZo7!AI6L8
z8rogS;_+L-P%4M5;N4240zJ-)5?xs2PIXa4+Br{%^IF}{nKB!)!huK#Obsz&HPLvG
zYc-nzUUxHg_64b`BJvf#(xl2<q2<edj#@Qr?*?aV)s?`?te3owN?ZpMVOFIyz1J5f
zZZL5d>I%UguY)(^%zq26u1j$miEUfn;kWjnr%s;DbZH(UZ`*beMQ$lYRVyP<pdZbg
z8&}$<Qq>LfDOr;r2sy?MRGzh5_Pxem9y)g>WPXg#SE)b?M6fHkMKz&o-!Q?0P;9W3
zF_W4-wbXRg4lC6aMD$G)AF`kZK!=2df(mOqZ}jx92i`B9h6<neL^8S<0AV|Yw>K^=
za`$(k!r%65k9u~4XG4eccbC+e(yglDB){#N>eDB$;k0w(#~vk1NE@u_q$Fy7+>K3v
zu{r6&LNETJ)#ft`zBE&_r#<9xM*)zU1+Jt`BM40iQKIpFtI=^ln^#$D#1a0afgb-@
z%wV@BDL1PRbw{umQlsC5fhXVA6<trIr=fyt*O%c9ogYEu+nevHJx$x<aSaiyVx3_=
zb0+5Wp<$FWn!=2Uyv^C7-E@Jhy$K<{A8>Ciab{WZHNpipPJVD27vo<%+S1ll5Nw#N
zFT<#A;f<u>f-qWCuJCweWk1EHZHwDm0x%Y0+I$T(9@<93@rjVE>-yL2sIJHz6HZ2>
zVZ*0>Be#qVX?03t;k4tKqJq8POBx^Is+(rUw?!Ns_Xk@z4Gpd`Vg>Yz@<B3&>3%xB
z4R*oDB<_zkW8oD)^FXBN<dG|!-`mQrxeb%r9qxFc4`owoQ6A=TR%+o>6-};&e2b><
zGn%<vu|951dypvy5r0)^<@8t~TIYlYB3~^lsMxYuoIy3+-FKW$o|o8Jxis>FoYlqQ
zQ)t45)X5R%7Z<)}Dz&WdcR8h{XA5>)jKx4K+L|m-$BW(@CLu)yrY*-TMXE9~n%1hS
zj*c!u>X<5PKc=0mhISNo8}qoA_YdrqFI{go)h%)kPfe!PA{Em$CL5HI$W-2K9O!W!
z;<vjOT`k+}QA0<uS^lKO)hIB$mZj&jT4yd+s~mr@7@|6{voP{M+W}Pu+ZK$yav94J
zI~J&OJdaJy(V6GSl=7eXx=>!)?e0SKZ(>;gExH9EmVVrZJXd3mXr^5DQ^3PbgPGgo
z${od!*4LUvV&yG(zT9MBX=@WQ4O4jlU3GEI<|mK8tbFWJNMCY0@zgBWNn(h*6~{8!
zd6}45G9fM&Lk^K$JrLg7rvw0@cM86Ad_aC|tgeY4wVtC682)Y$g(Zj0=rplqjdGFF
z><sPH|1JdgBugypXK}&=RTS6W04oqgJpSb}MZ+FVBbsYa*3Y~T$u9(3UulxjV5;1D
zy$i2e;B}8MH=jK0Eg3P`Y=eKv03J+{3C+MIAR=JBlR#p_W6YH*xC*`>bvTuMxWCzj
zH#p<x$nPaqaLIjV8qpn;WaVECRhxnrX}rc_5MiUsiH-U;-=fPE=gEUcx#CT-ZoS??
zUwgiM52K+ID%?ulx7{FY{IBy>8MR3#fagr*NhY&g+-=_X{fNS~iYQBn@q!7Xh1Y6%
z%lv>KG{ckZNByR_n5cF|@w*P^gS|(8IpPMoA4#8|IV&DdcC#3Levih;Xs7i!x-8UM
z?wc2*c#z`pc}UDI%3ymv`phtU7Q!d3rsSpnGNDUGrf_#AmP$nOJp&U8*nHI{5pU-8
zxcZ2|f<0!k<uxF)L}o|a3Jbp6?sp!A-AzjvP2<a|5~48*sJC8p70$hnp#^Fsbt+tW
zuwRFTMEN`J&9mypm1qRpL>Z^s2NK3JJN^{GHDQ#Y-jY{Zo(ww%l``@{O*vNUrOK4V
zmFURjeyu3CzJD_Tqo&jP+CRJ-T(UTxuR}wvSv@lA<HGxk13uOOoP0~JMbBp}!;sLe
z@lo$p>)RmUPhC3My%stIm^#gNLftxpC%fmW4x3ows12UZJQEU6-j3Pz+|H*hiLK>w
zENFen?@(3ng%*fy<m=^KS#+PdYz`STqS}8~!}7X3?5It&k^;CFz^DP$YdX-l&2J)E
zEiZ%AG$t9r;*VNMN9I))1FY0L+REA{_)9J6YI(kOb>+?Vr8b$0$3}Jgp?V;-+15#K
zig?5sgmdhjtCagOlQH^B$9W(1zEqY<oopRCot7Y#!^Q%8Vc&!E45fROzF)kdK?drL
z`oVV){pgx()*-To8i}*hJ}#-qtQKmvLDp{^lfp$Qya7CmQY(JCl$7bv@O`vgVECio
z1(E;ghfS0NzuRCHz4pkhCRir2a1mt5I06ya8(;o@JgL*G4U;L_*tZ@yXh5IWi6njN
zmst|&`ES??y8=0s%hHv(A^zrwy80UtntR4tt)EpciZ^UZ@aj%p@faT~ESBo9zlMvN
z<bt=K{n+FOPwW>inmN>ribJq8itnaDk5A@G?EZB2TEv#vA9p##E=MXPdDGxn39I6O
zob_Y9_mU~9fzIf_o|wpKsnm4KCF!__HcsY!I%)j2VHHNblbM1XN4rMwmb(0C>3QQ7
zK2z4XgNtAFO=|bWLe5H);3wIi!tLA}8Z9FVZ-qjAzG9$<Cspw0JV{1Tava!w5fyfI
z-iG-aX0hF?cPKvEA?)Z4YB|o&)U6Q~=nBNb?cXH`BieYJz+h{Wy?7LpQ!tnxx>!w#
zn?O7Laa}K^+JE>&oB8Xjr`~Lhu|7*Mtw}^*q}R>naD)U8zt<<Hy~*veH4=_iQmN!u
z%L~jZ?M%FfMJ=R6iZubhyWt`?JPElonI(ZBT}IpQQ9T07{*J3X_8<3rAULpGN@Iv}
zl2bt^?sQq@Ey3MCf{W!SBqlksvGxTA0n_kWnJ|WILF-krSb4rVZ`Zqe7O#){L)oa-
zy8|-_x9}q?nd2TfD$}hT5cOFa$K*&LxErJG{JfLr842BQ%Bw=T3M)Sm$~ajlfRg)x
zP_O!T9Pgw33IqAv*C-s7R4%)jxo-6>_%?3ca9{xol$hT{w*n~jzYnT3lSDCmEUFFL
zFVX<l&`~z6(V~P?HPoErlWL7LIID_e=W@S(wP(g^`Nu}Ii_bBpZ{Pb2XM%N^R`_PB
zrSae2rb(-1JqJ`G2rSJW9<LE&*3a;a7*|*Q^_w{pxRgU?r{k=3KmQuRw{K;4cq)X0
z8i--xIpT9ITw1GC5L;qG=}5~0b)@YQkkKqJax$MI)ta5UeH_SM+dB$N-jq#A=Cola
z8X&Q?zmdKEFp{p2S19I(*&GJgN3=-rs#a~v4QxH(sKH122{A<v+Iu@(BDfLmDHY{O
zOf=t4_j%+>&>)|7-@%yfG`1R^yXuL3hserPAUjn3@VYd_-^>HFR!oG?SHFe?edM0$
zW-o~{>|{F6Zv<Co_l&G!wWN<QWGbHp3H{Mebfg$dIjW}gT*5AP+~a@)PQI{<Q+WWJ
zO$KBmmQVDM&6)SukSIKNcQ*-;vA|29;|?9iG2cOHp2U}DdG^Ld9R9@8a`xg@L-e{K
zeD!!KIlAAs^_o_(_sTL)Y}HNsc!UP|+{6)+Y+#1L<4LkQH1pQ3DD2kBK8@S`3{rce
zY{xFj$475Z?ZE4s2kM-U%i+6D1bP4*l)r{L;af~gFRR6h=<E#H^!Rj<8yQmz*ph35
zI!9ebr1UIwZ#LsN?I*kII$CV$=BtuteGVQklS<bo)-r0;|E8Az&5M&V*eT1YM5wk}
z`fzE^!~Wt)wIg|zG3?7E1&r~VxsAG!x<2qrSb>LEBhMBKt<Rhhy;;oTd@|p9#kDEE
zHv;@?ETK2TIix?OYsX@}%P=!VlZ`&S<V-e%WFvK(xan9VA&o<`LC&|=F7KgQI@G1I
zLhC?{fnxATvo6AUbRkd+-ez!I?a`Yk?`tw|=|IhJ4;MGa%`e8DG<G}ho}u-%%SE=$
zp64Hov}D;8Gp?{=*z~k_AL>IVx9OtlQ*f{*yE~*9AJ<MxP@)wY;EZBtM64^_7DXxD
zDpN<jp^I@>88k=2?t^*`66C^$cE_?2;E^0;^g3%i^z?bdeThkxK4I*fv+D?87Zq5t
zsBBckUMuZ?4LRFXk9uqI#LXceJd)-0lAbyUj_JhDcxtQPaEnnHnHvFe()7mb_MZ#o
z5wiTQm}t+K52N%_Rmc3~t0`kLE0m*L2u7dV48dMB%IZn;A1Oa3+?1QDLoq%d%w<AE
zM&b#^VZp1mCukMhO{#V4WAg<|%@XWuJ>{bI5xV2yuwc*K=2&{PP{mRfkI*HhbcZ0n
zZsufFO5$_6<y0xEsDCDStE~xCd=M*ftHvBQneY2Ov68;aKQF+-(!EE-3N2Z5a<!#m
zn_-Z>7ojiXlk0KwGyb5+$0VvUGg+)^<aGJvi)4+*2IYP?#&PwhW`}dqY;8;ZiV)By
zor;dB!Yp-4ct|$HN$HId;I{IW%OL^)v)I&UX}qS)LFlw!SD=E=gX4-sukS|VxjZ1}
zmJ&m&X;ZoNN|nlmMOa3@9@3AZ`-S3#1H)>0LIo045mp1!DdQ3GS($4>%)X<&H8i+g
z8T?SOiL`7kq<>h>*=K=?AJ%J~wQUh48yNAm{UJ&fADK%-*n-OeMm0r;(AtlfJc+J)
z!nBm+5S$KuKMbW_RBtP9NlcUiZqBnVf84~)siihg^Rtf+ToVPcgo+k-hWgW*;nKuE
zC)vXT`g=WL5GI*epm`A(NnY%py0kr+VYYVBmo|<zHFHlF<$1AMe}8kMbYi{Y{7Mcg
zS1;A!t@jaqS|XGYfW2~wGMJ{lNaYQss<$Ry<KF#QJ4|PHI;%4A>HfGiVtM6)sEa)f
z^Nu)vHq5OFe-Lx1CIGy4>2`@zsHl44f7`cG5+HeWt`*{QD`DubgeIrJ0=ltY&Mo=C
zYUYzz{cYs4o#eaJ_TJx~QACP4(%#YujO3?@HrfdokSoZmNeZbo=P^h|{2Lwl0u;0l
ziWYCd_#CZb(-7v-n)e4s2$IpIi`+JcZ#iX|M5-)5sK7hEH7FEGj@@X>fmwykenXr)
z+nv&NBGO2!=(9}nSV%~<+*JRy-F@?9tvp|jBs+tg41^(jsu1J@#qI$ce5Kwrn)B@Q
zdd_B#mT|tj`^*z>*WA8Q0FcV}xxRheB_by^;8R=A{N$Fli`Np36FA%RwyE2fkc~e-
zw?DLR<W;zA6WsBhd|TQ2I?Hsyzafk0U0oDi>-;r^+X+i;)#5?_`RWnoT?)NeijOxM
zGCo<&E>kDd!@^8;l5Bjf!Rs7VIGK*Q5iktv6W)B)#w!OXVId%(w{uVNdtoKrhAEoJ
zI)_n2zA!-S``|qyK7;3#0f~K?6yoIVZbo9T(><pr*ua*<QFMMCx(~Xcym0i{YQ^LG
z;zb;*4BQuDZ)0)t7WARYSN0vnBzwQ^?K5Rb_k>+UQV6rinIN1()ZjI5+pX_>VkEN{
zimjBt<b@&9YN!oN4)>cTq`b3NuW_Ur(XJ1yBi6wmYYt77Y5%B65x+rd&>J9%xIi;B
z3)$E+s`Fdptpuuqyr{LLW}gT=*kvJAc)+1ZxvI`_c~@-jyMoeZfBs&uLxdmUu>*(u
zI`vYkr;sBG!#RWB&rIlZYDPJ8c9l3b{F6w+GLF@XciQ{6;$!C2HBil-JeW%>n0xOY
z%x^i-m(mxv+dew__Qi70I3$zQu=8ncV+0PAE!7ESZpM>qv}I+T<8Y8%;4-M!o8oXG
zh0MmZ@YbiyT7wL`vRkKE1_<{?(9|+;=^Q_@`z^zS6-h&7-8-qaGdG1{w4PU;E^J-*
z%BJ;l_Ihv!rs5{b_l6a0NR%0(4W(tHr4&&plX3m9(^II*#~UA56t{1V6P{(r6zTbu
ziaUM!5-oKkjDOxRN$@tzEBYR~hc1==)pN35r(y-!gmzgTw`yoajT)$qp<pMhbzx|1
z4Nt2N7}>(#kuAl!V`?(naD-E=^J|)C$`lxu1mAJ%?{o4AK;W6@qsFu%`YY-AF(kdx
zm7}%SR;E;nZZSVl*8EF3H+usZ^i-#Ak7irH!k0Khx@R0Od45&$R9UGFy33qhuY`yc
zwYL){Z)GbS4ipv)UuZl3I#NF<1SLR1*}I5=x|iM#t8<@i(&to64*KjDDbRz86?ou$
zBoBAx4SK`8AN;(LADi~0Iv;@H<njf^LR)YQac@-ZImK4mPNVY1TcoV3ONPzke3U3X
zv-O$?bEpbl&D=7P5#e)W?sUjvruEI|*`H>L3ylaU{@;}#|6N0WT7A1orKl2!rf$)n
zDP=hR*w2k;zc)rJoEcKJg0AUvO9yIMn@NFDt2Bbi6blTJE#ZbbuIVb{M&LDCVMIw*
zirwsCi3sSrJAn0C+k0QE)|zq`8<lRzWIK>k+^5BEez(q|8B<;ci{)kmYQ>u@uP)O_
z9^6<Zf!|i$kmT;^P<OOm_6UGrrp3SBu4}?rCzVB#JCwTksvsf1R~oX->*1J1eU=e}
zjAfE<#CG2OMb9Brx_g1SzzFYorne7kd)}g`LCBPG8eXnLPPI6l0ds{E2W@LuA6pX`
zff}})(rWu!YL=7It{OXLpztzbpOf+H#_8%pjAYg)EK3`Glc%+)Z66kbLyAFWI|I+b
zuOaa%;~Y`;+>Ci=Qu;QR4A{pEv4Ut9tN7y&)i`VlWfC}D!8n-rP8Rg61-StJsNaa!
zl~8O5R=I7zZfY!!$&D!eb7~L4oA4xG_b(`Ft$sf=QYtkn+n3-O=`9p%6K!|5Pw7W;
zpJsnM4EzikeqC*f1rO%HfiNKkn@6&sAB(e9wA+L;-ZKWBJ}%Vof+G6sN-1_<ITve(
zx1Nn4VDZ6&TD*kPWNC&svXU8GCa+%GbK}j1Mg+@ELb&jj)OH)}46w*-SZL1B2%UY2
zozE-TKX-dfs2Z8FDk^>A#&Tdu)E9ponp;obb~sqU1R(Fl&U@aEl|=cI3e&N*l<L$X
z6ZOhuxQXZtCFoCN>}_4+aSKl`<l1ZoX8C7I7p%KR46C+UsKSHqALo4`<yOcIch<Y%
z^cQXvz%{j2pwK5FQ9`L)=?|>=n1$1(>p6d=eETA%voGDmaw8kB@w$M4#-B+ew%|<^
zzQ;+}=~;0jk$P6^JuSR8X(C|yqM3tQU*mQERO^BaKc)JvFsDi+=AKq8Hu{vIK?bYo
zX%zv+HpNS>UB3ZHX15+QTEaM{)fZt#q%z{XVWG)gQN=I!fjTLhzPNGRk_UpZ+zz(^
zlpZQ=p%?sG>|f1!>w7VWl0VAI>2`X@+KdBU@yfTGH*bbOMOUGqeMR4)nBEEA7Uzwi
zb#08DdG9Cec%NI{b^2q}jKMq#1D}?qI;bkWRK)UEA{BKF4HLt8G|NBt+!j($^G4ET
z^7y77(BVypsOk@ZN8geYr}MRVCAr{FcceXE;dA?xHowVt>JGx_`kuOs#P>5`B&3&O
zvNiRU*b&-(gPNtYaU5K<apyKZWlwVzNj%7P9pMcfC+z*Zz;+*(eMOT#&ZUfKtj<JC
zv786I4%vOzht%uQj8VzDNcL}f8-#k-F0>l-x}>U<A(onw!{>*sopE@X`$NlxccnJ(
zk@$?!SUe5}4DAzJlw_>&6#TpHW38G6l!0P|CiC_t$B<f*@3XXHHBjfS9-!av@?8m(
z>C5mnIwxN5{LJ8K?(POjRmK)~YfF;#BCNkRPv~-62^?!S8!M{OY4!|`Py!cB@2OJB
zWwufqpQbx#9_aAduYa5_pm#)q*OdXKHKby^t8{MAxePL^ak?)Q38si75ky5H)ySit
zJoNji3V693h3;c>346ad&K7~(*0%;;N2@R~+Bc8+M1EfK*n{iSNilZZT==SGYKk-y
z9f}y%;RlP;1}Rk09D3~op@l2)Pujx;&weuTG7)F^<K@O8oBgTtb#GDJ8})$5XCbN{
zS_x_(-Vl)B@g&aNeh1Uj(fY$rHa>^&Xg((0c7EL$xurr!JYi<GRkgQs1f#y7GY6=u
z!AQf^^wDWeg>RNI_DuY(nB4SD1bSiT_F;hbO*LiQRkY%mnwXp&WgBu7m|QH(Re7+3
zx0d3SsIKZvJ4Vw=9aeDkB5UKvXbKg6Hlr3t=bm&t%OPBGjfW8{>=^^gQZDy(UCKpo
zn|oJWpgv;D?~vW&6#JtjCW8s<>Sg_j%>@pNj11yaWl2Nt%~ooj$~%bXQboNfces#s
z&E8+Bhvd#giJXP|PDlDj6PIQUUU9Kg5Lk=uRlLhiH>pT*oHC&lrw^3z+v$nz#GBg(
z0wo2g3`z^1&F+_W*=?>A_oQ>pb4}dfoC6BM`}@ZL8!oq{K!(FGGN^Y?eWlE=-Kvy=
z?d3(Y1J=e$O|^AB{6Z|><eBoctu6Cz52d0@frsf;PfPSXD>r1{ePq=zl1bvS%XIPJ
zQK<B^gNwE62xxy)=*}p1Wu?=suYqGP)Xrk$k*ifQC35g^LH|#6S3ohNcN@{Fw6T27
zM>9(Aqk6-8B--SD^yRwlhi)ozo~cA5_+Jbj*c*g$lN$7+q*e{(zrsTse`m{ybeu?n
z8KiWqq#hcKW(7W`OK;V5RW5KeQ`HYGl1OE;dG|(FxGlDH4txkP`Q5JwzA#mww`L`&
zV^e+LXwMwJ@jFFHE$O|+nJpC-wIi*Rpy^_1Shv%*gi|ie=b?<D9jN?VZ*$H2r12Z!
zfK<0dn1DqN-|*mr!g!t(RpmK1-6q2Zkb9wo@fx`r6tSKpe=;JfDbsD4xTB%&u~19q
z3F)~bR8qNbVSdvk!d0jlzGb6*)_565<Z|t87~_(-&^GGD-NIyA*H7Hb4$3p_#dRCA
zK7k#ePLjZy(3ov?>3v&`!>nouO@^4j%su09;Rb>Q*IPX^Od`=JeyP+?#^YiN6WL>R
z09$RuXJZUGnNR+D7mKoA7#(r{Hg`nRG~#r*%yR!+yF}0ijY`iHZD`@g(-*C{AmNLi
zcc7-%+`QQH{;x33!!%@|HgBuU5=Rcn*^lOYCAS6*rpljYf-PHsk{9A=0-yJF#qc;C
zyQd<LE@u+-_>sI!Gu#($DW?fcS{CY!L%rW~?-B7bBo9T+F54enGmWby&F)x?=60kz
z?u*cdI&$Q~WxvYT#wONWj+QL~F-j{o-IXO{hKHv^9HihX1}%-6eV@r~S|5?idb=(D
zOIMj@w4ucXGQ8PjenGF1rxU6HpfttJNqRnMxGV0MkGk-}@-vjo0JyCHNA4G)r!;W@
zE_6zsRc~sgEXHM(-qS#HTt1I;Xg8y0rHO&k7BSzqC(mLodl?!KTRm1}SE#7$Wn+KE
zQ*1Y90cv+wjZJ6_gkg({U9?b>0=;g<w&If8>4*WYCn^f`xqin_1b6>i=V+@QT3`RH
z0v2`0+DV_*?-)as!Kp&;ClTYsk%<Vc@sy@gZSZv_!%NKBWH9^7y_+dmnkDq|q0e_G
zv)dbDYKVyE9xIK17(1VwRG39VQ`Pq`(`(L9_a#wroo$Yo^0IEQ8fn1Z2!F?yJgZ5{
z`?%CNTO*b=5o?vgTVgFm&*$3BP|RbmU6M%WK`1Aa+;XWkY_36z(=b)eM)xd$TtcnU
zD$KS9V{hj!p&)dv+oF2k6LZH({c}M?#+y`w9@OOSXkVB*y5wg~>N+~_&$E3@AeIQF
zHdhqng6_CTH@%D|G5y;B!9L&YR*0GXEx1JF6#OImZPxw66mm0-*0u<}HSyME6~??x
zC{VTbiP{LELfP?vFK8J?ZmiQ8?cL#Yd*%R;K5Q0Rzrmb>I0Y}0NydRQ71M2UlGUXt
zCY=|!kU8nL*B5K*N<DvVm>v;}%Z!v#M3D)ALrjsES7(Z|PU>|Urczrqt+{yCMf4!t
zYiDxtr&bP&Q0ucs(?7e~4=Qx@p;Zl|5hIzX-bVLFO*nnvk@5evuG#*ud>_8!UaTTk
zq77$H?1W(Z)><;+V8#d(5%q1!4oVcc03#NA)K_QJ*N0g2;a#NOsf9Gk=x?Rt?+m06
zUqG_M6g+xb+S<*(ks4>m0ww1PxiVfnY_x}rW$X~DJs6kN-hxNPc@pK6&k2(`S5@yf
zT-$9l;KB0}nd;4jV4)l7f=|ce*45gZRZm-sh;m1ZGd?cQ$?)er?@$kdzAf%Tl&&;o
zEpf148vH!b?;~i;5Lu9L46F0J$HU|G5S@Rgvq7`$1|)XKom{L&cDOUjs5Yu|*$TKg
zLlMAD(l84rRSZOa7_Hl*F}}Z1Kd*LU7_|?)C)RPyL>T;-|H$N!rPDhn!Q%Iut|=Wf
zsnyg-S8b_?gEcW%;M&r>T`)kf3W{V&>et??A@jHQywcxxQ4PYV9l2PW^ytOFXoUmU
zhXO_G@?z&S|BJP^46AEd)`b%SAwUAbgS$g;*Wkh3HF$7$CJ;zMaCZ%EGq}5ZaF^h2
z6K4W<khS;O-#Pc}z1F(V_iyryL67e0>Z<Cp7ZGtl@||JsF!r#G!&m%8)@)h7>d?Ie
z&W*|QE$lDuYg=?c0&yA-Xu0X`tGexS0rB^fPumTAR&QdP47URkX?+7+KeJlT<Vb#F
za}pd7y=2k;1iP7vY>F=4=C!oI-AmKM^7<PJ72KV;`FwfMb*~p)0ui?hni_byc&cI~
zdcLtajm!BWC5eqkcQCExO~t)d{-#72211>Ku>>;WHmzDVG51P>z=+3R&?>%U$8k6P
z!Ex+6lyXE%*2;E?d3HFvA`kwumT^}zW<@=b-)6RyNWGTEkJiKPt`b?(6va;iCN7uK
zSk(54w}AUkv8$WhY`p}^_U4XImC$TlZ35jg=nNyibg?^hUXHedAzT=nIU!P$vp35K
z+rikZZJUOL(+K<I<Hq}1ouAp*qedB1n|xZV27|rB)|Rf9?dunM(K^d@+eU1-TLo}}
z5B6#cRBS$+rb4b=GPcS9L)|s^tRP5=Z>l&`KWlVOln&cI60Cn0zE&9086$g7qy>I$
zf;F5<@eC)cOVx;UYVYR4TL`iEav#WP^oAz`a(FeWoJ#X_Yd!8LcR8&;B`{~L_3BB;
z4}`LMktLYvs-&Z$(+H6gCVD1TzS80}8uTrh->_#VWR#c33DM@rFEE89tlhzfGyC+W
zV?9Oku;Qml#Y=6Pc~m3T1h83`W&$PxwJv*vCd9p>n`X1r-<?Q<y?>rVPjMr*#%pz_
z<kbpHJ~W!#IgrcmqE37$HsddWg8*T2Qe}yen`8hbJqlv>I{2Q?ohkvS^ue*zgZd0q
zFB%)LfAgm#HT<=(!?u((r^YT1i7V9zJyA9-xDG<65Jl@xvODOu7NuxX;H#I{sq-LM
zlXxXoH`c{pGQbM0(EV<Z7I<||(*gJrJ)QS_#n1Ovu7l&L)pNqodWmN0P~T=FJVr*5
zuggHDeOIR&6>}gPpmr%CLD2G)u}|x+2o5qnmD)K854K8+MxQ2Bq_kBta*uhzcHwOi
z`9;q9(t^q<v3c=(JCN>_pfABQ;s?2O*An<%^h|0)E->~MZ15(Ls^=RPDwS!K+Bv=l
z<0o_+O1uH0bwm$)L-+s`Jlr7(+s>dpd3yX!R?bA5DL>q4q{rk+pBEd4_p_&iZ^Gx&
z$BC$$-e)Qye?0g{kwNoEnhZFIIK12PzR<kd(9cX~R@F&PfA`X>&ps)kiCmbs$b?-e
zQfo%^P`{(4x+aHh*5P;yk`+7{%-hmV$aK2GlE5qRD(YX!s)NpetB+T9KFCO2wv7PQ
zT9jxnc3?}oL}%^#E|m&A8ad_YepHI}h4REIYeq4$?=9i*g2(5Y7&UTYSV-yNvO?_u
zX%o^52&-6pT3eR)+n`m^u4=_|2EsS~g$8;LGn;o){;muOoWpAt-|?DU(rehm_wM`A
zln6Gj+cs$VYkw$!rHeiz(lqQ3Yd41xPNWxHLVXEC1NMT@Is@?#aEJswcYxc8{`~4I
zpG>P)p2(@hqpQvy<}RwYtq)u`4H(>F>eQMVL%eQKHjX2{>|9N^J=GvocAgs->jErK
zs)Q{>*F*l!=I?oS;XF7#Z+wa=GJ5Ye$$6?>7%o31zw>Ukg@b$vOK;0fg-88-=xX%b
zMg4<pGe_xSJ&F<hw-Yz{^p=p=WEV|XLpKWgjdOrn=?YtD63UJ^vo+{qn-WUn-5`<f
z5fz)0^TIe~l*MM$K}U&>AXaQU=)TE@fQ?o7A}Q{4DcXn5T);?8MXguva%-%SY!vW3
z(PAIi-n3>&xE!ftvgw&(YcL$tZ+;5SH)6E>JYhbX@wxCKWej0hvmTi!zaj)l-?i*R
zr_dPriTxKIR{?Ja6sI<?KGJK2IvM6F@3j{8WS3Rgx(&R`={SSt%j2M{)5$ZunTA^>
zS%>1`=#Cifwwg=6wR_m<oso6gG1pEE%!JOK)~y+hGw*nUNq8q)v-{9BK<v+aPP+&<
z&;z}_S_s`959Hw!Hey<|yh^gt%42a*Fe`bhw>S+YO#lfm=b@V>A3E=UFp|+NsQIq%
z>1<^<{IxZ8wE+b`$FmGw0CZPcq);7dm#;qbRFl=?D8)#R<g5G}I7mwM4+WoaVl}YK
zVvYYbvhM9l?+JP#4l?CsVGN@-n#j$iQgB^|0YlLKwC$XDf!UE(u~MboyAV9)-c90A
zF|j{S54k5*$j^RuJ`L*Jtdj1-pbHek(^4QxVu?!Uua56#>(HXF@%au1(Q35T@kwH#
z0%zH0o*8>hRNGru^~POQjeLFo6`QJb$eznO!H8{}*`|Z*ZhObE*ma?(d!<O7`l(C7
z=IJMv)k6U%{4GXZb<MhS9_H^7ibmPM^;xU2bnixjNx#{cB!*5;fz!}Ox50!nv`nwv
zx3olMN}nNPYTipq_~!|$tP$a6td-36xjQO6mesr~2H<Q_WdAN2Bx&@sP9X;N43(y%
zRzH}-fTdLZ>)?-%cWfOj!<QB}rQ_ZdpF?q2pNH+w?iSQzO>Fh1!AWloomDPyb#VG$
ztF!s=M1|Ca7#%~@BjVOJ`DNZ%v8b|C_l;YvpI`5(S1^+zZ4&YO<ibLxoNr&Ii{ikn
zCbE<GSkK>hY1ce#E_&{hR&+z+ZK>lQ?AW^FSS_E&&}#X<jFdTCnA*EK6CfVRv)A^1
z{;~%sy-=+Cz#W1=Hd5O=Z^4i-{n=+pwc2^)hv}QK$IF1r0smKlXP*mOgEW<U$kJaK
zne91;90ABspMmhvul_2$>|~_Sb~s3;L_G5Ll;abdrMlo8h#9FwHGQ}0L?x)k5|FD6
zhDe{o6Tiyrj2oSo*ZmATH<7~Z=p60HI6^g~c3WNTd$xH;4V0S*_}m1Dfn-GvQ)Y)C
z?jIJ`aWtwOO8TeDdhAoX%3IwafH-I9v0<@f_IBjU*6tZH(H&GZv*8NdNtR1q-a`O#
zMQaY|DN8v*k9JL<JjEt7kGT%FBa0GWXu`7BLV{m)>=n^o&kuDq$ft)+PM)<DFhoS)
zAHYXE0r4Z8gd#&)fB;?Sq6l!)So#FOB{!7u?1a*s<`~;YulyXxJaK#uQlylL5Nd*y
z08qDG?_j8gQ#v-J)$LFBH8I<A<7EjsVRF7<kJ@gizPS3<I-}ZCcGJr4TrtN~j7<8u
zf+0-TdxbXFmM{2?B3Y}wG5^L3Yv2Z8G>$_*V~=VA$!<@W%JHf~QN0Cse^)1p;CJ?N
zDzFG2q*+bu+Mj%0+%2+&@{}}T*<qFAGd+*-5*3j9uVZL<1b`*YopEnm0txFQ!md~Y
zypdNL*e)SkA28Y=o>)B)J|kUiK)WRKn6Nl~)C;EqX(9yqUx&x=Snr3x^$*oZ&1O+6
z&X9|0i=Z@6Z5zffE*7a$%f9WSdCly<<EJ9{;&#e#32d#I{!@Kj;NF)oCOo|f=8%46
zEPSleewQ1oW<;m*Ier^&qbt>(s&(__dnT~@&FKN2SZ_-PyaH89ot-8Enxly<7<RH=
z&d%pN)Zm^7@l8UVTh)z>X-2QpB1v`y+7C~c+gxXU!<qW6*B3<GC1aS?R_5PKFQqj4
z>E_V}L3tSs0v(hE8E}?VuzFvVPtI|9-Ur!uR@-Kge)A?v*m8FMwfE4rwpA-R+7n;8
ztVn|exZK|R?6M&sbWyeO!J`0<7@WiOmQ0^2pwet0rm0Jd=_uW?%}Vp-h?e>Aut5<%
zWzS*g`T{|$Knt0VkB@|6?o+dyLB}WZ8|7V*^!CDzxxS;yn`;|;oPKW;Mv@|7q35zN
zK5IVm$u0gV>}gtD>A*bYQ)_hK@HF!p*{U}dD_t-7j;4^_4%9}wZ*-?_F21tF#OO_g
zcVgyIxpG<_-Fu^d2Uu_K&LU1KRDP%h-%R##Q=;V#>W1}B(C~(oDr5cJTb=YCV)Va0
zig5|!rRG);0@dtXctiT1PL1d_wx`~r*q=?n?Gis^`^P?im=zE;7DJF}gH~!nm~BUu
zVi<MN*2G_3ys`=A*<W=8pjr1bkSDz{8jnXF?%Oh&`4x)lB}}P<G1o)?EL|H)2lGn1
z^1ILMUIM!bJ_42O+FboREENv(DXhLI%I=HMqBAR?1swVyL@Iidz5|KH<AVtE@JDND
zD9^`JzDZ8L3{O1ydHX-o8ij&{-4%0m?Bxea%xdfFjE-k;R$gwWY9)yJ@Z8$pu+c=Y
zI(o!1@Y?LpxZOYlamhIAr?rvnop0|^2R$j6^eaD-z144#MusfDCK2Y+u#K*eMIq#r
zHt8-oT&a5gWvIEhVnZO;-kor-R!aOGiUpKIYW>BVh3`#y9yhg(o+gp!Ky`#_EYuxJ
z6}J_u$ru4vz;O<<HeuJOb)uk@Pye*5O83DWbQJ0caF!rw<GG2ji|8j@%-)<uau~ge
z#FtIOx_-lBHr@-*x@EraA29#?p86hX8~f4F0i6C*w^_?AKDTKyUk-n9Sa6p{Px(vd
zsl8H}a@Fl&1V42aIOiZzpmdp%`<&%xCE*Y+4^;E&t*==Ec{?I=X5BB2SAH37PkCk}
zu^XQK1m&RL34gZo8Zj_r#J<hiSlK)b^PcC-FUI(|IRbhxZJ6@EmM<-(R&3^JR#HH;
zEi!8%0Wt>>P30+~!7vy1XoC>%943U_7KLQ(X@)NZCS%BhXcKUdb7_-~jNGo{zB@Wn
zu@}-j87+!+BZz$V*9Lw-IPx;J;Y*luwI=-<=K%ba=%G^(b8zRyxTMp_@X6Lzje63s
zhsgBG>S8?B-j9kqF^6g@ZlppKjUYS}T_5c>zE22%YaUC*4kNfI8BdGjcQUD_&da5y
zlOltq`jS*nlnm@eu3C)pkuS63Jw+DRRIpysD}c~5XZjFbs7LyRfU=U#$c13i+D=rV
zLoqo9-8+;Nhbco570~Yn_s2OB+dPi(4i?kx9*f8=0u+W`Fb?6<AI>i)Tuu(9Rb#6}
zK9b6=&TQ_cx7-Phz70M}CG~pNZrFSvDgk&{@ax7YI~&tthvrAo=^f~oJ>gQ8>$1cn
zL!43w+ZX{Ux@^*_(KOE?b|}8(?%0)%u0?N~V(XN%b*<%PTa2zTP67zpu<mi};!b5L
znjVxCeqJ`JNL`gcTYCOR!3>1smVfpF$oq1YgiN8BkW~|ELK`H06m33H<L};5-8Fql
z7e9R#iZ2zkdS0#B*-P5Vc_f&r6XZ{=pY>YfY|%BlufWZqX6maEX5t{q8`Sndb(H;j
zf+JYS!V>G2x}+EZs(8HqLBeqR@aVG!lH$-at@^u_(_K6u5-_ouKRgv`Nn(@~vwK{s
zEbd<yljxfoa_ees^y_|@^fqWcZg4tQWQUYmm#sysht80O5eQdoT`wS;u~I8HKB2uI
zqy<35btwIA+f|dPCpFDO2qtv-@vp_1My5L@`n6gMo`jloc}S$xIXx>lh)M#SDg&R^
zD&_sJv7Ji76PqOov>+an5e&*&?0|W^l?X(nyQ>?jEWTn)a9ik3DVa^4uwolZtX`GI
zEc)}p+=i!>7M|}+yhK>*VFkB8MZ4>bP3fAbqG2$8Cxz12)vzb!>ZAsil*7N4mBViw
zo_8f;0%8+s0VmCwT}Sx7<1Ny7!MD%hpM)f_sKX7v(cE#C!X7~RqLjOgpG@;&g&6MH
z`cN9`tB-0*^P>+}_nX3`^KOF5;1jQw1&9-G+qEjIw1}TAfi-M1b9g4Y%q$t=dY_Hl
z?9QV17k4`|&6JtZzNZ4;uNwvh0S~9;d^6dM=QjE2)}TN2XjZ<3c4~*7F31OU5OUEy
zqEmdB*xibmHWEm1eSH%yw*%+=>nvnMuQ_WUX_VoxWuHgz!>Nv{tQll<4|aOG6=RTy
z#{)mL{t_<Fexb}Fwk}$>!sBM2`;~x#UGXp8<?C3aD@M!BkoqK#15R^teAh$q(v;aB
zSB&G{gIWHKsDI{w2gw>7_m<7ny7PX+p!ZEw?$)T}{G)Ed?}HfPhnvn(tO2X0(KX3x
z{LQ-iL9rtH%O$dqt3-tPI0K(+9*GpPNJwvUDk^uB3FWwBe5v8=&4IaE4Q;uZoW$A_
z#xm<8RAb_4kG0y^B~FeR93~Ii)vi#H)h)`aivwPh{nU``_vi)oY`Wq4BRY-WfQ-0^
z6J5Y(9ih%}DmAzdB%Bvwy#HBe@@$QA(rv1@4-~06MYKIVl+9jIHPp6d>Ps-|zCY4p
zvgKzq<GjL!;}c8O0WQ9`rWBeg(r6+i6m<VA*ib1E{h3hQL9iEEqLtcBehB)ex5$%$
znmFa5?u9nkLZv)M;}~CHzu&AYgM7cRRNxq2_7U>7GTUlVliIST?3m|M&q%dh_GPdE
zVC2m6EO+0Pv6slQK}<(P*K(1o3!$g(0Lp4d82_z8juKqRn~5Izc@!XeY0H=GZF-du
zmdX_fM3H-zvorCyvjy>cv&R`XfL;e0b*7&XeRr1|8oCOTcLW3@4lmsuw_5#Yl^Nph
z<_`cbW1T(!^O*(-DwzZpq%xzf&L!);NuUJ^{^m01%6AO8>Ud)Sn_im<X|^JXWlS4i
z@<}s7Kj62w|K4UVBO>~e2rKk6SY)TMV6@f>Ii>C#Lsr~IVVM^<5Noi(%TA*1P<rL!
zJXtS*Yn06JvNQLqjQ_1%bdBNBwdcp#n_te6vu_1Vqrdvl25pDtIF+g-EDb%?e}9x%
zF=+*r<%wCIG)(Jh|I}o#L@krfX+*jYaeonT)mdXT4VO2fE9!vumO-Blo;gc`QxAm;
zD0jLz6b#VeF3&W$_xg&@9i?@M*9N`+Bw@FDhErST)17a4#~=#7{C-=p(hBp(HVJ5n
zF98TNb-8SW0tMQB_AzQkllMi1A8{N$gN@U%0BlpG_NfZaG{gRz=-P)<{wy)X@C_g_
z$pZSOuoNg#1xiBm1<XUG8WigccwSm44br!^I2}=Fg}REq`6j3RGmnLZG8hTVubg@*
zR<wIfD_(qukMb8aQbTts&u4acaFO+$c3b0sCuht-mA?&ioo(*N>yMa2#^^)q&Urta
zModI0ddBafaie`NQB)a$ik(mx*YCBdpf`EdtYZCT=4k_^cRexrX?X+6-x!+~G~(ke
zQ1Aay{T+EmO!S#_{R*BYc%M)Sw^VxCrf5eJ<8CoijGz2{g6~Noi|sX!PJ=Vi6igc=
z9&FTgV@(?v2V_sJ-Y%WB4hIsrSD4Ct&%I99pLbaBd~=JOo+Y_Wy}ekFGdr6`7TF`0
z9B%9MQg%;;QqlN%)hmW(85vDQt~tFt(_5isPS(wm&SY1hykb9)+8GZUd@(t6SAk~X
zb9ccRQgG--K%krIt8;K0)!;2jE#AiGI+0BU?+z7dL$qCr*t=0)u=n_CS#wnMwZC3<
zpiRJ)17g^qY|yrC;Ybr2!<)J{A%%fYqQiAg<^W%}e|o*P;(v(Imqz{0t13;sT}f{{
z*1%^uQW<d1CmeQV{;by2&AxUYF;Lu|xE|Qy3~Ufv`3xuuZ8;Psz=JZWH_Z_m$yT<L
zv_;f{Zu(Z~9VuL&ZgaJu(rMx^*h~bJHZNhP?`xAAbo_i=Ek2<`4akKn*vMbsOoHj)
zgc8anXV3<3&vlNgE496ZZx$xNnu>K@5U)*d=pY<W<WljZ`9ncFwQ{lVP1=FrN5q94
zpAXOw$mRZLYft;LGdMl|pKy@IP`+7~47o|fm{QgdG<rtu8n|g&!Hio)4Tq<;vYHGs
zt0vwL%!r$*gaU2!h~io4ukzJXc}^WXoYo2Wd~lOp35D@@srMJ_xZ4$Z6k3)bZV&#J
z*FsO}KJ_)Fjuf~eL$$Z(xa{^r9Gr=k@}i~2&Fq&mk=uaav!aj+SD>&N-HK<IFQN6$
zEm=|$_!IWkZKl~5)6He~#-CHprD|EA{ZqlHasts{ECiqnhw6t5!2(CEWmYGC@S&yF
z6MZ(2jS3J^S62sDR~OCyA|}5F%0Ol1s_Ly4)ncD^T&40R^2p5UQqb9(zaz-5KXyGE
zbDp2DM+V|L!p7h|*qTQr<oHD;Rx6a|>n1^=TIpBAXC4J+h^9^_r>d3a)2h0j(woCV
z-7hWdS0`{Pch2&XYP^2Y8xNb`5VWVRR^hVcS<#~?=80nhi0ovwhH-a)5*CI<f}z*h
zyw|uKNoV%h7E+<tmpb1omn;{V7P$J<O%>0W5GsQ+e(lBwlmT(?aq|vReZ&6J?WmPs
z4S4UI)pRY<DG0w12s%C$sEg9Xs2i!UATV<xl(bpdkARvrn100^S1PL7`iWq*>^fmZ
z-hDnRL#x`K9Rs%@5;By_Q-KBc8~;R=ua*W2fqSOMGy-qMzX@7j=eC+@)=zvjS)%uj
zxr`#iG`hSZ-c}*Q_lqXBx~clcY~?adGzBy7VLG`{iMPZ^hGEG!tiv^rg&y;)9F8j@
z=s0d;J{w1^(~?ZKoC!Q3HqcRn=3eWEM&fC)c9|~=mggIy**V|}4B<1qIGv=U*IoOH
zZEQZ1Ar7QD{36NNV5Xar{2_Tcf-E~ZlVziCM$DAteJ#dxG+k|-YTLw!lFrvN$IuX&
z+^r#vQ9WIun$dfeC{5peHiY!>DaaFrFv}w~w_n$1{xhaz6jx;W1t}BI9OZ!3@n+E7
zX?sc=$N$ytE!9W03burb=RW5*vil27;VkT25qcqPbSg6j6(J(BP}%OE9nUYsF~6Md
zF1g=zTjLh(`JoUAe!ztj$IN>|qYJIqZAv?t1T66V>tOSxY9tF9(!!&(%}~4yZ7O9o
zR3P9aIPN+<)5rS5F#7w)qbt7ytZv<IZ-o5EW+Aq$K6HQw#N6@n+UFAG;d?u7teAIE
zhk%jNKCg7?iE<51$yRBQ>}$G@q9Ga{F9rb1AsA~A;@PuS!)$ji;FT#<L7nZI{Ih`X
zn~C((>5*lH!x0KM*({H@CHM}R5{trD?~-D$j5t=$hRi<tl)H_VIoMfKR4&_}BG->B
z6l~s#GwJh5NDUq;zPHdubV<l#%lo(?bnj}Pwv&WZJOu06)+oo?>5JbV`!2jRM$dOa
zy^1N#_Vq#i1q{+mg>ip?PZJNB(T&q?x5MTF+{-sSS~-|fk}x$4mhn-?KQZ8T0OMPZ
zvtxb}Pjp<|88tcuMbo(6e3q78yDknp69g{J*Dk70iUSF^GQw(5^BSL!?DJVm&3EjT
zKjT|oaQan=qs$X4()=>$oE{KskoM$o-Jc&9I56EY_?2LdWeLKYSDJtMM^~T~V-F|2
z9N+FP9PkZ<FH5zFYaD9Vj8cxV)6l8g3vn&gmz==FVqC7jxBPOw;mK&UI;Z?XHVfQ@
zj!Q!6jXFbHlh!ESWQaGB6|`QhPnx&$MMMF8aPO<)k|I`Z#f!8p?nTf`ZRFE#qYV%G
z+^u?@S^;dVDaR8FZ&jKn4{&B}jp}bm1CTyd%kGUm%kS9=+)EPx!O?Lh`e0;}_8eTT
zFWjF6BBd#MaJp!lj5aAY_Uy@|G{r2m>QghbOw&XO=AnJNsbX+>LL@6UtWO;k-c?XQ
z12<~+EdzA6U4S;-{oQ*90BF*p?j!BTS@(DtoE57JrOGoxkl1lPRK6S0Z&rpE#W>s9
zCuzL2(dUe0JtJ}WyxC4b3;@+ro?JOL-X6b4=+Tta^@W`z$prk>O9b+-&^)n7M)REA
z<!D~yp}Lw5zCG&eUG&{L;g10=aFiH1NdMfkc$e>jJ`K5^q-)~?l3fh(<n-C#$h*FW
z`P%*JpgEysl#ZlF<%x($6YJ3d3`>aZ5kiHG+%SFdh9!kV=L@^6O3TJ&{JObJcW?PD
zjY&5qXddwG10Hye2@==Oe6##KdR7P?b+1}dkV-+9_hj^16*x9F`d18ahT<8-;9j@8
z3kIJbNhwluDt$Xz1s_}%SA0`g<4cQfC3DXTQ2mBELC?8!w7AeDAZDX8+?$KeIlMe~
zyG-dcsRVE#d|7gn3M<PUBh&*=k#4W+Z6@<6Spa0%i`0i%V6t8Zy{+T+AH+qXL{D~j
zK;T1VzL6QfooP=(Fp<tcCb}8WbLO41&zFls^Iu^$e7R;ZnIG`$N*$S9PEVjaNPLI9
zDRD8Z;*C!3-*<5<w2njeT&eN8fs7>_5O!zwu-Sq6>ZEfi?YLm7Y~V5;Z|Av#&-pG;
z3j-?ccuH2FOerDTAJPh>+FmbprZYBQT=PiFOzT?J+g$OU1LeA1Md;jR*%`O=*ay!$
z#=Ufa^nuS61HAR{Eij;R2NT)w?y92WRRet(ppB57%|d-JmNjqDODkw&N~jLL&Z3Te
z<bwPC^|BzfRxPoq3~mXR1CwQ{c!?c^gC9vDo4;XDBA5_!i&01I-LFV8v3BTe^pNn4
z0g68IzwNm8N1p9#SOhDVh4+W;xjx#%#JF#DH25;g1l}(4R8f>DdFvlk5lYauB5zJ`
zjs(i4FO6xO1L;hNB5Omkl4m77fq=SlCrCZu(A`}(c8Y#Z^qw5F)6dYDb;4vhdX>3m
z)~m5Y-2Mecq<xiM@--ueKx9EOy7dvEiJLsoz$bKZT8W3w##6uq+AN;f0#O!UIx9Gc
zkvxM=CSQpfkpb-`D&N=wx2WPCj9oRFqPbr#b&Zst%74XFRWq45PZ_<rdE>s|SMh$U
zHwu9!ioBJ;VXnpNj>DvxV(Y3pbcj-?y1FmXF>ge_02WLSt^Qt?VoM$;=(0<y_tP!R
zKII4@v`sc6WQ}jiP`>94quNW{HPC0kSRHkHPtD#<l<NQLes2uaYi_k@GbU#&l}-pW
z6<b|wxXj+UeipnbCxOfpFMtW${ypFvk_W2=yl%2zMlDDlwdPPJKEbNyOng#^Blxh>
z`jQabAIbhqSJ2S@x?6YQdj^6fgc7JMt#fawwBGaDyIX&WAVM|Vj?EJX<L($0WGjpa
z>lTV+d~vq9C{byp@hs6||FY#R|Lv>p(k6Jt5=1<j^9#r!>}LZ3a&Ob6v8^nfSRMmI
zx9y*qG#TW6vfV}!FImF#RKe4*u6<Wb`e`}|f&<25eRQ(v{6s*5Qq{el98WSl0YR@b
z(Wb5aCsqMnPbGDLP;^z+q#)o$CnR#pSJXF2TG_=nkL1%-s>+r3cOQP!jtl=bg?;^1
zqPoNDClxr7&vn?TC5e9w{7!G;OAcEQ1-k30#CqhEf3O>0wIgd%?9!8tU5dh1c^mU|
zZ7xpHqm0%&ek~FLud0u<2{_Td!X!q~w%rW%fFroYU`&_>w+e;=O1OjvLQS0ZSn}06
zjr}jSH{j=%umJ!aebu_{GyEZO8>M#7G@xAH%Zg=Tp0|L8G%_v}?j}5SIdi&r(az(3
zxOVnQI<ia~Uj@<y;Gb)s&R-sceu@|og1Xt40p+%kz8TLIru%(Xji4uPlqiRgHb)Ff
zY^*d{eBPH`lEfLowy+QzpwZ0x(Ug?tG^7XLU)C+zL`wBPBtcUX%%)FU(ip*y+O0ah
zIXKo63^??rHz#LQo4JCzc~$yCYne%tw;%!P{_c7%qdOFF2lXKkpg+a;hMh0eHIub6
zYHSSYx_7-B9y&n7L3pw_qP8$)*CA5xFh1P5#y6B;{vf(b{X5GxuRGK|d&nr>O!NxK
z#r3EKzX(Mq6y8aMF>Mh!nkPo__RRz=q)}Ns-n}YX?Lp%zjZ#brNy7cR!ct+q$8Ay9
zY2#=Fal)3_9kn7EiTH$hZ^By&gt>|c>XDeBcYf?pUY8rboIu`U*ipXZ)a{}ex~JGT
zkpsx9fTvac%(vmgIP$qd&v~dt6?6`Z_bYg@9`7>Wam6;eG>)*bgT%3(E&rFob5wKv
zkU-tw8f8RY<noo_r*G+3H_u#D`{U2Z`_De=?-ae3kWcL>73mow)yHD&&Ldihr4iP5
z{raYcKqs#WZIIQhSwJHsjZvMWLTG%-zFg?8b#(k2Z-YN8WPM_%jX;{a!n9JO3-I2l
zpUN>kpzt$UErT#P3s|?g;lz$NT4B~J3zRZG>||kWO#$%_+hEq0R<qu(w<KToz0=UC
zTxpSubpV2-aY@){_wIoEPbd*~y*BkLjP|L*O+$>+a7b5NMtuD3hR*iIQuD2l4Z3G*
zDNLzgAY_*nlb55;GyAhh0qG{ZrrsA_=BdcrR_<Ls!$_X^t1_cZy--A;L59$xeh7iZ
zlCFCF_i->#6B#ToyZoMx!-kBxx&e)eip<ro{eqhw2FYz1X!-+TIW+k2^vtM#I}==0
zJ29$WU}bMS5EECF5UhXXzKQv1wlhFe`gr|XI$J&(<{)X}#N`N}A2{H6mfGmOW4}&T
z@VWPwt)4K{S0=&O3YYY{@-2tF4rrczv4Nj{)V|!G!nNl*{`iv%vv#!9f?(HJE;A12
z0p}B8VI1S<RX7L^c98|RRPgY4WsrQqVrZF;`MnB%wwY&DnEE_BsF}K=$I-)O^_<#N
zWKsD#NnSEt-Kfs-h-8ZQFvkkjcBsNgG+1WZ!X}1%3;8}JFaQmx&op)VHHJyASB8td
z%{mZ<p_3&MEMB0xm+yypSUJ`;IrJ(zcgUY?ak|-you4xxFRXMhk=20OxtLP^qr2eb
zUSH9lg=Apy{c<MqctIzKjh?n>V`4%0IIni6gm0&08M;#&=d%bUSf+k4i%fA*ynl@i
z_g>Owkgup~J$3*~_3qe%|8Ut16?(4idYlx{woo%tI$7Nv>z2C5wpnLALelSY+ik^!
z8QXm{K3jGzr|HPyTsk1E<&xg)a+`+Bx#B*{nnMDAS{$?C{j5-x_{%knyE{iC8tY^4
zpq}1MXKf3a*dFx+=_Hjtg({u*on+sMbsOg>!xwEc?VEVnTt;v@>O}LHL!?Z;x#L<I
zkzC)DG?<4xL>KntnpsV#wP?Y0z9L<#E)GoQvZmzVJyhDPZ2XR2JX&R>9Yd$9b5JAy
z5aREy%js47Glqc+*JMX71LnC?wR6+Lm52Yrm3&Hre;(U#_u2-ZPZEWr7W-8H9G~uE
z7WKK;e6{+Pw(Wf48EH|?K55gca#c8AdXIP!Z;W_%C5>~{!~W#X(lZtCv`SE{=GoxZ
zPcQ{=lWIgE*<kH>o<g5+SwMep$>Xpwm|GZ%BZyfvWi8w=HT1LE1U(q&&$8feQZz-A
z$+xF<onk+=UCjU#vOq>$7;vwyyW<Sfu!poOUyhp&k*$@;&;|$TO#{tLN_)Uo-LWiU
z4%yPtxUqC`e%{S|-Cceh1Q>9Tpf&MNYulftoCKUs-WAWeb^$q<X9eH<6QkFlsb=PE
zUY{ItfK=X=>a?~Uyb-2cS)9&b9L=3n@DkPHRvO(pA7~&8NOw(oN!~C~Nd@o0oBbY3
zqN|7B{T!7FEZChr*>iHA_c?Iy25{}4e^b&HNs1S0pHaMGxEWdu2AcNd@3h`vCjh*R
zu@47%dH?Hs&l{GHjSdZKm(Yz`P>=Wx^RJT*lcRf)1a@20E2MYvKgeT768Y)4TU|d9
zaNpoQDh!=;5VcI20A3jHMFQLvUph!7j!xI#hp7_b%n7ZLpQZ)==_RA!iVO;YVjqEk
z+?nLVZiZ%p(?gfGL(3}(PStVQp(3D5_t6>j)rW{50`K<CNyKB;Cr|F@uK@{fBh5Qx
zndin2R)%<dRGxzI)IQG(+b-F??+3NXG7-JDx^iqo*@MCoej%*C3LeXAM>$Lv1ZB47
z=VK9|-COLzBP8ik_p^A_9;c0sxmOX<|GaybHD62ql}!MDuJCBG*<leSUFX;CZZ2VG
z)u*}=4r4;3f`>dEm=EZXA7>(hKl-V7h?c3Deijj<v{=Ox<u5gQgOxVzd&0s5E~N2V
z9Cd+oQ5U7H5e&%14r^EYH8xmhn}jCIVU+0%0*mXSy?QzA6#8Sp8{?bCrR}fVnWAa%
zdp3fOtmtty&-=Qq*^gVU2|bqta*BPkKR!g%&Nf&E2p$~?da0m7Bgtlm7tr4fUU`-C
zN&;Zx-i@1~^R8r^iQ$!mpracn`HiD8&Z8xo=MS4a>^2XsshfKN%JvR(Dn2gfrN>Wt
zA=r#3u{!oj5y1h9Do2YR<ud=S|L{Mn&R{-2x!mCy=Xx5BZFd35V4CV#lZrH7AXVx-
z79b=KC*f*nR4eUc_Oeqn6Jf%3C=SOYtLL_?2**2?fZNM>Vmg2uq(Sa+VbR!LG*tGL
zM>yb^{N<(Irw*fVD=qYRnVR+pAwlXmB0-;@Grp{(qZ;Vpzo6J%u>kmLHePgTpzqtK
zlNZ>yyzaMg-KFMM6P)RRz5-z@OL~$wgI5<iKc->`)|+UF%v0if)@RCezb(IjBDOUy
zU-W{iLjB!2*fygA0xtIz9uCLN^x69lk5Q>R23WD9{gS|Hr@3e~*hyLIK-&;Vu39TS
zB48!KJHmc55HLVqJSwS;p79U-%uLhd#m4Akz#aXGByTK8N>FYFHJk)i^cPVc(1>Ga
z1db+(3Mqzh&v!=NLIfy(&=(Qn?pB7izg~qKk~?iQ`Oc*myz<yG(B)g;>C|~0!CSru
z_4s8)riUV&fs5b8eh-*WfwH}akNU<9|0MdK6#=fOqy4}deCW3xsQ%+speiuHxXr6|
z9I>9^IZ&s}zC<F$MC2s@eLwM0r?iUt!X3|9ECIzvrN)^LqHm5S>rjD9y|Hog<7470
z^w(`($AVuRVE^I_?#YOOtZ4h_s^6b~7wh|C^V4qP$-EC7@Nw1xAg*G&CGrvJDbU*b
z9`h-cLuz`nLF^ERD3dLE@F2$T5SE`1F|q%(kT0z);^S+7wq&4v91_eW5r3P^n2id(
zGAsq+EPSwcT<RZ#Jq06tHCVFbXtQ{4fVi3X37F3KB=IdRY=F=Ys+ClOX60ZHN$Ys}
zUi|M|gYb#UB)p`LUwmN)10=Ti7R{SIb_+RK?M6Pn$a(jdX7k_Lc0&<iNW_@ZflmIN
zU(pccQ<m3A?(S?Tn1C!P;Xt%D=#k62z7t@X$IIw5?#H!xsglv877=Iz5ae$LOXC(%
zIDe7s|I2Hy16~ARw0XT2zDeJg0@nU;+42x%a4*PRRId2A5Fw^VG8@=M8DsxR$MOGV
z@PBMe3-eRd!7m}vKvGJCJ>drR@4adZd))LznrH$nn1BDT|M3Y_4OWzih(*rzanBT}
zT`xx-kZ|(X{}^AGm>Aeo0b&a&?f*E)f7^)v`N!*@k6-vH`jC7f%Ji^o7hm$5*?c@<
zfHLF*#-~sJvBJOqg%@LwBWKHpgI(odA<g0xn17J>|L0i)?hhhb73u&7*9U0J!{$%p
zqCckkI_8l$)aeAXoFxCxYXA;?Z|!s76AwK^AYeFS9ZCm`$MOAqsQ{+&HKS$ti)ZtH
z(jAzRP%A1herp+&Q5%q~ja-8d@n&k(48M=v>Lcws<s<gf{><Y2Uk3i&Du0EODx#@N
zCg6r_&{mGbjp+X2{@PC(i3fJ>9k7s}KczZ;uVY1C2o}=zfZvb$?*{r4cMvhGFpFPt
zC>4p*RWHf)YY}MK-QDCX^*9%liM5wN!uK`EuO7}q=MOFFPXU}0_<?as-rvjoPwoBx
z9m8E&zu<C8^)s_E1SPM%3W87KI(4;59%KHAEQ`PS>{SUH{ci%^KN1i+l8Nv4|4Kk&
za`c3n``5YFJfTdH9|G1pUY7M-blmad#@`BhUOpuho2<5nzRwJd_$hLv>LDSNgdz4#
zvO-b+-8)gmA7lm+?~3!ORiD25rh+Q^Z7f^rh=1azi0|vD%M^68MOl~V#e}Yy2e0_q
zSsJrVsHscb<;@|)N)>0JDrfrU4LUlRO2Q>B<EuyHoC0kCGi$fmCx!oSU}i;3!IkRN
zk;*r7%2pFKQQvEp2Ze({T1O5^+xjw2F`~LHv|<h>kwi;7H1FQM(>nlgKES7AT)-D1
zJOHStyd}$?#J>aEv-56cszkfodIS}R`<!#O{wU$f<mDAF+fg)OeLCXp8!{ex5HE{x
zVH^$VCqir5*a6JwmpCkLC5+9@&A?KV-u|&v9bl=nExsuNe`l%4u%x7<>vL6>EM{FU
z=gVr`4mVyr+s?ZOAIiMyvc1;|cUz>Q*e%r%Uc5N|X!ha5hZlpMstMhXz+oznz+ssB
ze-AiJQUYcgtdC8Q5*`*NC($I=q&um)?5rRl9Y^n)jV^$SI&E~=8_D(JaScL+Xv9qE
zg>SK`g8v4dRJNyIZ?9y~w{K{=swp%Z2v=8EUt3yQj0Y1=!cy@uH;>-1!#@H8DLn#g
zO}Gwm8T}mqBmgVuN<!$%S(BEb!2T*GLW7f7sea4#h+?A1BVORK2C;OUOcbwY#QHGm
z`bqQqMZZ=rrHvUB;MxB`Lj8|_D*5|P(+)0wZKQ~Qs~?-ZYxc^)bcE9Hsiu-Jh#MXl
zi+B<-Ktd-TDZW%n#VG{iWgkN#tLd?aKCnHh3D5o#T-Lv6>Wd8ry}N5vHoRXsQAW!z
zB-t8@T@22XAAj708+0zu`>22-{R3)Eu9j(D0F`~O6aR6s|8WKX<7p%HN-QD-mA2RY
zuw9Hsi5Pr!dz<{=<?Y=x^D0Rk7;UUs$jPZvR7@=KAuN@TPV*TIxoa3P*d?X4QQh4F
z|L=Z|KErYUH#bE=xIB^5BZS=@rGQMQzzi>k{xK|oyNI(sK>!ba6wvHcvTil7QA*fg
zsi=`H>|a#*OTS!&h-aTcv|R{d>L>fr<653!hl@NC4dZ9#wX?R1bX9|t2d3};;~G|u
zj?$r+o6ZK!fD24dz&Ys=Q+ceWHA$8iVKDDV+jr^jh#6oreeq!Q3YdT$eC5vZ4jAh`
z5I6%Mzn)Uy+3)2Fu^<5jqWY$#3pCmn>F+n=#%&xYrM^h^h+}4}rjA+EM4!F<^Q~AB
z#Qqu-l-Uji`CxKAzD|q)K)gl!cEA1ScYLv7#fLQLmKhf}1LMXeqQg1C^o&l;yxvZ6
zdVc{XZ^8blprAes#8oHt+2iYd0KBIF&TETDRJ-3?c@+;+Uk<fgzQ179HoSCAGndM7
zxA_BD^gr`0_yxe2=n0qK=tCa|*2Ah*_Ph4=rPn(|82T?_7pP|}Qw5vMXF3+tJfm43
zq>Jw*GfHb>3`}{I2cWtAbCLh<SHu*o7b$6J54l-h^*#^v`9~GWVM+_6--HTlO+_5+
z;ik9!7bM?4tX3n-_#r{XgSbJTC&9ze;r?HdhrY^wFLCmjjxat40uvIF!hT!{U!7x)
z6XNjS6-Te_XoLdY<JpQIiK|o!Fini7H5coDCguP2R1yb9KtKS1;Wp7h8h+fWV@cp-
zNa$Go9n{Q6M%_^$rlkDb>c!J|=!65D2wz}AY<8$SFn>z=Ke+s#8{-Bbj{j4-9H#-m
zZb!3Ye-~jso8W2s*ROlbeY2?y4aibWxR_BD@8^DF4Spp9xDxrr|7R=zhfw@?e^LRb
zB{k#63xGtDJHT({8_ZSczkB)rBJ&?&nV8~5_HHZGpMuVKq>ZfGe%bH4Qm%?3fOVDN
zzFaS61nDON{*#yi!1I$2R*x0<yO_!jh=5|1EPOe5q)c)hX+%k3K3Z);M#7d(j7o<p
zM2rdGH_CTmhb#Y07<fNk(v`iv<Qo`BeIc|_UybL<PXDRLnCj-5oRP$<(1zZkBirS$
zxbdy_b)a!f6act~&=)NYxKH1DI0=7D%gVADC_|^BaEu#NA|@XpIOtb&UNGO#YBVRA
zw@+oLC~;yz2Mk2O%NoUhi`)-1pwHI$1v8ej=#7SIFA`U(Lw0?-8Og&=o5=q#(9FZ_
zj774d0x*d(7S>-7OaEQ%a`>sJ8w%KHENNo8>w5d7Ax>)lawh;v)oZ?#j4!2JTW;xT
zLgzmMmWl(HjGcm-#d2XHkiWb7gO9zb&TXSG1cy^r3WI?@oX_cjfd71?M>f(Dm2)G<
z%wsle&nnS6Cps~QZmKt3+vRI|diuJ$-$PUvqSPlIcH`T_I~Lm$hm(;N#!t8Bulc`q
zs_NT{i}!a0tCKS^3Bgo6=i){TeqHMb@YYcZyTso@#sn<C37Uvq7>Kvt8=Gjt32;LU
zjppEmz~NvoBh{QRB*+@ibve6HzwAa{^KMHGGkchxy-+2hv9KI!qS^=T9aZ3VTd(~}
z%d}i4i$tSXY^Rj;Fmh>+N!o%=wMmbEWTh#*b-GitJTO^=I`#kxm$Xyhn9q%jtT7%+
zPo@x6O<>f|4bVI+1bd?3#{s}AQg?HzIrczzBn|)uujMs>ZwjC`{4G$+$75y<^ABqw
zyXL<{vaI&S<VLD$T)3x@u7%Hf!h6%Qnxetwu&}uB<|J~QySsHzxO0fQH}uju*?4kJ
zR;f?}b!Y6pxi&9}cBug|aycm46)ViOdT_E%RBSO0H9a(%kGn!T{V-M6+Eg1@0qmx=
z=wS8}0BMwFh13r5&-BKB7hc2>S#V0Kf$q1h&>2OMMgJ-=%h92L4LiQscacJWXeGCx
z^yD{_4ZqFM)nd##Z(c1mXqn!JiHF7cW1G?Ai)cO2e&>5`2R;=R(_Uhr=vA_e6z+i2
zJ^`f#i^Ox%*H;>wF}eD5V}Q;?waOdNwqFjA2?c1)+TXsflG<2TQ;FFZ%w9_8rh0W)
zO7qT7(|R80Z9^jw7AUpdHy*|9XiB42nSr5VJtuE3vaVhlFmO-SqcVA6N24N?YWqug
z75x0A8w-KbZMw=9I&k#LpTkPljZu)R53jh%av}BbYGb+fAjN}w)4ac^F5C7I?QtYe
z%HmEigT;`xIK3NjaA=b6=NP#CE9#1wh)SM|7SC7eUK|LLXYP7=dwFNuH_b)SC_gVy
zyng$oqu!H&(|VqQ`D4D+5Up$9PKBYv$}#hXovs#Jfvu%Hk-C1o^2fU&JWdMN!xW_~
z^GvsAELOZs(WS7!ZLVlQ*6d%(_%BIez}#V`{gM2UcJR{Ouy!YlYI60UXb@$0TDL!6
zp^h{6JMH%U-C!VE7R->m)4}#A$prxqsUy}MrD9DM{so<8@sCRDSy31m7G8RNpqUc1
z%uu@VpaLFVYI^tp-~Si_(j=L8If#CXQXNwl96u0>7nxf^MYu;y;_jGu9b3fNyBn%a
zL8+BfbC6q}6Fl(gk`oiuGV{98+dx2nDW%-BL*GR^7~^e%KB0GhtahgR;#A7Dw90E}
zqX^!O>~|0L?02cS$OEZ?YpD#5Gw++YGoHVcdDw}s4IaAn#G8t(XQvJJZXtBv_NjP#
zST5;oEdcfMYIO1cR4(=Kzz=YCU)97GuqRU6zR+U0mLv`qvteq+vjf9Tu$XB6#=yGU
zHjVbJ2c=`23~*W~m4xrKo+{q}favMXV8N!psW6^i!j3r^EH%?MaXy16D%P0nuj4oX
znWi+_g$aeE`s%9mC{kyLDN2+5Ey>*aFf3+Kp1V^qtAR-Ufzt6N;}?sCEH@;o_D!`;
z=8FqcVaUc0T&_XJNG~HyLwDbg3SU!5sfH~>r{8K;oG>cK-j^Yx%v9IFKzNLG3(XA+
zG)l7z<p`;{9bk*3F7C@M=4~_^_g(wqsp2OJ_1=Fg+TBoBN$}oCl6AP6K`8K2$FUeM
zFS8gyjNDUjeGURyjMk<F1gxX#>Vnob572T87pF_r-X(F~=Ly#zi0+#@O`i1$4zkD2
z6{%2@RTZj6?HAVH?ywq`8|)y~IdSU{9!&rln{z{&TuZYomY#d;yBF5VP4{t#jUaZ5
zdSirMa(O;n-V74Q+>j_{qvyc9>(QW-$Cl-04~Clc4xuWv`dYZtV20+xF)xFuCyre5
z;2ePmJ5^166v=$m9DfW(wO(kwP;+CQtfwRBUe;xwo0z>YMqPEAPAcO@%=g(YHVjtb
zUM%ycbiPH1qT{`qzPl_4&?@80?0Jt6-T$<-{>rbFL|-u2cDH~@@N^)k{HRs&B)c78
zS)cv<%(NZ1+H)LL2Jefk9EV@4m=$I|m|jz=tJ1Obv~Z9O=eaq~Xi!YBI#|k86-Pic
zaH^y)pg*rj;d;mM)U9U<s1|=(v1>I0H(Pb-3luSqsgW$rZCPTzXmL7EdU-fK4qJEb
zKnHa6(V?-(E9{z=2iy=FYqrhtGPG<<w<mIFF$_i4=hm1Xi7ppqR2Kz=2yH+u1-Q0w
zo9E)*_0BPTbq;gYK!#6%Olp(lX;I;Mlgjx`042eP<s$zrY)1Vs_4hvUxa3S`zrbU)
zdJF~nc}XQWX20Cb2CR5H6GxxnihFSk?_6u%(Plo!s4Zl&Wv{txHB96N6-<D2Ct){B
zHf|=zEel2-PGc<{Koy?Z9yzBMvO&n(;YybcY0m{_WuZ{7p~m~~@Uo&yjX6FHnfZu=
zW|a(Ply?Y#83vk8A^fkq%U|0RUo$|0B|J(nZ9n%#G1sE5M@c5zIq&E0ogt~(=XHDN
zUGBZ5hwf5?oW`k+Y%%vE4Dly+8CKs=uO!ZOm#A`Nvr#fu^~Thoeqkt_w3^ho=WhQZ
zJDqlLYO}aRPj9D1#YPO`f#76Q@OnRvRdodnBz3MTf`#H6_kM%EDqTABC3fB~+osGq
zZZ9vZTaC8U6mI`)+wd>e1Lq+E_dUxpYVQuI-OE~#_aD%YU1pdfId72*5pN)I`BGP5
zPeH$_tHXYD0JvXD0iLG&g?b8AUKCSr2<P?YG-}32;-^62|0&ZSPlM{peuVlO2C@MA
z*J$%Eo)%h#DWGHmcTAA=$guD`<n=dtJ6~5b;Jx3&3Pqom>}GI+yL=`QHZaT&zaCN8
zTAJr_$sYM_Lpu4ItVh_Szc|peIVD=?Y}U~*SIavV(FA{3SDi=@%R@;nAT17vrWQyY
z{Bk&i!qvI6j#W-JSi<)u^Hys$VI~}%*zwXN2zD0N+!yOKy}Q4144(J1qGPhv4_f>v
z-4d40G5~u4FSw|zDllTu(!b*++WBf0bd{f?c-QE5QmCVZxz+Jjk7FK)oa^vZ+StsG
z{FWf|$o8g<1PSu}RWkd~%Y0g>qmLftXw7#D*DwQ`OrMer^GKMiySqE+>RCk1jw0Z1
z^l02Y18!h{Nh<<Z$KUVqp-QR(PK}<0S8emQd6y07lN;yuI<oNL_|Z6p4)rZ9>5a!K
zD5`#o64eKDR6IXR^Q>lJ28${LyAUyBs%g!^c>wTpZ%DdN+z+I(wo@z33Q0S=AL|3j
z%5teZRGDVOK@EP_*V1ae)v34ZCvw)==9$o8<bxmd+|M8_;CbWr8=jYkc`^>q;iSS+
zxF;+*G;7=&va25%#pHvZdno9-UsbcoFnC|#(_0%c@x;Bz_p0A*0ZFaWTolrA{!8`-
z9Z*&GrQH0FeyhK;^buGuFE8>*m4uplj(^Cwy^`(S6AxPD@`P>LGtUXo#ol@SLsomE
zK<OQu$rLHK!+yY-M`hDGN*`I?NI+k0K}C*MPWf1&rWMhCjVp(s#SI^~{b}VyA#fZ@
zHD$};?$ImL>kJC^RaN^uT@UhU2e;T7s8kGn?s5-K_X?}V3f)Bt)XGvSI=JbjOIx9a
zs@4Ghw^$Szm%^c?M|fe9o&wa%d#G$Ug_m*JM^M_S>kb)(t%6`#vvy&Y<u`-q8Vb-%
zk3~ZO53bteZHMvJ;a#~&kKQPmZrTB)*0?W)Mo!*6IqlJQ$}5u9|GTym4NO64d*ftZ
zE#`X3211huE1Td^{6@L=^gV3HmcD$-TSIKd0Y`a(w}6XK^h<^yKI^E8>d|6}a-;Gz
ziLE{+`Sj%Wd3Fua$+cURt*QGaC_ET<e}&0AXHF12=UUSa4T?519y_a3dX)CAAmuOB
zXUTV8!U~04Oo1Z>=7|d@R|gs|&V`=#)DQhr+9LNXR$XQcYF5%uswP~XY3<5UVI{Pb
zlwOu-D@JLm#?++8mFQR&9xuDvK6|t|Z&e5LSOL3!XWxHZ_iypYqYt@td71HCHKE3%
zKm;;e*td7C#wB3$V@b=VDpCgwz>&rh`P_&(Y`ln*J2+GazpKtY&kvXc*+j-#a!B1b
z)@4r{5m@b+GC)-?_Ib%)eN+b!7A<Gvigb-H+H)M%-SVBxCw0DIGMG;R8Aqz^;N^%d
z57*cb9M+lY<!a0H?T@D(4xCIx&bQTG{1){(_4sd7=c{7ID841#ou~hRV4Jj`rORww
z-Zv4l_ecRe<l<ZknW*E)*Ve^d)E##j#N#A0*&VztjJmnTz)KKxU{lE*)T4HdWuQ3F
z=0;{YKGUMaNSKbjpt@&LcPP3o$h#4P;kRo~D%Pjno+u5Bp-~*9pPH6#Sju@W7_i=F
zVof{ebhl}(By^YMcX#ewwNOpQS|AKapTb(16!O36^MQVWDX4Du(y8!<51+w`1+K0f
zV6#I}b3OGp4;Cj5vn90Ix3{;_eXD^Kt{230x$Os;g;BS4Nb%&v#L-Sxi%N*tgJ!%f
zlB(~#`okgX>xoP>I>hN13_3!94&G>O`;O+ZnSv;|6{8m}V2mX5Q2jBrc(GFUbp2%<
z;>JL}_1$`B-?+m{uf1x4fC53!9U|n0-07!B6pxSbIs=W;4_^#MC585mjt%hQE&1st
z!=u6YD0sM+*AWNxgTF>F7veUTrs-7);~?}UOT48f(jC=9f#GsI6#n*VP`|}qx%rKt
ztj%(mTIMwxV7UCmx&iq0k>D%Qxg)I8)k2asG>VO1Z-V^ZaC_|s1f&U2ahID#3oP;k
zx76QzB=J~AYN|7VzMi?&rfTLs6zjEUs^$CP`g}AVgvjr{!z!EH)n%wT=#?o1?%L_J
zZ_%lO{-qKB(yxb1-?uskz^zYrl2yLhVxaVs5?DNN-I57Ms~#Pwc1YUew2o((ckK%V
zAO^+ZQqE&2q$z3MppjlKYU=~Hj6{<Q5UEPO&o$AWD*H8h;oL2IMZe&u7L~f9N;YeS
z>CC7`!e1F85WMPxsCmVjq3YRk)5zPTMI+it+huPd)r2EzpmLUN&uJ3y%jkW{cTSj_
zbrOcVQMX;7?U74iBXMt%wZZJQ)oBTfVNe~cmUe*KbpBNDe<NR5?=#aiP<`P%c>(x{
z`T`0Zvvm^D#(w#kRyz;3Zw$xHx_o6t&nX7%xwm?Opr*tMA8u_^cK3CSd}y6>9=_5i
z44Wd_yJxDe`H6{xH4pk8744&EW(?EP`1b!$_T}+Vw{7276c-g;mAWKL*|Lj}T~P=T
z#@L6lWZ!o~l0=Iw#xAnXU@RdFqa@ofS;p9vox#}048!}IuIIU*`+nc|^ITW|^zq3u
zzw`VZ$8jFV_xnALGn@Ww8673KE4~kMk4-|jY^_OC$}#pdnlKk$Y;yqj%b1lJ+ExGW
zSpaL7k_&)a{elzHSh$t1NY6_oga&!*)b+ZxwF~~33nzZn5&lC<BqE4vIgms}$Z-2n
z;o}XVCV8JFw6<S+#>6zF-79A)`n7kbM!B%Qf#qvXqi<7{EVBE(SLD#_q0gX-@HhC;
zfYCVEBc|YG3+ij55%3m8t=taA$tM%Vc+{R6&jkbsat^*}=H!(Jo$w+sc-A7zABUTO
z9%AFKM8ajc@`b-0Wj*t+t<2~ym8CcSP1RzkwAQmGqfyXF+RE*)e-4o-;>Z&HTVUd)
z##Y58_`w5VN$z<5>H*%y5V5Q^*E$0TY|Ggu0vU&##r!e5+5C-dU%EKrf|sB^tbHPf
zBn0LWJ27AO1QmumT6%ZTQ_VOx)HaYPbTj%m+ckG_jl%EW--g`!WkkDzX&e=5cC}R^
zodk>HPB|sNsa=TT*Yi|yf2@)_{-Nv>UoSu>6vZ)brC_s8^;opevH=;x`g1jNCJf=$
z6%zw%^rTYwZTHM!p-)jSb!wlsp>Anr{9+pF8GWMsIoBVYnOMu>r*>VSj`In%PqzSW
z*jhQm*T{C#@B?cPObBGmu(N7gHcfi~Eg3o|AxV#@d5=taJ~@3NOlb~*=-M<+(wC9r
z6^#8yPW;~w2~bK6%Lnxn8T>}g{fYAV&zO1$6)2z<Z%FlMIEf*+*hbBd)w=SPS={iS
z*{om!!gYMr@&0=@hr6p|dGuQ*_T<}s8Tq1*dl`N$nL3^b`u?S1uJ+!Rf+%re0am&?
zCO5yZkfB1qwfj4UR_~NN;3+#k|2{8o*5nIYeXYmo<T<06*B$b|RttU4eFAb)aY+kK
zyuzae(4@+)pQt^4V@p+^QTrOMH2=xhjredj741hzu~giJ*`3B*9bvwplQx{m_KRl|
zAEE{Kjn`Z3putYe@Q##SM|`Q<nB0YP=hST`xt;|9c?3_*@A=6s2RkAcb^U(s+lAoX
zbHBQ8w`lv8hrl>8b)}sullS<H#m2Rud@iNXAZ{TG+NL2hhsDgKG>oiN?5Er_Ie%>(
zo#LMEB$JrVM5Cw7$@;sss~p=gFFtZTLVus?^%(IpSjH8vdt}&#)AFK-<3DX-dadSc
zs`QJNP&#}%=)X<tpV?vlornyWM0eC9O@2*sW7Ci_H#fI1CPWYRoR)b?Fw^#nT&BYx
zu*3}b`|wNi8?XP_AO06+A*83qIN!QUd}|5H2w5HcO9b)ne?N5i>j}eR_j3~W`fmK%
zR{frD9C412qO+D>*5n_2e7@<fPAjndCjo$tBm@r|`o-kAWuI=61w-K4)6lSt)9x*I
z{cE@5GxdIQ-cQsn139UeTHrt75C46WO77FLtwy^{Nnm-NjzDTZ#qRj#>A(NTKX_@A
zK;1-CwlJraO@=i9XJ-s0-=tafuar>+v=svP=Dg6?__C8aJ2+WIcsGc6a78{NU+kwr
z-2~vLnJ4QPe$guov!2w^)1oFow@p}mVxk3!drw-F>W=;D8}&ct!8l(cnKMc})5{I8
zlV!k4eM6R(Xab>M0K}Z`@_-oTN!(1y52Lnp3~bcW>(BTer$ujVI`C)S*^Uh(!v@n^
z$n2r|imgP!0C6N2uj>q*ka1lM7`Vjrmp%)K$x<hP${*jfOY_vE%n5X$yk+^s$MUC{
zQAyQifAN`n7B)u-Gl@d#cRQ1$hY<pRxpwLN;s@o2&~^tJ8k(poiA0Y6I9J4f)8gHE
z3`}tXqVXFoAk3csU71q=hJ3EGahsf2ZC2#=M`}RV=i9$%Ct3ou4|??QA?jRe9Ey!U
z*YPu-I)f@xXO_-WI{L(zXAZOv+ZOWVSGwK%EDJ`!^A<e*bfz=)(-h$hu(JD@W4~sY
zT6mgex>){XgC`A}ferjDZk@9Jf@4zQ_$n>5F5Tvl<f#UPL89_c>4~P{Oqi+b&MeP<
z$&1t)&aeC1Oyco)0Oaru!Y$GQPW)Y3v7K;ITkaPhIhXdx?O(nCAYm>(dw|9R9{K<w
z;)u-u{a5#U;OFv{elFk1JfZg|q0FZZ1dhbvVWwa7#&OyzvzfQtt$&xL39I_ws|BCN
z<V;kKSg!df%8iPLWHZa~d$cXrk}$vGRDf5spfA#Pu)RH+dF$v<s*ffbh?hOlZ)9T~
zJsUvXOU@i&=ST_gyCdSi%*)oW?NyUL_lwT-J%ScX0BPR$hZRD!KR<cAU&khFVY{+w
zroEEO%KGURmsjQWUyBF#X%0#vk=}ns83p~tMr)a~Vj3+#lejXq$CJsYx_|Ao@YHVs
z;9Ox$V*uwcGcB&b=$w=#Rhu65*wvToJ%62yVnYb(Sd?F4QVciqUzJ~Uu5k<65uO7m
z<d)q-boNM<TbyOnr7LYO+1`FWp?*jh__24-X5#tk<|o0K{5u1|o5sjq_q2m%hnI`t
zH%!V6%&Q!+^Fu0=<ByL%z4u<;4(d!&H0^?kIVleQ;LY_`+J3d#Bx6);V=ZL;;T@nZ
zFnwuw;9^*A<Q=g5xeZbE2p_hwwUtcqLyV@Y`s_YknF!a|?idU9gAb=jN48|0A3ngl
zGqIwxzhCiLU`}c5YE$9Ogcg=tGQrBmNNKWbC15d-GVj@yKm}7Ls07GxN=N?i&^leo
zt@+@_5t#iO$;&AexZttu`!YE_Pd`2Br=stFJ)8hl+iD96iIiZQZwjP7zC_za9G#QA
zB-)2!I<he{Y*(*xg$=GV^P_Vh1#ynz*QT(f==l+WtDW;H3=?MShSfG5AsxAb59CLh
zeUPWPzUff5SKj6i0HT0IDC3)Ss18h2m|bd5up~>da-cv5JU6>kJ%4$pzVM6F_ikeM
zQ;5kuwG>PhInHdl=<s@R5q<O<Z5ogeFX4eQ2qmYN@dK0)*?oo4u+F652xXx@MYSwE
z{Aj@SxX(a^Ya@0wbn<ZBCGEzJ;8@6hT1)9M;dRK}=jh#6z;*L2VW8N|0KcrY+0Jsy
zrU%)Jsv1)Em}`nd*c#5@zC_UGiVjhG%~IZO6=~$woksRJep^2)sT+pWGBAigFC4!B
z$<lBRd~U|+I#z&QnS`yYRee28=#a}fCEa*)U)OEC%7|-8rlWMK$+r2@@kDPlq%^Fk
z4WB<AFhuHqcAa=HvJt_aLh0d7s<yp2o89QrwRhcvKSns0_?b^;@u46X3%;09{pa6?
z7OkzHp-Jtp&}5y+@>9wYC>n1<ztzc}QfKgAo?baAu#bS+G`p8|<$Z0GSN^(=XUs2_
z^z=SH@Au~iFNAv`x_chDM<Qxdel_Ht=}ikzEp+MigG5!nxKeW^dHzg8l+QP`@p_xw
zKz<2xqW@$3cx|&bA=~@v_6OAdSD*e8sLq(T@}m>yjDYf|>A_UT9?=o8<sn354e9kS
zH?dK%urVnytjsjyf-2s7b6M4%L2B_tka0)I<}j(iIOb|C)o}V1g5WEN#ev@Wkm0HY
z*lKkg^6o5b>cT5@Qqh;n%->NrTt8s48#P928o+m(&v6|3SEX6JG;Ec|EWcn&l}J_9
zh;7)jE;ip0XCIc>-ESRnjBP;`kf)jj=9;UUVJq}o!IId|5EE@=Iji<*zttou{%xz&
zx4V|BGt1;<=a7`Yub!N&Xo1B_Bd#UX9Q|^Un-&2zB0gM7&6%t$w76>J;C^GQz7d*a
z`-m37-D_5t?(PCVzhnjuy?^=~Aj<Vjeu%xE8~=_?S63*49EU!zZvIp8PJ_RbhzDvM
z|J?P&ya-rWuv#FlRtzr<+$fTqO|^zeJGSOqufnC42&BtHTLR5b5NZpfs&(3Rf{?_j
zg4oWd+~`+mUY)gKwP02ZX{}G&I<yv?h+)DA#)yps061o-cc$s>si@ArX54ec0s<I6
z^|wbLPZLw1q9jroP-E6L#van_%AGmCtp(MHn^PAyhJ9^qzf{7ezTc6Sm2nPKJtf%p
zT6vtOB!b-0VNvBoa5t;-Ld>3GNogb)C-n2bjE#$X6h#?u6z@352?sRZ2L<hqSi2^v
znsy^yegN-j9|T=bipgGG9jn86`FC==$mtl=s+E9?;Nzh3e7^Ikw6J&pAdZ)n{rfZH
z%J-n*TMTE<#JBk?apsNHLXo;;uL!eU&uA0)=g_c$u&B)f*RcsewxJVlA;!qU4O?IT
z9Yj{h8ON9A&YtXa8v7bHUktz5>_oUf(nzd0&ghsVCA>HG@s?g6FH@G@s8?%>Rh2*0
z!6%F|e42o(kiUE9PUkaXc;d(wtRq6bUGJQP%D(Cr9Pw@elh8A?GUOIw*S<#Y4ZvaN
zh0k1N>w=}2<3xss8q?EMLMkom&x(VDlaohfgymgj4;$t4khg#cpiQpgcOz`?2CFJ7
zf2*oI4+x%Qk7_Jr-A04}y~DjR6Fqz2%%PEy<nKvd4vo`yPTnhGBqjmZkZD(c_3M$^
zZwXz!#MV=D2<-t9SH+@ntH#)N+-Lw%`C7R9_!R*0d)wk_2GA;-{S{$)8#{g|iJnhc
z2V{q7U7u#J$SNiP{gYPhCEu}zZawljEqA111W+WL=Bix5cPCmiX4ezW6&?Y1;>tR(
zaEvtdk=Efjj@kIp=FpMpev}im9*DwZQ8JlaBHX^}W)ZF!l=4NRy*LDwdtNvdUu%h7
zj9q19;Y^Y$c&W`h_paz8URz>o)+hZkl<YI$ACz}=Mp{jib+A%^nzr(7Ro+Wh^3$lm
znv1UPt5Wl7GXUYg=Ggm;7KRHFD43D(H#2LGjt=?>zG`UT2xbbqU$&5?I7aa42epHd
zV^_iD&vne^rb;&^68UxJKNdZl4A~t27`Oy?H3(BAam538DNeeum=ZeV9eClU@{5Vj
zUq*q8em{tkcUZ?9!9;kDB0KI0d@ZiF#zmX25}T=rm2@QK`^D?PT5$^^yJlNj?Ivgc
z{L`i^(V{L-gSBe7@hCp?bR!S{%Zn)hW{SX?-WrqDPOB8gv_n}wI(Ltd0VYL%WrUk#
znmx|zMXH$;^e-!2y>M7%cpnb2DKV<93TC*N0;pO_7RV+$ublY&T&P=|Kb*KrcXtpw
zn98*hf}DFg_T?c<9~RY6gV32AA6X6XN>%+M*ktIS{tgWt1*8)<rmS{J&lO2o>XH5)
zrNn}dZ1d{+*?tt|wBZ`Bg~o3R2mCu^>&71vBb#{f9nJ)>Gn}{{yWBXAn_X%AjN8J2
zI7I(mn$q7u%ls4s0g-Fj)SYdb&Q>c=&HNOQrio3e9IUz9SW8=gmXfsAyzBCh&%;D5
zcqLG~5#t|&26C-9Zyp_Hu=0mDTh`8*JT{2NsUCU0VD4-d@4McYsC+HM)l|N<Hmf?#
zfNhvC4t<xY957jH&X^G0GzxJjep1Eqi1n}h!Or4n?&H$tT-|_1G;yWKHNwn({Gx|W
zP1hV|I+_b=QcIk4M8~9YZ$4CA+STHaMz(%cpCn_9S?Z<?a#|6Q*;Q_iWf?c@%TY%g
zb$OA&yGCu^1#<%l$dU@^3+h9&4|d6@?XQ{}ml5DH9&VJ3R_ui?K|DYsb?qE7X^zQN
z7=XSHMTAZOw?v0s@tK#Xfw;|&jpI!xIb{u`9KEUC$0S&&TJsnSVbZvj`q#Liv7zTI
z=2KHw{0$<x4AzGT*x?~D6WdWo2J|C_+Xv(^-*XQ+w^muDC@-}Q%et(j9!*~hI(qM6
zKORsGNCTwBh-DHvaiJ5anx`@Er$V$<9^fYYhNsd2A(;KFVq|^~Rj>4pIAo{gIr#0|
z=K_Sr5$|AFf5dbrB%G(-n_)!4U*Twib!)EYk4Llh%@earDsjWL+M<$3MiE~_5<EMl
zms7AU_Ppd4WpsOml+LbYbK!t0s57s-X^CEA`4r$n)y&aPlxU~gG|3?6y5Aa)1tbgR
za9ohEb7vooRxHcP3E!b-tAdEL*0@~Z9fbbn<30;M>6y?a+|CttrP<a%XdjMZ;TL*u
ztsHbmAPx%2F@HMn<Go-{wU+A1>HB3CvWX9f&F4KTo*@>%5uri$7)|x*6RXM-hwBLj
zK`5*a3swy3-axI3RuUu)BIZ5e*-CQ0HxJ0*DHuT6agKH*OE<m>-M=GU(PkT!B)9gV
za+-9yKct0YW4D*<G9QPDu3Yy76;r=;%Ew>doDpw3>)`eXfkK+zFk_y_J~GL=8FZiF
zRG39A(L3}F;ghz6(tvvQ;?O7O&of|s`mNsHDT?k=Bym!5%2x8ZA~tM4X?K>ZatfOs
zKr%NQ3kct2W4k-$%%EMmH>2No%vHHb<s;Iq<yjH5Vzky;j2o&Cy}s<XM8$BN&21)@
zYD?tE9<~NX7WzWA(Y!+*uapH{La0qj-%HB-k)&3K1i+DNJjTI}SmW;55^F0A)qZuR
zm*&U@bwy~$<_uZv0Y|4Zg!Q)TRBipKkoufO;_3ZPTtF0XvQwLX!o&Z2QMaT`OJaU@
z87wV5&qD$~{X~$?NlY@_zum!1r8Lgsxb|s`9J{Q^rb+4A&~>Gej)9hg=X#2|zwJ5L
z<qsO=4$YHf<9!w+IzG3F%q?yt!Mj5LNK<fsYsboRqsTUD`Tzu4afRPTm4}7}tipjN
zs|!mc4cCgE5wi73v^Xm%*m}1(c00&>F5X1=!2C8y08-<Sw8%UQ@ZPi21>GzWWPWs6
zauFnOz}S&Eey9QzFK#i$3uNjxxyp8n<y=3c$u}0Bn0d>W$F~Un^>720)bk@}Z7UTn
znWGOk5q5m@zBRQ>QJEiq^{Q@Q-AtsIan!zRl`r`c+YrR{&2^vt#~`N0(h*2BiHk_h
zOCugGM)v31TFD1(epvi%*BwNr0695al44O??%d8rwU%K^<aPxFQprg1qWjUEn0j<7
zd^))cmcWhX789n5`CJr(<rv=ywemC3=ba4wgpzeJ20wjDH&=};>L`LhB_hn|jXU-q
zlvw7zaviJGZ%*5OUoy)bU=T4fvWAuDHqkk{<&hyd`88Sf5_eN@|6q`C3#nklkoCE#
zY&gmdDL1J0)JgiHwz8j?Ae5SI#wB;7;SnipB;b4TrSp<qrASayo^NPH0W<1(aaUV1
zMoJ_#)xv59pv}6eVrvhQqp@i!gsyQ)vzgKYhmiSA^y+Z0!{nun0^LK~?2`4#q7cE7
z;#0kur;TKR`$0b&`|XTwt}e7@tu9xrkYp^3?;MTv7qmk2BB?`fO>M&F^>t>Gf4t{c
z1D%m$o5uywgu~7BQ-+{Pd`SrW-3O0>+n^_`50dBWI#z;obSsX!`_$cVyE~N*J^LVQ
zu1f^mJNMJ|V9>N`5T#UfFDPn{yx$q~ZD8Z}e2OhllUPCTCpAj+EjJJ01(V>W?hxBU
z*J1u3vk3``&yM9(yI5Eek^*B@P*E}PUl~C%yq|>$HUt=8VFy(@AnT)T1QFv%C|Jmr
z>@H*QU9SV9@ok6Xg2-B<@Jx?vnNQ1G+ufO7wV&9s-NWx^g)eZ?_xSbahFk4SX;K?L
zVVyl+vG5QUhOpINM;X|HHpjo+`Z4-iG2@uj>%r=>YDyFnWJmSme6eHe*&UHT<$aEK
zdu$144Yh=aX}2!d?JT=<fRR?<g+?=Lc7@RklQ?Xa?(zuvN$>?i=L9yh`F@OY>$Hku
z=@t%IPPat~LQs8AY-h(2Tyn4n!mWWjWL%_!L-9hjj9OQ-a=?5Odujk_1WD9U4)Tus
zxSY|5?;4$Aj$Qzvw{z83^f+({iEXi3Vml}KC}16>)ks`96|v(%ube7wN*#MQZB>9H
z-DYF!ohl5w;?Tq%Sg49ei|s9hv>(dnGsY-=%gcQ$X7u?W<2xRh&3A9Y#iM!m)gt7o
z=R$L}D))X6Eed^6ktD9s0?_)HcD3EJOP)nJw>WW*jqpq3B>bDEc|4mq0^+;0VHy(T
z_D%JuS9kGeR?!^yk7JS5IKU$=Exq|G7BSLd(SN}Vrgg^+y=@Muwpc{$kFX8OgIZs&
zzN4j*TixXXi_Q>!O9`~+2AnxnwdC{G#kq~%GW$gleL`Dp7cSTuTpt#`=p*1-J|%d=
z?8kLZ_Z%u!uy%$3Ev=}{u49cP@N5F?Ye8V&ZDGsZch+tKR!+6St@j0<klr&tSmsI3
z_C2xxwX7kHY`-O#+JXvte|T9bRQJRKSZ6^uSkK<iY7UpK;1_OP>pr&Xxe}oHCYi}-
zUhB0p+idg(Z<*fQY>6aDEHs^|QgyJr-t<ZbMT|?1tr!wmSfqqQRJ-j1)sR-BCME6N
zz6FvsK3Z|yW2na@*OXHU%blocBKGDq*+NlyZ(X{|DC*h%PM8M6?#tCU>pJHh2e#hH
zYdfI1JwW_on$aGDi#+Env+7Fsb?P-$ZFwm6bTui+|07cfOvDQFECwc#S$eyq5|>4E
z8_)qpaL*Zd4TBbIfa+a9?O=@qt6j7!#`(tM#JQIj#Cc8{w}m3k9ws~zEC^~mN^|ow
zAmz&TT;8n?f8ScE3U8r|?pPRqqaGV06Wn}%YsL>CzcP#*rP^=RO-*HypV4hKlDLd<
zAEVQ-QCu2QOT?~4RSd=KIf`0RBC4|0sL!Xrwo<G9n&O%lDihZ5Y_>-XjUbc|k&BCe
zmiX&40ua48K&K}5@mklqA=O*mxWh(EUvfy*ol4@BM6xcf_yiYG9ug`zq+#M#AbQ=D
zjte_xp<6Y_YU3Lx{bq~K%@UZTr%xMKW<$i%hvYzIWvz>j8e`G>-Ph-oR&Ygn-%XHP
zzWWOh_A6T#kp}cO&Yi>9=Ob%!oRh1g3-;2Unn%m6n#&j2wr4wiX6lj&JrbuDg$G<<
z_p49L_>DDW0j5$K{`yKlxy?XrwQ6?lMt?=0lm&a8iyx9)!-(j~51l_7{JcKce{n|s
zBnI-}*z~AgL+UM|q~>7AGOpxdR=RHHW|HM;v;gH241_Ju*EO+e_G(q=FSJ)L(tGSe
z2>CQZwuta-s)j}d>E}>^!lC#64Iz9Nb2Q<WsjBXuOY2lb98e-;X2F{D@#1cCuVMS6
zvensg!Jptc=(^LAw0aYDI3!qTeuU|K&lz_5Ax3Wb;{C6>QaSY?v~B__T-D=T1JRZ7
zmGsO?nseGP<GgZ{Y<cs^9SQpnu1C-IN+L|op+oVq?=agCXdEfb;e~u_j$^nR!#4j;
z<JJ3eL4QxN<#W&&ik%~m?3U1m`mDuk08a8f4Iqn#J*ly|&{<4xkNXeM%AlsOFS)3p
z*g~<sG67gGIK$$WtCe3<Cw*mv>;9RHnkmx2#g26nI)2msUKeU9C!=jQ_hXyz3aBdZ
z50|aukerYuWwT<ql<IhHGE?c8$7L?AT)K5mJvQ6@78F%>cMB#SturvBtovef^$PYL
zEP72EagG@?M)Xicww5UGH#@+a2raXk#IGjFb#!63;D&1eIHxriYrhiUlUjFK+Odnz
z0*p9Q$J{xh?*Uy;*3Fj1ABSn4;&^Prf1Xl(y8$EugT+mS-vN2Xovs<HOB)WwHY2-%
zmJaQyBV|!6iRcdB8hSiz=52=+U`04LDLipKF{%G7J6WKtF+(8SLh=EK#BzPB_xAhX
zC`9}_YsVAkAl&2N2Gvm$i7Gvl$2DWEZuT8IN6&=ZI6hvl-o?80uXYZ5ZX&n73YwQp
zf|5*ZtdU6Tnx`WxyQ`1o!>04u$KPFCgxpSj_xX*97O5?lyE8LLC)ts8ZnSOX5w(wG
zSN1gvGsgB(Aj8Ffv4e>%eZ?)M%vuVxIp1mP=5Af)SqPMQy(&cka0wR9!;2m&hnpef
zhb!l$d49w}nx)0eaulgwN45yVF$0OxA@Ro<82Fq*nv9YdgF68Ep>apx+ri>sm{U8Y
z+8ETbMmoq49?sTJkw~?<0F>hu+!~vc-y-^(-J~serWEczL}u6i5SGmO=4A=}m*d<7
zv=uF$GbR&rZz(ddnhGjB63Y9kW4}Fp*4s1TH&iW{yGn95=WAZZ({InN9IT@EOIuKW
ztihWrq**TQ#n7xWAHT9v&p^aHsY8$(wOrw1NcsM)Wy)g(dI9t2%$Y89F+=O1%kGPk
zKRu2_E)V$>4@8nW8`X3C9-Dx3Jc=2%vw*68cc0I9O8$lo=_|#$iu;+}|2RsS^TrOr
zI4K6w<PsoIS?#7kGKw5x$$-H6BHI%wR(~LEFZ?}mv!p>w!n3GXC3Eh(3pCKg7J<U?
z+4NhZ@NUfO=dQu+>Fxs)F)gTa=hc}74q~SHjWR)!j0=yd1XY~@wfBbk0b_Sgcle9C
ziFvfY4vY)?5>3%;Nx@a?)p+h3WU^g)RrfyWM9-M=6`*sei$h{3shqVgrtZ%B{l@Oj
z0Y^?aitsuwFVC)xo5Ow!(rBE#H{)#x+?`SkZnD&Gg{(@%`3JXP8qcNTq2`TYh!xd9
zjW;<8BGCYzv+nYT!x5wTjkj@{sE6}@$-5zIMCaS&;9F^icM2S8V&S7fAgA$ng?62Z
zBd$e9rf-6q0r-;AW^2B+V6xSGuV7QkXH(NbCHLDD<@Fe7XBme1jn3**vvcyMVN;h?
zVV7UoCAM*9-2H4>$Rx$)m1+Bja{GPR9=+rcs8!i9I_dd?tH>sD<<iV&Zgf>vWA(RU
z>m^~nV!YX>FB=e)2v8*!UK}Z0fKb)uk5J>b-=6>-h3r;-6qr5Y4mcFg7NVc2<hFLj
zWdJfC`Ut*dPE-!6VZ|tpNw}yz!DJmqofmtHt)(2YKxbQWXXc@|@j>GYM6Ff|P7mUj
zV+94mhA;(ridzhz7!~(3Crg@#*OgNHZjtOohB~w9qv!TElDv(n3K1+l%R+URzEteu
zOB^OC<Mo>|93#{X-~FwN<ysRVj~MSR-eOC`As-Fv=Pr}IjI(k8k=H?u|C=C{U?A&s
zTf&kXPLJtUQ}9gAVB|F!TzF6VU>#_%R<*D?NPkpIRFc@~D4y$>ig1ip33rSLYC71e
zG@472c*Ll_h=r7;C+9y8UYi&ze)Cq`%-ADwwv!nH6MjG=rsh6mJs_Ui{rDN>r@zE-
zE?B@6Yul7nM0zpVJ~G=`<9&gpZdCUkcPVrgvU=oJLBNui@oopJ;IXiYAFXu^-H~M(
z>3%~#9XRyK(g?_I?(VZS#c2A`rpjj6*^`)%U^h$XMV1iK$+XQGIv)n6iHp!+-;__-
zUER%qD65NUcm7rv(Vt9%n=T~*2S`J~qA2YEX;w2oNh3<lQdo5kmx;T10aqo_kEoXC
zzSgLgQx8589lH0qq3=JxxMSCcL9T++f;cUk>h$!bj|c}$0!psju|5~RyvBD-orDj%
zNc@5KD2`o{=%yFrXd7Gk6rGa*+_iM`_&jitEZ-5~=s698az#e&pE&tUtDx~-cf;#3
zzLkSJGz`pgcz?vUDu{4@ASEs?ZniVas4GQS9LPu#RvSq%P#bFxU*nylr0Yp@Kn5{q
zuHjm2ErACuXrjnZZ@5^3(QMrhu#Cs;`Xufbg$DV=umll=D!)xF`&rCo#7NsUEjzx2
zKlRX~!HU<pn-U%yjKeP>dt}Qf4+Qiw1i7Iq4}484d#JDT9p3jAZtfCaqLXeRUjzMe
zDV<5mirw#yRpKqUv7kj9NXvjYBbr(aBXlOU9AuKa?K;MCx_~y8YL665nz0O-&agRD
z$Y{<=LKo0Ff7sydxju*#N{jsgOy)@FO77|`?R?+kP0&xKuxe|3@!OKkB`B@T6%{};
zLgvOgtL?rldi2y(l{ey2!f+&9687}IJ}|fdF0o71bG1Io#AOiU9^4v;a;SJQsdDq0
z!M&7g!nc<F+Tc4Z5kUl>g=I1uDKOg|4aJ8AEmj^YWQQJ+i$95!7e+}p8z#?hrQ_CA
z<hH*myxS+&8QFiDX7i@#rj`XM8_a9(h%nIaw;j^GaEnS}2Rz}LBys6qo&W^{tvu8s
zxQi-u=;25c@twMU#*I>u9Mn-_s~Ugw>9awPPRxgp7WpJp#zYdzvQ+mop(HcXTX)G^
z$EVb4hzFrlIj=5GF(|m~EHg&1hSdw(nHEQtJ#AdG2T(DXfOxjlx@`3v=w3Se7e{nc
zc3pGEXsz?r_meTy9oVzA#*h0J#4M;pz0}6+=tqk9;L*@GtcWtdFXTf#vJ$0ir<RBo
zDLvfydo^Od94(LXD}M#FqckEGC1_qy2sHD{<*vxONV%5ImYGhtYj0u>;lk1+&YR;m
zQh?&Thl0-EH<HL`S*xv4jX@&gTD5^r8tv@GqXxT^80Xt~3O9XB)b!;`6(IwaV_Tc}
z-HA=hDfdm^9L<%XFTEyZQ=gvoGqNu7LxcULPFmE4-)7-tVzZhsi@uC77UexWtOU6L
zSXtRnmZzfR(O1Qs&JSrXHNak6o6|;y==(C~{=_o|&tze74N)6(Ta}Ii-WDf@0#=pn
zga`D~DqD;{V=pFJn24s^0lAlFNL({giwi^z?wP_N%b-?G4IGq#W2*qG-RXfCiYeDB
zkK8ZAJ&Ejd{(kGB5#c`6o*2QKCz7qd7gqaIzb%mlXJEDie_F4zTiTSV(mnlbacIGw
zN!jmiq5gpus7k`aW$3?LVNo>ovCN{o%^_ywWdC||`B~0$Vp(HTf=vyz;M}dxg_N!O
z3LQga&<Zu_as>I~r$9nBe&Jw=5!nee(3%!WSOv34(Th)p?yv{t8;Oj0gQXEB9wziE
z*3!u-bqFl%uwG!llNtUMAqhdeCZC8xs&F~LUB-w2<<ScI7M7)+9Oj4@s>Cj3Ex)AJ
z3(BIu!;+=e=SckT;j@RgkFp(X^t2{39qOW-Cw!c<fP8p=0am_Vu0GGC2LKf_4*AAL
zk$l@vlKFj_lK~1yU@#Qr7o#jUz2>O_>Yu7`YCMp1taKe~ZZF;4{uon3%d6gEEpKBh
zB--`l=zZ6OEez)m*Xz~60ju)YR=JiuQp)~<KxZnf(S12vVq^Y@t}%3HqP+{I`g;$4
zaH0IsbWUU7>yi_bfFI0_c!Y;#Px1y&<y(q?e|SzzqE{o`)%9bPeKJqXbFay0(TFP`
z<-G#M{g&|2DB7LA$MHw<!hS08Sd&WbzWCbVP>AD{4pZ79b-bQdai~&46GP?K82iwh
z(!m<jQ#fsEc?G3i1TgdeT}=k4PH2*@J4b*v=-=4MnikaB?)Dp*iIpZTt*B*hhXsea
zIy{GeT7BR9)rpB=;4ldcd^Y%axbxW`f?+$&%n4wxn-~k;=C?pAYEp0wqAMRcB~3Vc
zvW=GaISe;Kio5zw=9?!s+EJb*2pqVUO#;FY-!+wQs2Vz;iOni`R8Jwp{-i^wkiE{u
zYFQXS*T9*VviPJnQ^q35j0(#9`z)7}@r<No8mm-O;8^-C8yZCh=p#Fzq_`-Y3h|!r
za2T@&=eX?#;Hbo}VLW~=phN^13GmY@6mA`bC)W7}Dr39BcNs6!gXYMk5l6;3`q#FL
z#s-d20fJHC)WbcmUWv`+4DJlIjrl1@fjz=8%E$LA8P_1MbIKX6DG4MM9p;B!dG`d9
zwp(It&%nBP>$rsK)Yw6nTJPmgRl9g6mUiG+9NKSSW?J^^eHs&7pFMsWb5!M8v(3F-
zJKMn}N=T8<9&ncFcprUfHdoLCkPI{eW#I$R?v%Ums6;lk#x4G9BX4`xGa;XRD?|v5
znAk3?)rN#v$v2uN(AC-l!-x_ZNME0;wTEw%j~gM=-LkTma6~^cbhR*$ZNBUikHY0r
z_0L23aSxE>NAoZ?E@%AhyQf}KF*h6U$3X8BjUlBz0Sh27?8u!G>eTn4ITS$Dqpj{D
zAi;lb_1uVV34Mq~Y8x$d0*%l4cank)Z&9TpipB`%D#FOq6LQ%}_g5_xGLzgTrtjv@
zg6IuOJChckH)lu3J&(PVv~uPv(C-EGnTMp`62&T!Kb{I)zK$RV{#R-8(}g5mo<st<
zS*aoVq3!9=Z=8E!6gu|9!;6Iy0KHGmRPve6r1(Wwu~0w2U*XFiXcva=N3<#gOa+Pn
zKIn)RB)zCU<exL=KhL6n4=CNi53!dWBgiCGiV5|0w`j?OvZuNnq}*2Y$@@9=JYrlc
z_RYi{<dZ?;u|=WW{oawFCHvlHSY}$_&%DYU&1G0@qeAwZ{1_M+w2dU4?|_Z%P9zQz
znZZ<h`M>v`A=)Un9TD9lnojV%X#55GEs^KDUW&&(qNXM$iXIlJ80PA5BP|~Q$2sMA
z@D4}b?M99QgNQRUjDHpj>&}F+gzj+e6*3L5hS#8#MwgCND^(g~j&yW#i>MWXPp{yu
zvR81O#^WjoVJ6kXFFfZi;|QfK2dj&ZOK`>20Q@m;uw=og;a9O60$Q@t-(Bzrl;Orr
z3s<T`F`6D)TLJ+YLDV8rb*mkaEo_<=4M_pujT>;soAs4Q>wSam4M5D1)u1Y20g9Rl
z;g}MGybf!%-H$-NI>ULK3hg{^VLHS-l`LUo7^R@8RqJZjqtXx_w;Ozm)_sa+Q02Gc
zc7K#&!POwVn+^%Dh}x8}VgciD+;Uew;Te>Ll(|B_`LA5@2p3SrnDf!{u(s;<(UivY
zN`|ZFO>&QBa*OgIM9sHQxoUE!k!^o52rR?HlOtcZ>z2{Y*qRgYxXbK}g@;Yli$>-C
zUSmStRHvC_pE=RpCaisp+JD%0OhETz=qJ9;i)StDEg2O<cDNswzjPn4h#;3a|E5`l
zX7oH2RGH%&!nd2gbOuTigqY;S{2Ao2sJ8U2ydEdRM#*$z;Cf7ml19H3O_NUZO99b%
zv#yT`%RVWZzC4sh?)mO9?l7m?7z^9OD7;F1(90B^-S0f)_0>=P71pQgff*ADv*k#1
z_Mw~2;r*Sq%+ic-QFSVN`VO_dPzpWimqST@=C0p-6>wee-!TNgp?8r_$?A5ad*Rs-
ziaZW6<udQHT}hF7&Nzsa;<FDSNS^^3vO>$dlZ9+Y`y&0a!~LEuu6rBiaPX>T@j&!b
zuaMO@JMz*XBVilUfs5?*N4YBV>ETk-Y)-hmT=_y8mS%hU?YFN!;d_`12KT!hdvVgb
zIYrc#t577%%GgBcn;l0)T<`@5%6G)Kof&fkXz#XzDWDB7`m^Mt&BrCaV5e#oVc~nD
zDhD5cVign0xU|re?Yl#4+K)>OqE4`#KmT~%in;*+CfwKoM|9DYnAiT>w=VWsGe%7f
z9VfBdFUIoQp)c@H%;SgAr-364xVu}(3ilg7m8$qyO+P3vMDv_D9!oitK=HfC9@rnc
zZB|p7yEBE}%e&qtWmRwWcV|K+<fS*ZM@_M$k5f^w!6)c_h3)IuQkGS7IPs;UTTYFh
zMSwP5MItT4iuL$6z<KRz<~jqSWRC(dd?k>&=L5{tLfgZ?IsJgM(aC^@9_ZbTBHsv{
z`Nj{Zd3fZH_df(~n|jkz6>2)2>u+V%ys<vKUeyR%DtiL;9&UGQ9cV$Z6e?5Dx2iOw
zSOJ}KzF}LHx5`RhiF@hT+ODSs`=%je%oaHPMr3`Zq#thIB>QjbRttm}$O>70e6liL
z1BqqpkuamL>e{v1cLl1=zVCR=PW_YNGM|<TPZP9;N{>~|A*}>l(`0zm?q{nI&ZOe^
zm9~eg3pqJaq89LvzR>(KCV;+lia|+*ewh4X>@M-3v|?q{$AB83b`K^Br-Tn**>fhQ
zO7PVgBQ332IOVT|fC9nMyB3Jw)*iEcsVNize@>pUskUZ(hX4r`2}e7o06VI+SMxjD
zg&r|gEO5<4>}f#Lx#l)z1k54RdAAHJKUCSA_+$vz_#;U3#Ct*by?LM~8D9KW{DHCW
zo)rlUdH(~s4bxPpsbX2(1Tj_<WWooZ?QY*45DeqPA>P)xd4MMHC!7D2*DxQqz}DW!
zn%de@5x+?bys0XyM!zYzcRr;-2GQ{i{E+d=&65J=iVYm8_ys5uJ{>+i%PteoW4cz~
zSO~}<)MZ^KuUr8bxiu)GUJ{T|5x(Yx{ctne9CP+Ln3~tCpenSS0?i%CfaW0j!4;pZ
z>~*>-XL9Ga-ou(UL%El5HBH$v12NyK`*R7u)q8GK)%&w`r6d|TV$)pmL`n#czMRGo
zu%-b1SfVm@!|idT$g)qmm?Q#j2$^`cbmV4ZEti=I?E{e(#LX`tB?{@?5BqYELs|Q=
z<(rmyrdL1@8uHjNm3K~C3Yp}`*RR$4%o(7cN#cg`suy5L%BzDKXdF3nIb<ON`#kNF
ze6XN?9X@C0Vsxlowt8^9ZoO1nkKa_YPYy7U<QvdQk5hZkT3|lsJ)fx*<h~fYEXH+^
zqhX1*%|2G+Y;1y!beXR%rzZpAgSYhqDoMZX5YCqi=#QChwBH4&@-qXOVFGhtdiiZf
zMWLMfXW6!t-}F`FEW<47doSy-p6be7n*q3goJ6S7wWL7_>qP+Ba9P-mI~5NU@qZ2o
z!@E#il2x_?{(i)01Tp$I@>&MT?G}Z~7<UixMn6q<+lHQcO8@bu129JVuj5$-IG*KC
zMvv94I&rU%YUa=F*F{vfpeFH@x%0|MWYALL9gL$IYsxpYR35r6_9Arwrg*lI=&R@@
z2;{WAx=Ky5OwfzV;Si<WFE8i!AtasfIO|4#Jz4lIIzZ$?W0%?YI}OH41h%byER&s2
z2M!*I?>*`?9{Wwj;{88RdOHEbx<W5CRru1T>1my&bGj~xoCvtjEut8vi%P7UG+|u8
zu8fyDp36j;Sy^)rtE|`1un`-*^=E_kI2$hSkTuNq7cR&{1u(|?5=dboIhWu%r80OT
zK{7>#|3Ykat<NqzGK`iwz6_^Y0Ys6#Y>9DhX{f?9D2Q4XXTL)c1L}6pOwP^T1z{c(
z=Go&NmbRA{-jbdxOAzA@hm0@PAtjM`Zk1p|23GbGy6VOqi=g!g2lzeGNe652&Y{+h
z5##VqK79v}e_EW#)=$5O-A&Hhq2LI$T^YP8;9Fz^>X0s=e9I8t0N^5T&pr`scH=c(
z)f^rUS$An$k0w!{Lf!t&Nd|bsL6YzROb>v_MZ%_dJWyL{Oq0t|4bDOBj25Zyh_g;x
za{v-H+dn7b5W+bmW?lMDVM?VRQ1@AI#PpzUZu6!|dz365V<w~=*}zHW`=+*Nph>*r
z`P{(F2_LHy^GL)KqKik^)sx|7_D{nbuC8_E2&Oq?oj6xEQxCZJ7$L;FMTeMv?5u(=
zqKE+=yGCR1XplZ>@)U-!?vG&6Pw#5qO(yR|IQCcx`&<wOk*2JTPFPBa7+yo8ZdBBL
zFvv;!m{bm@E`g0^v3g^e-3H3RlV&U2_ZN8rsLOJaND`zzIO&y1PO|bot9FWLnqD%w
z=n#Jgdch?1mSE=}srYv7@@C^Q<NJWpco6~&Y#}ek4n!J9L6vW6=qo&?nl21Ezf;p&
zQvUuLNV0ciy>cMIX)LA$D#JEZbW-};z^b3jRv$z+1+<*L0-|^E9R}rqK{9(9tkyyn
z4XG;mZkx09xgwS5Tn3v`@F!0zdkg)Bbf^(qA?L2Q>X_PTi<$clN^UcV4e8l#kD|19
z&F=0a2TaR{J+ORiCc-h*9UOfK0i$C9IgV-%Pmwn;uZf-{V-i_0s+CNsL?3?$Jo7H)
z;_bVkn`M|ZG)C4`BV5)u@Gwg*+lc=6Lnb{5v)a4aT-zxny=dnRyQYw*NpkdCl$LCj
zedT)1Oh3%P!ux8^z;S=&RrPTy&0!HOD0fZP#~I2HWh0#0MQRfgja(jtm%<BGT@fwr
z;V1y5++QsX0z9@{SE>G|$3AjN+E~VGZnwngfXmYd`k(|{S>*OoE_?|Q0o_eP07*3#
zFSHEvpFI37Qj*88a_|n0lm7def=hP*e+{nh-=;M&YDLgF$w(qgz^7JcOwLSZbx*HW
zpcEJ4hh;V6auRLWhA~`%<5|OD+2yK*PxB(os^QF&Z?1Sdt}gzTRetUA`SW}ywie!8
zG!CfM2P#<RVk@JFu1uEP8=TE5dAE1^uGbY5!#$BA8iKM*wZ1K?5H0JvUT|H&^sIbL
zY=iyN!RF?pQ#U>RMXj!bqrKHP=U>%P06~R(_#q1Z8KUL;O@Uue;S54OrQZ8Q$m+Q7
zopoMkHT6#i<ndax(cOll=r@<a3m2}ARN3ooSID{Fr42%xH(zeq>B4c$#T=@iJ(Wf{
z<MmaSolpJw7vg}1K2OByLpR9T#|qjAU!I#Q2Pcf2tXco`3{dc1$shS(5P@=s)&c^r
z{y9%JQC1^-g&K+{Y}{uXus3Sl<&&UDld5~UbV1Xyb3-Bequ(N7_jBYWj+sfdg$xPK
zNyEMYnc)G@F)+i~4l3HNUxL71yn1zmK7aao>`oXh*QDi~R$L8`NiL}tkkL`6w|@3d
zCRHKnt;<|#*2iw8CG~OWQO`cDV0WBl->H`nje&YB&+z$AQ8Ro1*lrPP4G5+wQ=EW)
z)hN=oN}ie>7n1FT7MU)u3rAw5fku(AKehmzqUC6$k#+qVT!v)^a_QLZll*VLg%GvC
zvG-tC-{oC>!E^7yv0K4L2C*-G7d8|()Hrsl!T1k@c=0B!gh?GOx)M_6Co}(nb5$93
zTfI=s2WiLN1A*^rJE~Lvdk%QB=}8mNhy1ZrM@{Yf`?ERsv7IM=O8>uTwxrQ-;aOIb
zdw3h#qIpMaCB!B<S5^FhIjPHMU+CDV_{DhE{QgC+CDiBZAd~tW`FYK>|CzFX)Lqpg
zbbN&~H2@SP$%IjCLo#2aO@!rZej?2{uUFQpdLO3#vM>X&k-i{mWOlEPAg*FB(oVQ}
ziTBBqEnpUBz+^~w@(B1Hw5Zv8{hQaw&X~S2zE(n}>Hm@4*Pw(R{`V|^|4$29{0i+c
ziav){HO`&-IZ0H7uH=d&vgX{`bcwO@jJH8TUc!TdIf}hnXVkuH1I4at2~T^GNyPmL
zM(sB%BX$SvP$Q9J_<zzYs|IHSMnO1xC|{(FPv&b<b7sP1^m{S&8i6JU9|HgP0O*tV
z(`VsSzEUpkPU}P|POmuqw|yJ`YP~6?Ed^iX4GbYaRi_~M@-O7;Pr4E@Nsq~0m+0ND
zoz})4Q0Id}c;$*wZIwO8$-e`~{x9fkeU@&Q1=INP<C)a(%`pvD;Mbq{Fy{{eZPAl@
z<+Sdoe?83Keibn*XhWodXg4FsvjJo5e*joRyb{o%Cm6Tia_w(_{Xag-)8tqP<9tm9
zV8J#YtLeP0ey)q@BCy?_if=UjmLU3%Pm35nL9<LhKYmH>eYbZfXwRiULpgf)dqMw?
zef@uI>VG!v`!(8gwYIhbHoolO%|)xN3TU&&oC02L{PeN^-8KL1yTCL6+S|P(e(YGp
z522S)eLsKwCNSRx#rsyC@o#~e|9L3js}gX_B(0~dXmU!doHjK41u)__v{d89KYx8c
z_di1LOhtgrWLsMl^OnA6_|5ac|9UzDossvUA@w(Z#Tt$sPqh5&nFPsV4!;5KPi>Rt
zEuqBIyno+d_V4enh5ct>2?zi>0HqJ|JWtb%R2i_VG4*7XUu*qSYdH@r59qHfyx~Jz
zOoSHDG|ih(aqK^g@9+2Q>;u};z+mvcaccNFkJcK69HVk8{RY=`o&jyFsCe)d79+Lq
z>P#$57v%gx8IaquntP1L?`b_Q?x`&{=?@CNv>;20ii&!fgGN`Tt5}(Dcm~J?+)*So
z5+&q3rr2^;M);r#SgqA<Kb2D~u^%SJzyDaXy?pV~B>@sW9j2$RS4O|^6?@(UmIYWx
zO9HSA&XS(`f8Vyh_Yo~9&G}s(z@9v5S^rXKRqIggI(Z1wtFspNv@U*vJTD#(=w(Gk
z(jNW(JT7fJ%d#m*M`_&Beo(W??ep?fj}>3^o1EGuMR>BwYl1da0Vmez&wW$W=VIB7
zArAPeL@~8buaU%^$VRB`$O<977EtI|OA<qTaKUNCvUPdLi^2&XR*X;1-D69rvvw0%
zkg!f*f?z8r+2*`QZ>(*OR5U+Wd&CPk!uQ931-`kk5c)F;{NsP}#c9qu0ZQ;|WSj@C
zpA`DB91bp@eA|t8FXm6Mgg*?y)>%IQEi_%7=nI#yPKkkpOE`^B@Ll6Gwss%UayCIc
zcB-3;v!adF?53poz-C9w#_s+(CFpXYdpCCOp3c&Alo(-P;gC=BP0k+yY@bPnAcAJ-
zUO7CFyMC7XwM@~DjI`jhGG`Tnz@OP+-rnjx40+I--DtCo+bA$G%+>XJG;#{FK<eSI
zhgO;O+KbQjB<W<An}I+jXkN7YsDpdTyYDt50gKN93%!zJ?eCe_HrCg7>XfCM4w=!c
zG|>?7a>HdG_h0kOObE?<#UA5ZLc70WwSdvdq5;B^>$##9)wldtl=+(FeYE1lkuSg$
z-xO-_j|C8ieRodd+}y=%SX4J&JK<?i0m%Y6`k~UA41Du$IP!xtFzeW)V$$Ah7cgMn
zuX@R-ARk0Un8|x6Rt}Q#FzTe~=wg&-@;tX}SnS^Zi4M)Csk1qk<J8wJ0#*{*MC7!9
ziKF>o7|T~L2OE`Xzfs>yZCz!G0rs=cJosKR&%~`v@y1?orS)kiS_4b&pQ69}AMx*R
zZQ_aa$zerF?sB?m761szV7qWZd|*K=@x5Sghe+9_lKA}@U>x04#RjBPovoBxdKO9!
z9liWsnEI{RLr0d_j+-g-2)3l#8uMRExFaH~mGs<?5Bz3DD&&V$iFHY-Z(wDbAJ}`9
zqDQvde042y<q~0iBmB!9DpI%e>Q^sd-tnF(aPNR1Z4iW=+}m#29R&Z}S9#KyfM+Mp
z&oA$_pk!4%_nu)Wwk3mbb8Bm7+?UT`D}(H0O1P@FJeyWHp{BOVyOmgVSf^S*_R;V5
z!47`-P;Cw5c45HmH}Bmkoy{MO9$Nk&+prG7q_&9(y}RLq7D`IvViPB#pLKk{4(Vup
zXAqQ|Q2qvDWoc<Cy3Z?qCN=KbX9c?7ZzetArQ4DtAz>?RT`wHxF})h?HUD;^{gXGM
zCQ8RjoJ{5rWYwvS#kTcJ{b-z+m`D<k1O~ynu>)h*_U1Pe4wV%x%54s(lQ;2)ttnkw
zN7g9ObLc~BZ+QIvJ5r<hsF}o<3#oG0WPT$C_6=KBwkH?UR7ip#vBOusu2Z++ZzbF&
zvR1}J3@%6<fu7#J&2Ln=ZCI<}B?Kz1pcKXHeYEDbW0==DFUAwKxlpsDiBu|p4{L(h
zkA|`urMy4OJus<?8)V|39T0qHJvD%lJ$<VDE{8ynO<LsgG5>{EM>E)aEyQWF`fx&a
zAS||_BKYAe5hW!hC%UcNT-*MDy+Cck(v=*R)kl^(o}MpGk$tP49gptnIHt@W2@Za=
zzZf&s1zbj$PgLaOM|-Sk;W;gA!X`YzJK(1+=F-wZ1$x!bzix!DDqh=ym8MAXGi%r3
z$26C>dX-g2D(s_IhMOQyai%+O#ml1M-jMFXWfXgA+~B8hj$pr_J3#*ux0751S&PpV
zSgPH%?=M;onzl6C=01saK7c=zI&Y)(w~qCn>5`4aG0s%hQ{KtC<a;B8^V9S5DK{d>
zB4A|quuyfr!7)e>n&9&F#2R`3Md;B0b7u;Fk}q*PaV`(+v1bKLgBJHgfKzJ4uENIR
z#3WT89vIg{NzJ~G2aG`xBpC|y&+~le3VW`ns2&y<*<rrh%jfLeHZZ8jya~O}!X+;r
za-`yHoP~t!3pwHPoBJ>T+ENKBGyO_2cqH%m##Q(+k=;r0KbDI+%E~w!xUAo4G1E7N
z=!}oJ^7pm-e{9JU&g0@M!=g*EL+6pABP-wbXT+`O=;&IxkpjJm?0g<0d+eZurn~v~
z1O7T0Ka@}oCs2317l)U$+<Hzg8Ou<vM^0S?QVE}=>v2Mo;fMWfI+By~Jc#6rARM^}
zv_l>)>;@w{_mB=83wY25;4OT$gjeMN`_|W4!3o&cPp@R<QhLjH@$drj)e`@Ek599{
z<X0ztCB^`Ty2AGk(Y?QaLTeN?$M1IjMAtdO2XS%nH%LkD;?D_24x;fd!R4KV)pQ*k
zv;Ayy_>)sdD<VuxCt>NJE^UhMl3TggOl{WJ;5z*1y|lzTuDfmLQy~q(Ne8>_;_soY
z3OKhn`xc<r=rF>YS>VWnP6f3N2P`fMfwT`R-ilhAX2Xqp3!ALjWo*;OQ8R+AlxDFJ
zR5cKM_`WazS*XA<&ExZtgB+?)=?`8BZ^_>SUBF_}vSQ+0el42*7V-Pf5Jb=<UBb;N
z_dCA5;nc73I3W=6<HwITCo$0_k_X8y_}K-SjJa9Wg?!zZ+x-RV7G6F+$*YQ_E`5<9
zos#LO{E+tDgmTYTVt7}qA6h5bo4;U2N6c+k^I|IgqMYji*qdnmWP5e;!RA7bn~$ZZ
z){9frZ5^i2Goq2f0STEZBXdvTTB>2Ampc=MB2oBNna=b%FHfJN+!@-LLi3AL1k#(n
zi){05T4q0w4j>Mx+`MUeTfLQUap(k7gRk-CP%+Ui){^DdN`>D|Pg)LFn)S~L@jF$`
z%T&#Bad8bbp7R@7iwII41)BUzB<+eVn}V(AxEVMu8hr2!TRIF@+*tRN8xjnc)4!k7
zc#U)PM#6G(H^*3M__#sxcg^s_vV5<AqzBwPiM}TGr1yXjZ*QSgH;ejSuVtb^zX@g2
zd2ghiSfK<#7TyTib$UeFu2=2+G2_UWRTTa9nz@!#U{Gf=L2h<1Z7WZBQ)mAIR;R2;
znBA?X1*I?R0d(rwxmF+k$dE4j;Cfd6Ac)Xw#V-GYgEv*RDx8&|Zb}=hl=zx<I9*x(
zQBYAKIWu+cmRzsaI&R>00oiU#q($wYpSHB4S?k8J>ME3G@8?8;kSlB{0p|e!^a==n
zE2RJ7+?~Y^ejXl4rO&m3)-sW^4w?#&vjvOd&UX<-qL}yYkqz5GO9z_zbmJ(f=3Tu5
z6D8vUGO#l#+e=D4t*-OHFv{fWBVZUq8K}6qYsLWT8$kx<L<2^5#mTg&0rl-;wjN}@
zt1roMHbY*OJ(rRTow`o9K@oZ?lTp{b))d~|qZoGANLe=L^2logDBx(AR{m)}bN_=n
z17l^;ZwQ^}7a374p?qg$fs#w=JYY7~ss;rBG)lB?x*WQn_`pfUr}=hbU!9GVvF)$M
z_cM@V=$DRjYh>xW_Cc&frMsq+ccL(UHr9*_tN(|xw+@TC?be2GF;G-c5D-y9K%~1Q
zMny?ssG(s%N+d?QK}19aq`Q=m?jB-5C5Mpi0qI5<24sNYy~e%wd+g^szV~_b9}a4M
zamBjUI@h_*B{9avkLW!mS+@1EDadgPBi#`pous}w9kH}%2yEtkjf>*9foL=_t#YY5
zNM<)~X3dIqcN5mv>>-`iF~gIZAjB?mVd*~?8~@8(`iq|@3b!KNRzjrey$mJ=m#$G5
z!DI^K*tikr7G0iUQmOnsyjJ_gh*AHmvp1>ZM;>^r`F;7a>ly!A=4YH5%7${)PyP$+
zt&G&XDcP|3^1s;ke?8v*e>|K_hEud|P={@;AMVB6v$1_`=Q{zMlJ|axH$7ly_+(Uw
zACb&XTrarqPFcS%?LZCY1aql#O&|fiIC-fj>9AnQGvRNQf+EvilIO0iY)h?vtRHK&
zwYnMI4spJoMuvSCqT~kd^RoQBI46H`gEL@_$yXM9#YSY8v?q=Jt#+9r)69*PWMpD}
zY6$0+HnXP?6Qct|Zos2aljJ0DFD6A=;=QQIh*LY(^|BsUR?9Oxc_E>e_3yl-WDTaL
zOfs{`#%E4R4gY}HUOCp67~8X7d7))uteMd49@XtR<vBLl`?oF8B2h10m@uAtVN$cm
zhN4ygYydHRICwfHi;Lod{0ODT)E~m0Cyk~4XKu{DPCqN$Kj-1Lx?TAQ^|I5|`06;`
zV<LnDWN|r2u*2qO779gvTc&?muK)H-W?CQ<7i2{gW|qGN;`fjL>(eFYSzSypf>-j-
zKHSy5&i$7l)1|YKoHrS7o%KIhHXkLTl$nnH^Vj2{3)QdDf4kG%&(|Q48m2M~#==C3
zwnhw5%Fd;(R`)NbT9rvk3beNyn1b>C254D9bpP&*qS)VUJf?7SlHb^wqN}Uw?@n6b
zwgA*)pD_5^^yfoPwD$Lz$Vs%~!%kDGfY134a)Rzvl^BmA`hPoDzd!iDzbsvO;oxwU
zvrDqAVV;wCp+`itayira?SHf({~AM)U;Fr_{&cAXQAIPnpQvzFA=&Eww?LPE)6`Tb
z8FrY7`!~WV1=@_9jJ_h0LH_qc|EC`nJiy36J@!Mc60br|j9>YmtNxvI+dm|(S6;Zd
zWPPc>Ww=5K2K5CQ5m0oXuRZ^tZvU^(s!{ophzGmp(ag;L9**>DO#F;&7wP|UY?uPi
z*VNT%n#u%Da=jte)`)`^qV-=pB$&a7|LY$A_dl|h{X@M-MHjtE98{~TU~stIBG>-)
zq5so(Gr5qx4hjMf<AU)lA_{4}H39&~x?IKIT?Xg}a?LC*DgovnhC%KPcqvw*{$eI>
zY5nisiRq^~$>!$fnZ>k_@C@R>E&<ebtA0P0>+euoCXw^ty{O`$m&Fooh=4uiZLqJH
zpWh7l%k9wdxT(846sQ!{(uJG`<D+0tq6lKl%a>z-BD@la{+2C{qiL!BcIy02(bCfP
znc{@4rC1BIvrCh;GF(BPh1EY^3!h9&yiY5MB5)Rd{5m8MC@F8;F*aUdO|jD7{`phw
zq|8~RRsYgoWO9D5f+zlJF{dt(lgBm%QGA<*s7=Do@dw1keGS0gs{y?!>$$pqFJ#*@
zk+=C7f6aWFMESwX%saRf1T9PGD7gM|9)Ysu=D}2)q}!&_n@e;6g@gtfJt8J&Jc6v9
zZWFCu;05t}{9BAyn3$QFBSrG7Gu5dV68_VA{r^~xCXX}DEeA=}_Q7>^b?#Zvt?-L1
z{99KnRf&#9=95$Mzz4H9`1mm>lEupvhol~fzR;TUxBFGj|ND3TTHm=hnTm5OB}&-e
zW?$gL`;-p3nQ<Jw<5p^#d1th`x1%}qdrgsX9k1_d%sFVk{43S22f&8To&jDTalsf=
zZz&WR%4o$x9Z+nS{<DDE|K5WBzb-5*VdIJoqY5y3S`kLoziuVJ96qy1^)mKa(DKNs
z3eOc637<tcotWioVUMB*uilh;PRY^nyJrHqBe?H@bx}=C4Qmb~IRG)2Xn|8h*lh5M
zG;Yvm(`>!e6V^%ncL)2+my?=jn@*FEumaYL>qv>R31P9@pv-Fe)Y!>Bb1p0+@oMLA
z^Lkf;pmGloyY{Loa7FQ3Nj5J|S1WHdo^COaRxEWGq6Dk?t@ArtUSo|-QntIx{?T`h
zpLE9ZaugL6iEivt(OpieikNWQ?3~|DQwZ>MvD+&r&TBl$2SEE=-EkXC5(1T>7OAm+
z>pNwV_=6U{3b9Y<HuNowtwuK}<EQH_l6E)6?v77r)jzxHQR`!4J%SH>Hu23xUP0k)
zvbam@Gvfk<=DPv&4jX99Myh$it-8H%pF;|z>=EPG#;pb$p+OdTX#3$YX}%7XVda={
z(G$7@^KbVv66<jvF2J9}NMQY<K`(;#`UJSa)>C5pmXh<pZ`~?RC3kXiquT09;90Wx
z+f-08d}eQ|j`9X2r}4_b#Ku#XZ3mETP>#9Fn`%9f6MP}cPc<##Wz&81S==%q)_JSH
zuPikj2>chdV|m8ugNpR3)OPTTiV9-n5_dkC4SgCqr=m}9cI2@6gu|#T-lAUqLrQef
zR%5ZT^33mk1^OcS%I>=HwuffflSrS5UuX48%^OR5r4&fl;j6!5OOXz^-q|RYy4qmk
zoS0lC#($`d+xebOa^n@CyH45P9B{<ruZQpFOtWl^TO$ibZ(YZEgqeEL&2E~>dLUC^
zQ#YQ>kx_CxtiZ5RZjsl}*7h(5!RLWnaJ|r&apCeO_Fu1|FH9b`Asum^bmHC>=AH5C
zRrb2fctujD)t{{sjz8PgIrIwRyN(twc4QhWf6SI#eHYw=*pJmbNsgdR6cOO;PHI~|
zR9hNboLzE*w}#xj&66mD*d*rG&+DGKc{Lv8fQ<z;cFGN^3)|B+v8PJ@_VrY`u7IQ(
zv8HW(tZaPa#w~{U>c&WcxjP*c!LjcdzSZl&l@H3Y3f+QzpPI}q7CPeBB`*BjkCSSw
zoj*8-W3^IcRIY<-6F7s&8Dj&3<LD-gZKodYEa75q4CN`UXteNb%=X7+mFj<|4g=ML
zO!6??-uLfn9Qrlkd6UN7Ij?M|dJM_Q$YQ}tZcp>uh}m5kprf9#$yeIKk9TntnTbpo
z^pb{M=Ryz3p2MXU@o3)pP`SQS=LcUEwdMW9`OgVzMKe<=3tYg{bR^Yh$8vu^#GwFQ
ztLuoLFInFja{G9+cj!v}8By?MH-LNMcisrt<ui*oiJc{^2(;sG11gP(Ce#w265vX#
zd$#;G#qWIHbQ@GDZuy2i932KF8@(C%$<?+eNKhqde6Iq*avI`2UFL-zhL{hIz5`hj
z7qn=@%xBJgisb=iV~>@`W{2ovx2UgeAI2*BxB~DER@PJ_ja{m)o8w%k--JYh(<LD(
z#6uf_IB?#*lB?H{*u7V|CWihVVK(3VHAr-VOZzUDncSsVZ_cLT?3$3F&!_WaXzbu3
z$@s?oB4^JH3v?>PZ8Oqd`tSyCT~#411qB6Krr~42(a@?CyXg;8L9=mMjRt)SG~uM%
z;4T$AG>U{X2f4Gv_<x6s1pE2S?~E}p8vpxL_;){+1QBUCiu$I;0he#$OA8F^R6+9@
zR>%o|8~>mMZlZot@#r*3rst4Sf8JxKj%bbm+sU1}qk7vImB;w$>SNGUG9^5Bx<~kf
zPn|M5%SYozTMiB_ew2DTq{wH5+?frJ?5$M80)<mo70@ju;i??G$}!XyZ<p`xWfd``
z>=%B?*tqpzZ(aH$$(j$VIO`*QVLR5!=TdAyfhNj=OB<a~egcqMHjCzD#5dU4V>9~v
zK2u>x9%M>^gygiv>}bT!Q8|vMuqOq@)IH(MKdeKjzaKb_)!$nI3!PVaE|!mO;td5}
zZ9I?cXtBcnt0ht7HB%)?+ttp<%H9%eQbpDmt6eC^o%Mrfy_ihjjc5B~HlzTL>F6hx
zEB?)1efHnP3$_l<uC<HF8F|T2HCRu%c@MXNSi$$C`P~GkGVh^c$ED3%eawiIRk3WH
zX>WOgjJvMP@|Y3Edrn>LXeWki$2)jWE=mMVqhvfSWr=m)$4v}x^yl~9XL;1<v7w>N
zFC#3h)#^ux`GsGM{2ZDZWjj`OW9ivwMQGkDKUvILp9*GmH*uj}r`R~kwHU=#jhK!w
z4Zthb4f9<;e0n2)Vdnfr0^yWKhOwF1+DT)|Z5XFciFMycMVr1)!#d-Yu@8<RC1Yal
z-*hc%TStc%LPzG0Q>VBOT}Dv@6Ad9ah@XL3t+w)M8j#gDC9x4j#8uK)x41VN8yQEW
z2kx|u-YIpXjECB)<NwYb|L2qqaR70(k;43_|8`8=-QC+U5K(=&SEj`+eLn-3({!y@
zny}_492COvyh2goyfm`0fU7F(#=ZOcqKKzjL1DtzD<9~5LF_*C0%<D_$*KZsF)^_u
z%QTf=8jHs@y82bmI2kDp?>3taq0V%V*FU|9a_sQt2#2I~dsrSJQlF&Wn;IRi-^TVY
zAK+)x3DxEYN(Xjm*N#ZG@~e}6*#=e~)ize>(j|g4UpL$vr;bwB%B~hR2Z!=HFUU?n
z6AolUmaHdBK8PbbrTh=BBQ8k(r87Bm;lIg1D&tK@(ZyDsyLwKn*--MalIQO(j}TB4
z9UoA8?T~CJx&^2Xca1qYPESui8~9a=7xe8?Fq7Z~#h-gwlIuG?UORDQ3u_(h^5nVN
zwdq=Ux~ew@^SMAzA)%@@pz&b~M6ZJA*F^GQm9}EEuIuA=+_7Amax_O<HsC5|B4J`n
z)mxJ>*=aVW1-$zF%1Sg`&o|4uASXLE3DP5?wri`ioIajzaqtmDY=HcS&UWV0nJQ?@
zSToh+BYETXpLg%0ET$YgR#RHa!p?%Ay8iwX*kaUe?qUFfND}s63jLi!8J<XF*#OH3
z9dGjPl{syJ9^TL>eW;fpX_n}K*qXvdG5DNoC!7unaRGr7OOA29!qvVX+rVfm8lJ{(
zZz!j!1?^<_9vN$&ARho9+&<*N$qP*=t@Fw*a@R9ExYVwvK2XqfCqp0`8rRd$JNpp$
zrRE3e9<7V7!CB;ANiQ7b<?FlC9XFTd+P!)eYFfZ3<7g;tQeprUfq8)(TqJM^VxK;~
zsGRbqdjUAlI~&m#H1b<DW6i2hYBiDj1T~^c^MqJonXMIAFp;WEdEdP?0v9StKpcE%
zG}HBW1}F0zal=%8`VBceHM7T*sd(<wn>*Lp9G+85x}%b*3CcE<$Lo*YTzz%&QOC`r
z+>A7%JEwHcqOX@LWOb7fx5guqns=K{$ee#Kl;8|n6PtS^6NidxmZ=w*RIfdTaInVO
zo4?A3OmWflM!h<_gZ_|Gmub`67%6R_Jy!3k_f0m#5c<rdQ8s(C^&p67YO8#;>@ZRf
zbamrPbKtaB9FU&4M5&4T!sX}KHSHr-2_V3o$gPhwlnYH@TIh_{rv8a4{jc%RZn`I&
z7H#TL2;y*SKU#6gzq7zSyhL_iBrJXeHaWdMZ15pfoCBjLh)zE!C+?p)-zsfpJkf9S
z=j5LLkyRzSUt>1HP=+{Z7AIYtn}|Cn;k8+xlfEZ+7b8_mo+W0DD>FoTKSsK3a7!ay
zXdtLVjXG1IzP5t@@`weJ=$(vGFlep@^Pf9qwqOu^XTFD7ER4JK7xX#pthCAU93M=f
z_%0__M37Q2w3j?M&NN!1<v!efc=CY7q8lHofik{z;COUB$%pYW9Z$Zm5g$*YaHK%S
zxruc%Vs7+1$mbtO|LJM|KmX@NM&x3ozxv@?%un2a+gj9%0kW@%svc!qTVFw035|sB
zPPDmN%$$|4v>qs2vUFJACdls`?m^}kstV12zLbgG$RD;3Z~h92RiidW92xr1K`b*%
zp+Q?V!!}R3p$sSQgmZL89G`d};%D<$1f6=MI<h!RPwIdA#dhw2%Hr7A4db|=2M=03
za0j?S+>{K^h`0akNaJ10%)5T&P&Se$xULRs@&e+-Y5ZQS&Um%Jc$=_x#sgu<B99?!
zno9C*3`Wl!U5v`Pk5bw_5xaatMozoH*k+wx(y=739X^yZj&eTWJa8O$lgl5Q_T_+a
z=?GH@JS6lAKj#34p8DJxTXDl=&u`lUXmv~gNaz1cK>3u{dE!`xlVSUsGnM018&d=y
zaKi3d4Ll-k2nr>1jcV6wcyMSjp~%M5A~V{c3VpW&Lq9fvY?GLGmYJA@^KN`iZLQ*V
z`eQ8%yeM#@G~XfMNKWtIs$xYGlaK0jjqk}4NYDI2pQ7HOAR~_@Iq+U+s}&0E+{V}M
zZyqRSS9^7KXj+8?k#I)yWh|zG-n$R_ez+Tn_^pIFaW@~vx906X7F)p*x0gWCL3v~B
z&O)bd;wt~ig!Ey1EtWRa4nQ;4{9NphP5e_m8wOy=h67}&E#cSUjHw5%+wIYG0FH}B
zaj`3*%jh?@6Aa`TE}s2clCBBqZywv!)H>W0<J<@9EBEwL?zt(Esk(7v=V`tru?dP(
zb@x$Fny+YH#@hGVRNx!>ZZ!Z#ouMFSll-Nww8Q=SOE*R3KqqtC3PfK;X$YM}yY2@B
z9Q;RggxQ_;P3c4KPfkV>jmA^=1anTj<iat_zfg=LMbqIOny4sgul<e|v`$E&wY2m?
z?K#~1R~hLRNoC8mMaltPyBl)4bVBx#M<vg4D?C3XgfQG|vfSE`bX$n(m5EEK+v`lJ
zb88uDfdTKAyV%WL5%?131KP!x=y175Wlvo)ISCOr%7DfG@7_3vweElJWD~dLI?*!K
zPjPm!zX@STCXWjW3{>`ojRB^F^sxQ$<}@v^EpiraMs}EF%6=Vy7#?{MUS&elc*jjp
zV<-t!CJD9~AYi>>VIaSen3Rz$FE)IaK0kE)p$=;QNtB#ufj*@j%>CA{-t>ofIuM4b
ztK3sNu^pfdeSd(a?T&es_X<M9AFmJ-A~{;4MD+D<eA{<y#OLpEt~+z)%p3OMmn&_J
zB*&zo(V(<Pp?A|LvocROE!?`JEJn}{&kc0)Uxm;MNiiF}xC9V3N&uzj&dWI^{M8-L
zvqlhO6MPxSm-KZnRDciPccgu>*yL?8b9$TNd^j*J0MbaDM4X+IWzxG?Q(H%eXxdgv
zGw#n)PAX{YocXgT$p7_u!+J*}d(3v!A;JHGM6%fx1pyMe`hLZtb<AuA!C}xGym?)n
zq`!y!)RP_}G@L1X%IZ=V=~+_r#)RAakFOu2T_vyck#Ib08W0L41~$SB3>;7EFA)<7
z|6`N?&3A7VXZ$<qQpBB_&v#mN%(DTI=6!Im&6A)K3jb?dR~Q&Rll94jOYR@FNIIS4
zh~}%#gn2M|K>;szZ5#BE!?;BdfP?9OjdKRnv>L&T;Z$IzN8wEJd$w9h)es@8KX?Z4
zFOnCJeAX*~9GYV3m&QmDCppQq(9Np~3?$W?_>PVNS^xq%YvesURR?76{SSWrd_jVB
zMFl4l!B&M&Bt68op$o-^wU$oo_4WPvexIzaP;i<~)UYlnl^~(}N1MSYzxx{G0Z#0Z
z_lW>!B9v7b`De74wu{6W>M^Rn!xp^A&b{UC+Y|qd<esqK`XEZ9;y%N6$EMv#-+%EB
zl}s>2Zs9$@2ZVd(iT^?VND*2V=gBHvTUVz%T%b3Y|5Qrz=aj?dCy4tmHTx+f3o|ow
zkIyGnUzgNXmnRZFj^YO}M~^>Rt1|^8NMwB-*?26k_IEwLh_#1Ia{esry?{g=AI+yH
z-s%cP4geZ!3Y{~tKEkix-%*OV?_Odrh=WQN{-6HKHUjL7Y3r{SR6@+9Mm`<bjM%fz
zT@|dTIX~Z?ssdIrecb1YKO3bpkugn-UgW`uB3q3nF`cp-v;hyA)Jc|jjU$3}?3D^R
zE!I7ifV=p+GGGEn-cJPI0No&&jYw?dQKtx^bNfQ{Wzf&3N4{px7^JSh@x>0?ZSPYk
zxXwMj??9`NCX-^`8!NI&`uz`=w!$5fd;Do)ZsZ+lZR`mlZ%vtIbp8GKjG`{a6=wsc
zXi^frzegKk^@S+dA5079!Ke^s7r4N_e%`dyv%ms)KO9SUGIt`*k&>bpxJEQ;A9gl+
zi@AwycXw+Ja~$#tdj6Y@^?%pBMmDf|gC5hht8FAbl<^}v^XYk;Zy=4rvH!I{-C1Y2
zfeZ$c#;G%{cf`;<_2HR<EjSsS;MWkQrnI{AOa*@wsN8=~Y`c2fo+_Xs<7GKe0X8%Q
zEP?I)*G0dVBM)$DA5Y6<(}Ack+K&q~ra1Cyr~VTw9DajX3esBFBVuroxNv^wrg5Pb
zzuSAyl!BLQqv2*tAtuwxp#?%9qs6U=|FcyiPb_T86kSsKK%|b&8JRx$z4G4?GtBA|
zE8PCz*Hq`@LdaS8(?aae$^Ow*{lzZ=PMi?+<rJ+ZJs`ocS3^8DBv*W9%YF}d>iw5Z
zM^rNo&(eu?DZ-tsYoNVgWS`U1Kbg!c?j+zqfxc|}q{@8X1jAv^^1F<S=}HuM|9I!o
zrMuwIA0n%!J;31i#-{#J@ZIDK-gCoBxtBv0q&7Qipdr6k_{;^6+lHKC2)dI9F8(Ov
zNg2p0u+vGi|51B!P^khk+GpHvu3jT9J2#MfC)P2%$gbfsJVUet_tU}XL$y@zDSrf)
zKl6nx<14s)MpCodpPU=_nR>uO&pml8%TE0wwy8cpAGDNZKfbj<9AtlXVmAHTYv=Iu
z#2Gv#@U9N5&2M5a2mYv<=>98WQPkVefMf;Y3~I%@rNfnYi6M!CEg0T+JW75SKr%V)
zO69!EB~VM{0=a(qk35QRDqwsklb<crgU3qQ$2eO2UT-I0A^7dU1EmiMG=6?3;%-{m
z+Ae*?e(!oKTn@=EP*B7<S||lqyDjQcG%PK#A5z>D93Lt)lHDC}>hMqkZF2Ucoaf^W
zYuwdINEj6`QjHp!3a2_!MQqBlklqJ*hBe-Lf)=}xlr8Vs@*My;rClA+{3kmPv}HUC
zAbg0=UV&lF3yI;YLq!MCz@u*&-z4HLgfDCzi9-e;9c5jC0#WWRqp*@ia9R6nsQlZy
zI<JD`Z<WoE?B32F8Ep%#IQmE~9o3jpj+`>C$8(<U1sk(Tq3<hYZ+uh!y-U)6vvTKL
zaKgV=mjX2yp|m4WF`KCeAJU|#mp+hhjonF2wVs_c7US0Y^!fGcH=XM%aHT1Ik*CtG
z`<T-^j%`J9b!LYr3WF3)rKwV<F5kQre`2@hns9(RaNLgEpuKv`Bs*tCudpO`PeBwH
zc)L~w>#NIM-k8R>fR2gaYxPMkcoTQ?G!`^oiL@Chnh;;%3jjUDK;9v8E8yzzX@bp&
z@dYw+n&Xd`qkPVM`SN8xA7R;<C$csl>3KH`uL(16tx(*PplkR8d&w$EMED_uU8jTT
z`oL1-L&B{jHraE<x)VO4+gu0sd;3JxIN^B1JmdJwV`Yo>_R`j!$g|~{4-d*(cYsjg
zd|78Zzy}pd(*w;mCXmhVqE6c1LR&lFb^Ce<(b#;gA|_&B*-72`c${|n@^-geOSRv4
z8#mF`8)?Nhd3Wt6HV}6qu|)D@zS{TaTj>1JfpYAJhYw}B87YYgGK`)r*Oy+9`<XkP
zv+z=!``f-OGvFzygP`QL&{9{qaC;P298e&F_v9;K!7qiY4(Ho>HBr~&)*oWeEb>(I
zs9xOKr@zfLQWRWPh)A8(I9VANbT*k5mrl54!A?H<YuAady*sIT;U}grwmdNJ<^J{@
zJDU&ES);_n7wziBO#~n|F<2oauU`GLbX4JOUFl0Nl%xY0CZZw5#qJ(iVTF3H_L5Gr
zUlSnbIzc1%-oacpX^gMXcw^+(_>5aOCI7&d%<{~%H+i4q<Kuu=Iain+xvoA^j1#r1
zIPAWq4qEK+`>y{|oJ|=sI6LO`p7&;Mc3NDqcFdBzf<27RckK<eC2eU>^>L{t#>ej^
zu=LmMh`PfuoUu_LFWde}wvAPod+_e8#9C5^M!sC7?qP851MhNm0bEPtum3*Jq*hL2
zt$3$nZ^`qv`}-AjKxh%2F$M(3lLu-?TV(RYt;(UmBs(q~$(0{>ZM*vp_4{86q5U3N
zYMb-0%ETt`*^`G;s4YHfn?bRA!?5>jxoVqHs@unE3MMkow~tB5m8Si_KK2vmG{}qI
z)q#_Pd}gUIW_yI;;Mc%A$}88O)r+pK@wFN3u?3wa!EV=Gv@{_sxE5wU`|+@~xtY0n
zHS~(re6f+2mdG~1=f7Ibqu-fDZ5Uin2P!ChHABxKHr^MEgb|iUYO|yICv*whs9HgX
z9WhEu%BMFi!m44(Ai5Q{#Xl{`NIWj|tdrXqoi4g+Bd;!;Gxf37u+G;=v`~-pU`K{<
z$n^em>*sm?#pTvk*Z+JR`hx)!<cELqrqe4kaXliX`|&o11ba16SDOm7J@#0O6}B6C
zuq%~cUH#<1J4CBcLvfOD@kbg+ddVz9v_PzV8^8n6m1w_fMjr(~X@Xg~AWhNsn1{GW
zd|VW@O$l+359qQ&d5e?We08q!-z};wNT`DsqqSX>718=^ku5R6-#D7MG6K|jG6{_v
zPzl$g*M_y8MxdqO9o*`0q+ph^+>K~l(3iXz&USpL!TirYDvb&SW)GyROGm;$+hY7E
z@DV2EKQP4E`E5pfan8WgL3X{Uc_301R-pQRWf~jCSvPSwY2@Y2bdvLY7@2oe!PiE|
zILeZ$3ArU{yPMs*SbWFlPL?u_SZvr$NoGGrsoNfoOTw?}NC`5ml5Sg9r=>hHJ))L)
zrY7sN7$_%e4R{TacURdU8Xxb=z)F!-nJR16))};21jnVF2&+LK2(H(9tYIH<K?}N|
zU8t|vnS(_lYsYR<3Gn+Z^%xysi;WytW~n)hkkML2y4q6GcD-f;{<m~My0X%2>%!Xj
zr7k})oKx<}lUqru&O^Im$lYjJ`LND7s#b-8*52`TC@+^HNDaFlzws>dj>aFF27%5v
z(<gmVv!FxvnjdMXR<V8Xb27jP!6o^Mx%xoNR;eJN3_}tOQr>qh@&{plaWv7DsH1DJ
zD20hg&#s7b#0rG}>+$|SzVm0NRM_-CpkhB!r^|qRgC6f6DlMRIv`A)<b-`;rRbq?v
zZFK90RzxmnB1+P5$0P>_aWR~6j>DrE6clQPse)bXNEE?;DPEiyAIMZ>!K21>3JsgZ
zd+<TLzeY+NY-+*b9B_!@OObRf!Ps4^ka9iBwADGteAz^*F_)XiIibPZnf_*YEC*T1
zKs{(s>Dpje@2tle%f$tS<=YPImr`Y4qB1H)eN_&-i0h7**7>5vs{~IA4$kM+t1`qn
zJiZ~V1JBdRPp_)Ieq3OLQUs|(CVTr$jSPLZTv}$GG9BuL$p)*mYrOIBR68}Ov$hE~
zcEfS=%h_CwPsxJ?#v<d%F+JCANqKAS%ARfXa8w)<v;YE$?Y^S4(cid;!2tsH!rjDo
z{~dZ~?5NOjwSR-PF*KQh==r3QJjUkeOxNq{<k9q|WS(Z_Py2P`aG@(r!b=r)kMR@9
zXb{WgkB_6|1h>m0Vn=SToLda~!sf|u_CHzxigPlt2vibFn`&x>MA3*OqQgrXsaFMx
zP>2pj{cvrNy84*oOa1mJ$vAJpr{Pn1;s$A4vt^)a0LkgRRP9Bd%^>9X7JtQ<ZI+*V
zt$Zjh5a7xRF`Y5<9Mr}mQFPkH2U;Q=8Z|Gw3~EM4jjOd)=p-sorBZ%BC=*aGB9^Zd
z;pVeslEV(o<D)sZ?|K*SCmgR(%vIXRu)&`kX#1E@l;4b%mA=0{l<5H2P}*owY&-xI
z-!inhl{Z#Pd^RtAD(EnoBi@jR?zg_plUdPJ-?+Yz?;9g?`i)W>`G&>lM_*COMOijL
zW4hvp%PKVAzMXf&M;dT=O02Dll2I?z3FGC{?*H5YY#)u!T8g=v`N-Odct(haQkCto
zY@SXbH}xQ`?ivRuBeCo~ejqI#Wi(#@eXxw{DX0;^`RvSF6FmbtdTj7I*T#fG>m|An
zyL-<FZ6AzQKgF9luI)*4XjhcroeCKWwmVE$#6Aa_0%gZnkClf4ZdPXP*C9HBi=9Oi
zCs_Cy2gH5#N?YAo9vS1*I^PThXB>UGIkb((+=5ZmER()^`0!yU1a5(jE|Xd)3hVP@
zJVKh5<DCd<jmdi{eWBL5sE=*C__~}PYkTG8`0lxcKX9zYjhSlCE#l~ZNV=^RzUSDi
zdSE?OmH?zPp4Uq>+HWKZ9!_+$65e_+r#!x^vq6_+)*VAklFzohkIxr%x>Zp;^)cZp
z<<?HCjo{C(@*ea_awmmHh|PyA?#5;20xR2lNwIgVdI?;`jR&ADsB3qb3LgLwjX(Qt
z=f;0>cgju(O_Vlj@F$>}>Um$+_$<Nu8*Hpr_A!!{nr4K#S-3fHfmqWJ3}Z)Yf@qoY
zH0!9g4)!z^L6ZGN)s4N5pZ@(Bz4B!T)pm=PW|#w<4#*Txa8G<zN#jZLJE#=aesK7n
zb56j%Uu*8vnR5T0%`O-PC2&#1#1ubv-ndMEoWOl-5o3{5`#s&7g-+7*ZKg{4!}vw<
z^dw1T6Jsm6n>XT5R+mx)ow^CjhGRqm4U-Am_bkQ7D`TyqTGo{lo53KKNfWOEM@@O-
zubm`0i#2Z#pU05C1U>{q#_XXv_2eL<HtFsLhmoXP#igDj{<wiQdFiobPQ0vE5lH5J
z1uaG>-XMQ0rF{UoIx*1??|z*c1t{!j(U#kxPF?#!aGcf*GEdlg@ca42V!gV)WqH51
z28ZadNJ$;ljD`%~-}NDVAnzOMps4J3WGraadA%4d^mP@ZSJpn|wXd~Y`yM~5rYn6R
z5%AaWA-2b6L6>wGJ#kSv-8ZD!hhR+bX>=CXNc#hv$!p)^!P&Dyu;qRAnelZ#uPR%|
z{Y|4e4((&%bv^3&A;wO`bgh|IL#p7mrt*+G_WBlgLJNdR&F3!SZewHZ!v1tM`iEIt
z=vp7+;Nku|La<Uj?>&Z4O(3JUB`crVjZVo_?Y^;t+G?yYEF?#{Ee{&;!b^Q*H6k9K
zH9s1Si1;!H;n6F~%M1gV8j8@vVu<%zZeKZW@GD;i58RdJxc=cea(W&{-|w=R&7C(3
z-k!}zUKzHz8fCV9H_?r6{SSsWro%zvSAQ?*V$ujN%rER$9;vB4;J2Nl`{C07J&{@6
zHt$GQypxAw*`2ubG)e9Q9p8bEPnKqz&ipHUU3#PE4MXUMOI<;EeAA)&6)>m)T#aJq
zQf%CKRfyeatFJUhM-pX*4b<6cj}^)9N|6}avGBvj+Vxk;r`<igIa*xptnSCx=BBh9
zKj+0T{s%jdwdlU%<t~cr_mpC}jW|-RrC@=(=YX)V-rk9ins%WcA03SRaZsNb@awvo
z_&E8>oyU}vmwhMWub#t{<JNBI#pbX=(<HchtDhm(69pX#BKY3t897gcc=y{N-u1wj
z#TvzQT4aTCp7bZ4<RRC*`(KSsD<t%@@fgLA<$NRSqUF<nL`L1k4jswmk#yUL7(&^H
z|15doF^7wbSt0Y7tBlify&J_1Z_p+`I?kC{p>S#}*LnqXqwaBmHlx(A(#8a0yrEq<
z!9<LLTc?U#E>gc@d|rFbs04bFk&oG5Cw%UVi;g%QM4tO99t&&!I-$P!n48pqXZ@E=
z*iofd@es{K3ueo;aw`114e`XgMt-3SUgrasF)A?<-GU^YKXN7t<76`U<Ebxp%HMh(
z9JZga+Vr8`5k&sQcIV(Oy+WT=1dRjCeQ1vFrME!%q5w0j^BHb1o!l{T;8(|h*4cxT
zG4J@H!!C+I{OO^c7AMd;v3`-ce=Wd&_4I<=oa}lkMD+Tpv1Jl0<1Qm7m-Y!KH2?d$
zn<k`M%W#;PFf#4kc7AM?pOER0!E-G6wD~HC*+hIdDS{u74*DgEv0&mX-VEXVL4c=W
zx_nO5XC32qzshc!!(-?xg`I&&^}1J1UU#+ow#bDGmm{p<AyJWR@97Q;4sCD`g;okN
zlqRa#1PLB#3?ozXs^SkfWCI8ObX96W7@b5WYTN5619rQn*J5C?u=OiBb|{Wa9?Aja
z>H;<c-uT%{C8slL^hNoq=t|<$I%@s++7DL?FJE4R6mA;j6zEl}fA*0?yWfA>T^6|d
zZpm5B>$vLeQew3xN=MIPJ%_n9fFgUS%6hsd+J(NlJ!lKXg+L8;JWIL`5J<PZ(4^|Y
zt-<`&PjrmvEl1VL_0Ps!xaOeM-d~CEEZMqYxf$ssyw8bB;Mbs>yzQ0#EUH@t)xOBF
z>$<NQ@!)RO12+tCaU+@MyZF?h1{Bw&`rRqLkMn9^aVW1|=s0TlF_5BSN4R>!5=HIr
zS`X5n8n!!9X-p7ktC0_0>=mA5khw%;v*lJlkP2T)s-`_=>f#G-6f4s6WB$;6mn5My
zF<d}?h+^XZ;bH#ol*dgj5LMRudU<ClEo9U;wQ>gc6Iy6Pd@QftZxDRG{LjkI{@_?M
z?IJz)EkE&Zx}dZeK{GmtDBprSdmX_shBOV#N?WGcHQ11B9Qr!iV7l;>LzmyrStVl<
zW7Wj3*Z90}S*){IAKA1sJ>$}h>M`;{SKX4#((QX#W;qrXJJ)Ti1ti+&b4W=(Lld5@
zoXEyJ;O9aaq_NzmE-2W3Vs_#DC9SiZUP{$sjMU;HK#nRP7w-Mp@ga`KC*goAC1$L`
zGS`B5O;|J9tUtqx_Tb~vMC=9%aX4`In_jjhPWR%i#7|!6W_9kaBwXd7TA&n_lOsUl
zWC8!H<S0BL$$VrR{mz48`M2bu2+5Grd~8^q@C)~6ps&#E$@><X_^_3bsBG0Z4tVbs
zBSqiC&oQx|7lR%exnM5sB}(!cHQq*&Ri=XMUV5q}$b+3-T$7$w0<jA#q$h<LcH8@x
zaq+{ft@;s2fByR}?5NWwD36auSYBuJR*t*N4A0e()Ps`3vbGg98>=wp+;O~m8u;Aj
zGoFH9SMTZ8xi@pqHJ>q)=Z0(^9-=`9XCA_H3^Xu1DQ^|)DR}7Q;vmv^(_PMeq2C?H
znJu!KJNV{uYHTx5NL+~W2r1G=?Y2pXnvD{c;DXMBx*1yw!Ao?|{2N^4_=tWG(pfKm
zK;WW5Wj!55*r4C%56oFyEo-D)fFk?!fbuz|ub_Qo7lA<92VG5suJxpr-<P2~d7PR3
z5=Wa?d(k&qe-*7-E0`6+O9@(MN%m7rY2_am5IIaV-AUHuy*aG#T1#0opQSAuHkCx-
zSRZ;ZggR{fbO`A`g62QVY{TrBL6IB&R4Uke)W`b|wf32j0!jNt<#{2Hnv=Pa%#}SM
z%ib6$yK2OpUa@G7Gzi`)y&9rMQ4w9Jp#w+}rcxo9)okYAY@u@G{qP6Cw}K(DmcZ=B
zfkBFKTo@iFnAiocdGyBbDB+rh#77(_#We@PuVcjc?u+wQ-ld4t{{r;Fu%uVpt_~p+
zpo!wHnH9Eu-#&Nb`t>Lfxr+(3M%T5hOm@vJGYY=0Bb-+_Cfo>YQ+2MfAbD;!&>I%)
z7tzcj^Df#+@bI1c=H(>csLh5$dcF4nbyaVZl9I9@<+|2uvEAlJ>|aASfN%+Djap_i
z;h7ZjVJyzR2GMq>kK(~{$EALq0yXVBVJF}2c0OBw+eTqzL=b`P3V-gnS52u|_iNn=
ztZLu<S5sVF`w4iin1wm)#A5>xZ!(dcGO{LM8A8)X%}^@9Ihz(O@;~tFg@=bG`No-L
zt9E$6y72}0B~Sy=`qH^_^_Ib~{yEyIAc=B+@{ZNcQMl^$j66;Vy@iRfj%E?T*=#Pn
zlao7*w>yKZ-;$A*7cQ9hye^M($S<GbjWx@enr_#<c*)!R5Vz*13DRzjpq!)lRVmh1
zrhRj=Qs*3buptaCsd8PYzs6jsz_?0F@t~jch0Vq%*>ZfqT0}-$^ups>&*Q{oNw?-4
z-r@<L@A-AhWCXC*(IDhnW{0q-D*NhjXrdB0&JGUblxO={tc!+mWPEARyfgNOz-NpE
z>;R9EXVq#Aw>#U|y}t2oAX5QhY6S+=MWGO~Z=^wII*5R;o(ufp*M}{5^yhQ^@Vk6@
zkc(GQ>&rew(%|K!#+=l>LLMPhYNlB3VS|B>x`$3`o<?5{J7}iLe?#{e=sy{!<;iAO
z582f2=@EEK?)ki;nWKs?p3aFe)TUs1l>FxMx(znd>)Y|w5f#va#b-$Nez09*rkt%!
z114{Z-f{igg|U+nL<E6AcJX4AJ}&9Kucz-sYa0a%8)#+!$*hV2g8q%W|NAeBEJRq)
z6jtb?_WJgVMc7g=C?LN`BdqOm-7x4&l2kU?R~1jg>piv;i0=w|Ro*e9Ec^(g9Bf=#
zV;n$z60<{H>{Fon<+h*lSmC3K*N>;S&@dl4hI7(d9`Srx_JucEeTC>P8a5O`HR|y)
z6_Ew*u{K2!@{)joh>eHjo`gs2V9Q{flhayvKHM^07Xoh3QKLJ7J893VHzm$0NjmRW
zG1uNwPt3q5$|;V#4rOyq%Gt>!3N(KKd~@pgm3tzY`a_+wp9S?C5}xJ>BEm}Q8KOXL
zZo}A=ke}w(*(Gu~=g4UNyW;Cg@cp<u)LB+ZtECl6^;2Lq_x7)IfMA0_TVC{9>ZFaW
zm6X-TaPdh(rb5K4=c($Vh%sJZldXJ@A4eB2S_1~|RaeHz6Q7mIQrT$#gMgqgrL{N=
z|C<C}JAH?DKV(Pq(r6VL>pi-Z%MK^6`XAuv#n7V{;5SCnPp{s~u~%hgZk~0Uo;Hl>
zOH+*ope0@N@{a(#^u5KP7QwZ{14<(kLIs(rU*^MoF?)>Q_!_&q)52~9WlL~p<1y*N
zUW%kTkc^4BYhRD-aNIee5w#zGs>Qp%vlB_pIaACo#LqZ%{e0I6sg;NqYWj*^t!oO=
z6O52O*PhP@@wL!XQwxvw%S(Oz`t|jgb~}Uo$`=tLYhvS4DFr7|)%MehKqT<FRNzqv
zJ`x*^kIXoYzY15he3J*!Lh!iPp)(-CixOQZG0;kg4NcQ6AV!Y}tMR~A-Ne)lmGL0S
zu*l|dToULmuwwHaUY1s*sr+2K__oXQp^$y5X(Z~`nMFz073L9yjOVgEqm8OGX7hG;
zk`$t-ReXdZMJk^`N!)KcGUS$s)_A4$RWmQAY>zE6nszQ5zk`lRTOl!&0%E#CsiB1>
zsFY8D1bg9DdG`!a(C9ybVhVypqs<k~$D&Nr^#P~vQezNQFIi#3lktWkWRMW$5M{o%
z4;f|SFBZDnD>dCOZsm=+R7@cb(oGf5r~AbBil_Zz3iKL6E!G%a((IT)`BkOInl}hC
zbpHFOlJ<sW3akQU*NTm>6hX6Lsj*U<YR(e6=MqH<KVI$N<{dO@)E=O#;%U;!x+l1}
zi`#wx^wrHx><|_|4N|7gw@^}_4_jr3Z{qJx=Dq*pqDH0rraMDS$s$;zi!=l3mOo+D
z2?BPJgI>rg6>N;nFrEJ}kPJ~kVYU>?@AN9FQWp#l<W;UMH24N&fbfUzr@yo3F?AB*
zRY1T{R2-C^v8*vo0QP(+hXxp8QdzE5{t`TYmHh%VmR-Z{o^m=hNY!j%8rb<<m$~tZ
zLm+yH(!OeZVD7WBVeF%6k3sVARok&m5iW|hUDF<EYwWAczREl7zqDyI&Hrj=aV_bd
z%Nhs%Mn)cg+Jm#RE-i;|2iCV}+b0=m6u}X1vGW=lG9?h|-{k%1!BruCh_Ups!4`@P
zYhT3M|H;fv!gVLp`<`cfh27Mo<IKUuxJ=(U?N(3KG<m-}Jd%Yp{h8b0-8OOhRm;=4
z;N{V~bkp?5iITgT-|>_9Q`e;>K;?gLM)BN4!b#KumtPF1b!zBvKOVUPTRDD=!<YPe
zvVEbeEqi)-JhAx60D@Z=CAc}X(Cwvz&CL^Z8?Lxpw<Tm!!ws*LJ7%Q#oq&={`Udi&
z&Ry!{k)i+IhW`F5IjzD6|AXzQ&v_?%5c%}Otr>u2n_OF{kPr0mIh|O!$<zi-6(l29
zJ&<w?^upf3Z3=;|4=1uWq%?Kzgwpd+FrHHkTn&3qO%Qi`qm`?Lv3=fkno%lzXDC(R
zeTcqJaTq86^h%*|nO&ReN<o=M0L-$}Gf~>gU;VA%|G+s#Iru(FDt%L#Mt=_{CZOn8
zcCsZ~wo+YK_H4xwkUYX^RBm)+ZfA7gDeWng#qM1~ulWPA0j7w0apLlcqN)+{)>>%B
zso#0)$+Pblw__i(Otc-pWPhe;Lb&iVT|yXG$|Bz4fbXHHKp7=CtbAnw%Q4+vfv|cE
zB&UCP-TG3U>N`;esuTL!Mk@eCdAlc>qZ90l?`3xK65i|a-BgK|aL>tmhHJ#)untov
zVg*pkB{~^7!Y`XRVktmoublFV2HS0;x%We;PF5GjU161}G-7Cn76=?VKH5}9?-kQ;
zSmsp!bB$NGNp~3Hys!q!Y^aV+WVQS~rWTX<+LX7SKE|aBtWY4NA-@zpFhH0KVNJC<
z`_&;E#1(kt=dLXz#D6k1*qcQVa^d#sf(YR+|3k0M7g3R#+A6bQ47^U9vlGo&4c<!m
z@E7+oO0)X7R@1UOl}{d;tcCDagO3xuV#a5)xE3-#WrR!zFd$IY0~<p&BU!EimaCV~
zLA6aWNKK=Iqn~|qWxH{(oq@;&N*abcezy8N7)(N8QcKM`2%L)E0|H-_<Bxu}gY~E%
z+hqG|UOJU~PLbLT(q<q~P&d|Gi@Voxb)nR6>5gI?Z%W^y;%O{YaPcl_hunX%dLU5{
zbdj~K=_nB{rc~T`I+Vm?O^2uI+S-8ly}1FkhKA$CLIc-aux(7w_2V41&dT8SPIF!%
z^sgC(&Zb1Q`f!6HH_t=wwLL_8GmHF!QB3IaKz^P5^8{iziSa2$MGT4m96>y#$q3<G
zma(1J)hhuJ*nde4S5eGCnXWMHQhILPI+M9iu0fqirVv$h{&s)eM<$I&i7yr8J*hMI
zF<$aayQ%-2+DQ@eF5j{*vkq4g?T{X^aCHT2RUy=v3CRgI#Jnfoc(~Zmd_}g{c?DxI
zOu!b4Ynl*N%B|#hKPh~AMaiQtjCOaioC`W7`<PZoy51|QrnaR5IJ7bC0Q%VEeO~nn
z@$4(_w2St+p3xo5)SVY$Y#dQF!TabDN8H}rKZlBGQvTmuov3>cdl&k!w5}5^!5epS
zqgrC>!s-_YRDAEKzrqAFpD;lieCAuH*j>W}#6Dvcm>izgb}kr%&1dz}3-r3};eAAc
z7mV`FFHEs19_czB?`e7zSvGkuKQ*q~B&=5+y4Imn1QIf_3atB#khr<H&A0npjCC7b
zq3>o}Vh!mc-+2|pJ8q6k*E$|X)S@@@4MLV9`7|9B6Zwmd-1Z}qYrNYW8(b;W=#2~?
zIevz6T1T>7E2b@;j})x);CnIs5-(Vtgjw`D_S`D1#`mH<qb#P3j!h#(J*3cH4Lf+8
zflEW!5Mw>Ut||%9<uqECjqE-+VQ5dP_V)`mhsHe`TtHLtF(%oF9*XuZ><_gq6&lv#
z>^0u)p`-d_HP}>`bfg)ttKh70l``I|w=z-FjR9EWG$F5X)@Ho%c~!rP3zGi+g`J8i
zl!UMKpQK5Ewj2+BGpL`WrIY^FL_R+R)FlhfE;)dftfG2?es8W~hC@LG!rg8IH$mU{
zA?n<HTO%vF<OA7H82*_chW?5^t5ynaWS-+3&BizE-mQ)}v1;xFv9IEbO`kIQmxHTX
z@d+$---d>UbWiL$FA>SV-@<62i(N-Xp+Ag(`--gFUu7qjz$C)B(8U=+bQ@n+m37Z9
zR%#}Z!|AC`Q{GWv3Wc0#$?$63@BggGqf=xURVeA&0mstPm+Nxr+~sQU^0i|=&s|W&
z6*8h87UfAes@>Ju&o*3fgHnHI#yCWM?%0X33GpQ%>&n&{s%Rq!8&c+UkRxF2deEGB
z5i5U(uD8v{S<fO~wR)PE0d{&VEH>sPNcB9R!ugbM&0JkMaFMs3{+zWCPg5vKAH}(s
zw*^6kogLW61}3i9zA5Yu*qm%wLZo+m4GPP86nLX`e>}C&W~f(<7tq8_t^3OwkZFPD
zJt2yVKU&vNN!3b+ywVVH{$h4ZcMnwfnQc2i?Hh!F;+?hv3BeL5)Oxtazq|Id7genP
zfyc!-1ynOc>CLY7ARjUhSwF-V<{#QOIZ|e)Bcf*-W~&vmB4n;$WiM)sgHuN5Yv}Z6
zt8nGV_LQz4es4Mo`Y<MVMf(pRqAw~;+`y-wE`Qdu`%m%EQT5IQ=bT2Zw(R!Kj>cmW
z<-9N9vTXK-G1aizK#WgNXP(Q+b)PfYUyeTWOk^4@F|1Di$UtxM*c>e|uV0p<T{*1i
zi*uaawVtb~Dnx}71yBj~wety`Z3ViOs??du++k@_0)om|D-}_aAIRd40n1LPnV-;(
zlF*&7sM*IC>9cD*H;`9LP;MvwDDOy+FA=av2CY`Qo*~Y4gG}tSAJ^s85t?dU`<-e|
z-JH|Qo({21M|14ZtZ2^YoGobDR-^V=nxyM<18_X~4PGoQPZX$cZwELk&qRtfTiKb#
z%3N6zY@r-)6br3AYG0au5}7W{ohE;_*eBDxE%(&9FSO)%!yOA%<{-Yw=+6N(`K$4S
zfNmJ1hZE&m$ZSTl8O^~(u5h#ZdKtF5YG-*&Irk@S_n&}v0mBS*&pW$No4aGydB5s?
zSr!j=DnRj>$^J7fjd5=c-Nu`xk6csg37C-r3hoHW!jM&6mB>49&Ccv%s}oHI;5&~T
zEWU_|upvHQi`}@VHf7Z*H|DupW|4&Jq=j8n*zZ+VDu~}AiSV3$<3pQyh*%4;DYMTX
z30{1{!y>5_b?x1pzH3UYrw)>U)GwMUg?M~=Lb$XeTQ2zg_QTs~0nde*TKb)V`dg0k
z_1WEfGmQcb$5klbrFS>)dC9)%#^gO*<>RSSUP3czqVml=5JmMG`>OD-U%J`Nw_~Fg
zE$4=$f*QQ?=$)@OXoxa4nmdKyl7L<8jQpe$s**qSC;}0aUmNd}v~}EQjPvG(d36bk
zuD!b{Z|S@<@y-223%Cp^Ru*7SoKmGJ@iMtWZ<hD&YMZ5VY$z$O(o*RjSJAn?Ky$?u
zUE@YimXWRT6WcQ`-sY3jwZ`fRCC-QvULIDvLP_p$w%V>`*obG8?C^!IAQ>Aq>O~?-
z2jV0V&JSyJ;ej%pd}0JFG1;H{@!7qMJoo$l2lpzUU;km#0Pzr{$k49`%y|NWIu@G3
zndR`{6rk74R9mGrm)W*FXL*svVxX-UbuaKH#6!;B10(9ImLg{J{#sWW`>rX;ia-Gg
z*7H2xLH=~mhe&p4n!eopjVahM<fL-J2gezc8APVB7G7R^hDLkD&iCeV{!zI@@N(ns
zT*+)rn`oXF#P{gY?6-G3$X7KDP2O_U>$q(X9x;Tc(q2IV%w@wM-70xCOYtkd|MO5?
zCl2pJG)l#RwsB1)*r2e~@N+6CVaulo{klO7mt#I)1wML`J$je^*c`uQ#zUp=+$&_&
z8y8{Ls$BiSZXv&lCp5}sYX}Z1cG#&}kM0iTY4KOB@EuYxz@qfVm5OeTS+vZKwYnbH
z@Hh!}=b@HzvdPRvtJV&u((Pygg~YrByz47v%ohtb#mGlxHrTq3>qwU4yA}Af>c}Un
zy)juAE%onoF8g@iZt7_`G~fA^mihFc%u}-@wge<^KB7{OeX+6GN5W4(4r=-h2RbJR
zognD=oijoIHv^iyHe^EicNfTF#`2L&`a0N>p9B`ejafGSfGzqEPPADMLVdAFi@cv^
zoEZt^NWUSRWMAM-7ndDFiSmvFp`}nM+rY9c^Nlxt0Wecz(m^h*V#MpMIb<Du%c5M^
zO;$ZYt4q$}`01Y$`5%v0%9pq|cEz3Tn+^MOZ%5p-iJoLhsO@my7_$oJHfkK#1%)7?
z-$JQIBAqxtIx3cDpWG=O(wy&ZF*Y%#ZL|4aQ5j#GF77a^ARM!>y|bs?A_s{XbE1_{
zF)@a>l|-Q0L&mTn%AK)n<>uYVisX!v_U6pa=d9JHw=&;xZmxtVn_uW!OE3Gx5RWS0
zv>e$wAqd@aeyc+|v?b%so1k^QdMOiE=D0*xmv(yX{?1H-f%#@@24VaF$P}Mrnb3*3
zm*vz>D@%)R6cRhSl_3_*7q587$3S@zagX=($*6gSK(7^_;W3do*O#GK-TPi~LjUnR
zg!<eF3_I82K!x%@u;yek;MURCD?dywz&NRrS*kFn#h_UPU^ORETUO{>7M2ayI%72m
zt0VV|a=gk+1}@YV?u~FIX?8A~9ONAfdJ=fo79-VQdvJ-oTC&~8QEUd#_C`&yEXRm0
zjeK)*36F&;VaBpicqJ~Z>~l07#QV9{<dn}W(pJ*-v2pJ6BgQ2KyPHc~js2V13uV|}
zB1ukXmqJ&hpDkMANDu2eu5eJ+D*L(^u{maI#%v*!^M5FV#G%_K4<Y{Iwx3)6Zp>~z
zJY)TAB1IAwku`#|#f5@4Q&-U|-M?L_zRv-1nR9$xJR8SFyEf{^iP}9@w&ZvDA?Cw0
zbx{(|qj1Iy+BLwXFm9;HJxqisD{(|i$GGRL$@m?o3e)4OrO0Qj$yy&U|DwF%f577B
z9BCFOHMHM9%`EOTZ<lxaX9|Spju#XjNAorIjOV9v{Gbk%R)6Pf)czSs6U5Yy$mYvz
z8EJ}~!-ukFDNWwb?vC$W1(J2u!=~d1)RxuJ{mkh#x@0_QZ9m)43Hv=4F_NEqoLwi<
z`xIkdGvOg8c8LNk0<lR+-bW712S`oHjyU$X%}!n5*sP^^o?DK;5M?n@WhB?6eWF&_
z3;%eZfo`%mj?B)=V?^<~uZUmC<$O&{qZ4$I&zKW5LK5|TJG>N1D^@h$lOX&48t+}u
zGPL>vdhOUha0o{b<9q?JoHQS+u?|iw*yHsswkqAjSLHv^h&hI)O4x|;r^%;i>Xb1`
z&05X*0^{~A$T3T~J&q@FJcOl00Ca3~tWq`sp<bC;b?Qzp${@?4T&{ora5FZ5^b#G1
z6U~vGRDZttcKWJs&buV}FnXxTTPjc_ZhWtI2feaq<dq4lD@ynKRG?LwJl_*B6#ueJ
zMY?b%B9U9b`98vW@MCJ$7UuX(dwLdE=%M}-SRyn+uy%dC0p1zS&8Zw)ERZTyYTL)H
zd?*-WgFZf_SeXB`5o_m}Wr`JbT>dFAM+-leo<LeqDaH!F6Mi<VPtGX8>*2H{Xc>=E
zpPrT+ydK6N$$^g>tVGkiUhXqCrH&W-x=A;X9pkbp@O&}EBPp1?HR)8|!{eK<Tp5e^
z^BTDi=|p}of8LhPJqgJ*u1(+Gy|mVr>H~O>6|FZz(CHWcGcEh&>9fh8xeuR5$9oaZ
z@-hWg&|Ln^l5`|nl=@dZdYdZSe78oi8BDgXC}N8F7{>6Bc5o04d{?cOJ$>N2!s}t;
zMzq(H^9ei{DedZ!6W(d9K$Huci&%9$0m;9kIOiJ&dh>SHUZf3O&+X|03O<iKo!4wR
zY@aba;{%PN{ts(!9Tj!ky^jil0xBp7hzN+3gfM`BG!~8I&?(&_(lMeUA}QU7ba$s9
zUD7>+#1KO_3^2cYe4qC{-|t%IoLAR5&tK1SF`u|U``-87*WUZO^e~$ldsL8~4%=ms
zzII<CS+dCD&*|^bwrXu%T5NzJdG$#~>ACh@GG@hSsSr3h%P1ATo_uL#7fGaQ_?-kN
ze}I>*Q?G)s6+;`X?EP+>zWR$<lb*&yx-_=lWR=J3qvD*UQ@+H)ncLELU1&vk^~G2C
zbVNpK_Fo>Ds{@h0&$+T2yzXPszB!Yw7)$E>c%4z0I&@T=HCFF7iS}JTOyd)G!(Xc;
zKs&`)xAE}Z9&|o-=1{dWhOJn^u)!hSljp0cTWrPZ+fxx(rfGsuk(i6bQ-&<K-SF#f
zXFVC%#8yVwGiYw%$+~=e*8<GbpdVtv<C?NKx#!dPrhtAVz%;TVCwZOijUDH@HRTuk
z+fhnOGbw$rpVJ&vVJs1DtF%AVM^N$Clwn)?4aO6h8gDGTtqR>G`OeuuoOZ^d&yRlZ
zZrnd5lHt)ZH&}4c&SN)VcWiqsW?V`YlU(;Q`LyI!<;1Y7Lex(^<bnNtp@#-ly^L-t
zYzM2YaKWC;OUo>j3#uch-A-puH^fR31HXnisfG(zC|a;n+QFlN%j9X^1TI0xZ+qY2
zfPxnSTRv5=<gxhD$lRN=5Zz!95uQqECnLuv(}a!;Y2>G$0plZSFTY#cU;1_NO7G=N
z1toKIfij_`F1Ni>ub73n&oRjydiMSPeE1&63%wgc6-0BFTn6aJ*)<AeR)<-i`yml7
z10ff8>b!J#(&Wq!{l*U01=8Am0nOx{<nzb-J|{RMI-(7-e#80fUGcV0PIBJwMvv6{
zQ*t%9GRlz}CLc6!)~ufGF6p;%k<*LXyH<`F*_i9R14f)Fs#Z9p`7PVu1(T<n^<-<a
z;IZPp<NeC)63bm@LB|*UJqLWuk;^QXudZSe(-fmektzWEHWewKJqe1BTCXXDi`L4J
zlYgt!-#gqegnsv~kIPGGJmgJNWQb%}3*FG0l1qAG`i>^15o8jlVzyB>M=k+3dg#R6
zKd2RI54Z|_2c$5=;rB;7QJCbal&9y5-4S8*7aOCGw&%1+SUUELK!GrJ$(^}2^JMqc
z-lxYZQVN=Gi09~4sfM#!w}6Dkt&L9k$ts)dFsmI|%I<kY&pAQ>LKkPu-`@P+rKjIY
z91(nYZg~E*P+mi4OtC_s^xEcBavxirvfI0bPSGdRtst9(j{a&$lZ|~cJu{DocJ+E;
zzeyQ2_u;$P&zzJ#i8|M9mAN*j%E{HbT$c^FDn2Qc^O^5rKKqI=>JtODk<0UmC<JpB
z0W&>2zq0AI3Ch}05najppDW@yF6ux-C(}!)eHN!kY~OF4;0diI@F|cUuP!a}<o26O
zLbqQS+vfVj8@&PNq4!>MMzO(XkF{GWB|~bd_iFavI=Q+XZmz3IPs-(F6;*>!x8OV!
zKxJmhPw=akY(>lxtR{+>&vAFz)s92~c&on{AG@>GilNm>A-OeHo}qU9C_wGh?BjG5
z`p0sr>=zE60v(0o20LTFlduQ2q*`L%VmYRqwcQnu+s6|mpwS57>iRVihY<uG{(AAo
z5{0DG@n^)Tk+X63Fk&$pTJmf5dABnvk~3${nFZ=FWpC<&;>XFK+U1{W(;z=OR5<P;
zI6%E^)W^NjgE|wXj*b}RyCS!n5@3Rfb@|Tcu>`ren~JoH-i(Wg;=bbC6%l#)4JE%^
z(A<Qne5Mu1mezAN2eE1pWU#Tc2v4ol&}E0SVq|Eq<~#Rr9vPAOY(l2pG+wr0dy!Yl
z&RHH_Hj?H8sKoYyl9g{C;?z|1^bBr?xURya3rCjb;<nw~&Ua?a6~&#t=DDl*B&mIi
zh6?w8j*k0aD2nqOmJz4c#a_+JsDU91qz7<L_h3HD;&Q7C?|{vVTR-CES;=JEYg$b@
zE5cvz!c|w4Dznn$DKtjctM9TqC-670>@9qeB;S=exk<P%JmSH#l+5t@SKIr$?#?|M
zO}N`W>sLB0a&k7e>87ApJL&1|z#Q8TlRL8)e71;sglARW&7^~*q=>}1`D5QLK!wMA
z)}6GJC>+N6^yDr}q=@U5l3h;h_=)n%6My{24{A1_`IF*}aQr+2`g>;q>E30r`yWU|
zRnc7|s5w%FKtk?O=*Y!&2<iGTS=ip%&O@t@LRbF#Nq7Mlhw#~lCQk`tb79;R`s-ly
z3CyzhD3SCC+$vInPJ18e_Yp#yoZIbfP0<6ngGN0>*+<IEvE%hoja^8yC1A_~s;@gI
zJQD&nQntI;9u}|<VT{SgD*@$ty9=i7Ls>5L*_v;CE@gK{PQFI8KWy{Mw%lP{=9RMB
z$9`a5gyjfB-Uvi0x5Q7SSSGwq<2=)KPdSq{IvCzJ<lWDg;*3np3DTb&VaqEhPV=0!
zFG#5K9NVNXvGt^`cEb33ioHrHE|eI($pdRz;(6W2A6tA-)Oe68tR8-wsYLF(I@yDf
ziLpQ%PKTH6YGk)F(AM^LuQWo2JK`svZipX*?b2W6nz~XNf3`aIen_Zm9j%xS`qSU)
z1HV~$oEExgq1J`ueYttZ%&@^5QO#3&m<bSwE7_CA89Dc?6WVs3YpilbJc#5;V#$qY
zUDY#hRR+S1GW)6*iC=8qM;#_a7qa9P2Qp+u_OOz5zWW};SWu(kGUB!6g<_|*+VO1|
ztB;G?25WU#lTkCK&*iB$dz!@PPp6^662Q{V2@j)afkP`XC2dkFm1-|Kqd2o2P8`QJ
zIvt_-728cNBip+sdl2U0s`k(HV|L=|AK_u5wkiYA^;$(u7VE>LD^}zDXn<xim7@7V
zW35TLGEH~0ex8!aL_Tczp-RR=VIxLgJG|sAzhw1#arCKEVlkuJOBc7TVVyV<eMZWW
ziY?7G{P}fT4@9x4Or$i$HLIfrzssmcU^f5dw=eI(jAqEIqN4fQkUTKd+U@WM{rI3d
zNuUVk>3(JRS0_Hc3*aF=J-w&m5QCcTt1$AP?>&aVp5!{yi3;EJ#<XYMUe9PQuVpTe
z);Xl@W<m6Cj|Dl63u--a(c;ai7TI@a;%kh5pjdBkd;KCf=!#Zylnpw>(VWs_4!O1`
zNk>i(vNa!ttF4Qv7Qo$XCd|DW#_Zv@r+QzNGXM<kR-L5{du-{in5(hn6Fjtz=^t`#
z7qm=0HM3Q=4Za=kSDDYT-;E5Lqsi!aN`B{{wugFLf+t;`<N1^#zw-!tqN-$B;k}u*
z{4e|HKC~_83^hfxbGdlbWIZO#acom=T9expQ$}2}_|w$*_4~$)PmJD++Luo4(Gr@R
z#YB~;K>0TXEfb3ci<;`<9PbW!jF8zvGrAvE?`~B)1lBvo9G3Nwz+}R^@E3M>+|-mj
zi`PWGT14uJLffN*8q31UYx_HweT5ed$~Tsq>coy~k{d#Atx}KG3^tl7IjhgLJBPPE
zr4A^7U`Cb~OXQ%R$K<wkElme2%Ud60<boj1<~(r6qkpnQ*~`FF-0gh~`J(U`T2lz7
zt$Xrf>V80FLRrGfr??J>wXjT2?mhc%e%pFO!>9X<?@b0B_J}5&c4~^bp3haarCmMC
z(5-ySqNOQRqRkD~6%PRw9hhyZj+Z=YfCcQRNZ}vSiEKxm4`CwnrMPn0YTTQpZyaYB
z5ysY7H3lX%cIRXk>6H_Apm-^JW7WNa3v&C1!boU8ozqT>HH=(7B-6Z%hrBpsWS|LV
zCRreK>dAb+Sqc7NoKX{u<yMXwin0+s1N}UOIWaV=<j5-(UX)GV$s}!0pbrE+gh*Jk
zpTPU|>v(Ez4HSGHW)B~-OMk<=me4qY=eDvdsSV|_Q0o~b&%B(qm8Xx*0KEeI9;&3k
z(^frIAK-Y<K;VMei3wG6mf2DHQ>(2a21yk2OaL!2yX(C$z0PCYo8t1m_#}?|`4cU)
z<CSAM-$lQipLP0g?uz*laZuWv#c#tmqq!4vu!mq;3{j7``*}0zCyYE)PTb)*7=hez
z^R3JI?1eAqbP(d07A21MW+scyVmp;P*YGu<i@C3FGZ5LDPnkSszj)AMJ{tc{w{j_;
z<a1%pXT`IE;D!D$K({oO`}344m5UeB=!vE}HXV3j49Y13OsY9Q*whkRs^Bx31u`JR
z5Ar$*0G8)-T*C&T<NcUxH6*Q`ZRj0>Awi<%YlgYl5?3k7M3v{_;?z=Fb^(%SQ0Jac
zvR!#Ku39U~PT15YB)!kkM3P1D&3VQ{s=Wf)+Qy5+ABz*MrORJxT}&YObr{3;yriSb
zj?XlZXkSswp~=jpc5;;!@0#2s9@6Rkg8y7s_!3tu2&vP(2JswB+J98=z=j;Cj@p^Q
zXdn<UR~2u#S5CBIO^q`BdUBOdB{^LsF{4Wqx-M1~Kow(<%6$J#a@FYT7{TquE#G*4
zMBxeAwbos`RT)Z-5bCiPgk06=`B^7sYT>)s`-?7V60Ymi0fvbEiUutS@V|jRa^wTW
z>T|>ce>#NTYqNfeC)`WcFMQpWYFPrYwCMkB+z1En9hgF<E4%UFUZn)Un4~ncUS@*1
zcf|s>k0Ev|g>xR;)0U=^n<qO<CoMdl2mJAhQB=<S7k39zt8d{f>r#cw?S2mkWE=Lu
zN5-r7ah+*LlxD}BSx!vz<k>O}7$M!LLncHGG%q82U!BC@v+dOl^6%wcj^T59sU=ua
z-J|QF<egC3a%(r)OFR;nO{u_k_y+;3yQ+XMy{la-O$j9<NxsdwuXf>d=;ffrPh7#*
z@F4?_p`4cG$dcnNrp{!+Y7V8xJC?b`9sRoq-=W_3A1ksM0Wf9Tz^Bi3>e9cVifeQG
z*v%M@5X~$I=tl{(!6R~H-H^jFYUB=-uqE&+-ZjN_GY+RYZ)i(p^^Z=un(UHV;G!cw
z$Gl@3-6ci}jHyI3(dzV@Ec#qbaYB{E9gWbU$lCtU;Z?#5;I*B=6wiJw2mJMugG4ut
za<M9(V}!@(7aq4ExfK3z8{BnoG(Q5CnsoK2z9^N1Mz?rwL92TwsL3hZwp`<a*jEe~
zcg3)!q{+ld$dY#$s!bx+mi%#nt@euT<rdf_t3wz1)5J3Kttq0)Xt&eBss4JkOAlq{
zQxNat*7zMp6NnJlXNQs9eq$aFvwhHCr!Sokcf?(v8W1Mzxy+gO^f;J!Nc(aDjaNZa
zVO0GlgP|7&zT_HA2*YXEY{t++aR0<it`k&)0r=2(hi40<pRl8c8X$wf9)faCN1@XP
z1#EdU%Dxqa2)BEfHF0x6HNROMbuN>-N@70LHM4ObP=~Uu=3$I%eIMTusY8-pK(rVI
zFi7up?G`&<TRlQA^ap;nveV?8o96|qM`ij>=@xxulK5-wIXeIXNa}aLW5)Md&(d?O
z6E)h4@R+%3fkF++m3-J}dz8<<q~oGrAt4z%omz2KDYB6=i)hxJYPjaxjaQsAZgJCI
zd($=5#pjhd1)E<UCEdUsqqe%)&uJ_KRUN4v>x`Q*KP%rHNsB1UQI^g*jA4ovrSk{Q
z=JhLWDQe-}yLvaob>bM?bTq~+22+(;1)T>}Zxd@8@)M5cuB^LZVvp+FtnWA;Zu1Jd
zpGVz!<fwWs`ld634%Kw}q0xmJ9hPIYQuD1^Urc4>pkDvH(5eP*hBYtH%pAnN7>@Ix
zyZbt{9u}N4XRm%rS7}jsTH%?TrfjqYApKD<l;fn%JL(t&e?yRnH<D)U`qAc$wOn-w
z&uuc6J=I%z(N)DSyL>EZPJzyK+85@?ot#Z3662Te#E{7P%rG`f5kfmdeZK|aT%yy+
zE9Oy08+L7$`>Is5BHI)p&o(x}?77=HF`x3>*F~NLQHcG=MJH3Y`ekvQC%Ij94X~;9
z$`Z{-FM-%auu^(|C}2V$$&T4AXMt>b9)7s-M;ccWSbntk{NJ80P++Y_FHLy(;_kIe
z91&Lp=sq5i6&cC1r|!Hlyc{>u+shB^L<nF_`!>3RStj`xdzUb^T=R{`KfpUwo~_4g
zs}vYYvW~dr)Va;GgBXkN$#;-P4c6LH?0SykEMt@M$IGuye(egR_jZ`_8xPv|tZqK|
z_(0ug+J(GZ2g-FH#IA%zFHbiRQvn4haL;9gB&?d3IlR&D;g`2L<EYPj<X6m9zN7rV
zz3+F|;wk$=6u=S@GKI0Lt2}JYdnqO-N^kffnFVj$+P=OwsdC@D5oKoRz4O^?r@Pq&
z0Ge%A(TchyQf*ul){ZgQfN1z?PrE9#r&7@-RZQ+M?J)+Qr^E}I4dtm-J31lR_T1v=
z!QGW1`|*W_Y^n>PqbQS{O>I-a@Kxab$PfRIi@VatcCe0ow4!ZX`k|7d)2*RFW(cBA
z)_Z05xnQ;Du1^p8uqvU!U8-Ql``%%aYiFmHp2^U6xxww|$SChMXiUgF#naKilV*Z8
zF1WL-Gi@!Kh6r7j3`a=X)0vRPTp_yLrqer6qw}Qn<ge;IM7uXYe?Lu>J-3a&ga1JV
zzSBC+dVd((7mnM*kgqc-B><Stf(&+E28Mu<kYITP<TuEs@jm_;0V_TBoO#JZ{K*9O
z3ln4$g`z(3Io`}XWk($v5DYxP+_#pE75<u%hwympe%1g-6bto;W@2j3X4(oX)&yGm
zyg~QB_Tgu`cq*TnU!|3wiLZrdRjFp=Ju(y=)y-C63<yN2tDY#JHSoV9IzAmh(@=%E
z&`1x=m|+r^2<~nG^!ZU<cDQtT671xPSU=5A39+s?*{(OS%r3MIxy%OqjX9vkU2&Su
z_KgG@Ign3T`lQCG)!jt^YU}BKS<qv@fQYw0ymGb0h|_<*JqjjS8R3zmQZLq6y{8Ht
z1MT>zM$Sp5@Tg4zfvLJUMdIb1ZnlY6Ti<#czQV_MiPvI4+W_ITac85kj=#6|<HZf$
zMYu7SoWMcfF9Ap)HHp2B)@pPw6Le%7Mq+*Ma^Flup|`f(9vKBWQZH3195JGbC%dS?
zRi9}Sn$Gr#HlZ~y7~!xdJMm_`;$GwN1j2RpTMXGVimNvF1qVH(JBd|ol5VE3x7nZX
zcN^j(<&X+2*nqu}jB?M_kF{Mf(%6Kg=Q2egiH*UljqHhxoRd;iyEA!jC9xa$IM>yM
zuB8BXfBl`Hkt0yqa8<oU`X{M50Uj$r6{YXpe)bxqOg__wdXetKr+PkRTaDJU(d22$
zzIB7n!>=d2*FIw|S#_^|>1DLt`Jj?BujV$lKWJh6G4Tw{UiQsZ4|N5?_k-A0wFVil
zK_GN3d^Kxo&{~p&YI?CkgzUD6Wx7dbw$)jX12KvVdECqZ=IafakJqQPORSc(R=6z_
zO*Q#Gn}>rSwY&KNOFE`3C~AEG+T^Z}xfCXx>Nk9R&LuYjtM{7t+4j+N2JX1fwJsH9
z++eRQtF6w(c$SG_zao%aWFxSt7$SojIqui2Xb+iZ-c{2SFD2TUy5a!S=C8bJt0S`^
z;>uaxkZfCRA4U95vv`SSoE{w9``qhRlu;Yk<ho83+D&Ka;yGr<h5Z0_;*-Z}a{jj8
zv^%9+Wg|84r6^9*fX^|g%Xd{KNAu)NqU-ykt`HhBdDJkL*tqgmznO3FoOEfZ+j6rl
z8xEH}R}Y8qWXil$HPZL1b~KmfY=s)aPdvV&mzdJ@^6#|`Q3?fW83|4y4Rivc59PA6
z#f*_Ej8bf|GnGC^`Iicx9tMn<bIH_=vq8i)pfQcsw4@8x7SNdf_|B(uZJ$|d70=8C
z&3kSQq}QFC3po!AneoWxq-{SJr#IUD)y+>4b@8Gm;fuRsk8E+5;U&kll1yn1t#wg{
z!J71tO#<l2)og5t@LABn19!L2Me!C^yZgU82Rtn6k_ChIGdmw_zn2T(2<%3~(tkYt
z)u7j~ue5q-aBD5;jiyukhl-t(bsbi4q}RFaj&2nHgTsgV@bY(hl6Q>-P&rosWCAUf
zW3}xhyEL4O1B|KRJin`ZX>oTMs+IO`Y1GHccpd}8Ry!e$i_7HIXS1<Rj>c#37IPl&
zPJP(a#i=5BD5M`$4VF<Q`u~n4<#9D@m+BV!qf}&bKhFznh(c421b0ps*+E4Uq)Fsa
zc2+hzjhpYLz4z3tqC1#6$!fu=?&KYuBW4fkg&xHw(#D->Pljt1^}{b_+DS*=i)E6!
zL~<-egK(P0<e=l*SCqCr_upIqhq9y-I<dXbKO|?^;E@hnXM|8O(OvQIs1}Ou5#f;D
zr|-_J`h|<$Uj%67+aqyfZP_rq;&k=GiPtNmwf?vVeMX>K(_g#Vp7D*vV3}y&wDv`%
zr}}%41cugnC%i{2F0#{6iFw2qYlUof1iomiDL5^Rc4ZsalMwZyhYq^7d3g0VCRUAR
zoHQ0QeBxTS%I?HXj*j46UBSt9PL8a!_exjyU)$MhWoJ#>7&7A{Y|4WmO0*vzH)v5!
zq;FubhnPHH$}?Eoj=A!@G(~?5#1KRo>b@0I-YU<|bzzzX)9xIO0<`3M*I>1AA4uiA
zlDst(X{%i4eN0r7v-^h+W4vGc91w*7eO{1Hp^ipZWiAfbuua3X<{6F)WGn?87lVhP
ziW-n;K8ASeWFrp*yBT$3VIqn=vM-q;ygsu~F2G3cbfdz}{v(p*v|fst<Jv^>jha-Z
z_tdg&5&kwOSJwsbkWY0Y&f!vk<O-c7IK~Z#j!@o^+j!T>m_zUWn+xE-=T6rNl7Pj}
z3J$RCV1uJMc*X5%`C#2DnrFE#wYfJt@6FeY+|-Np4kc>2T$ZLzKLvwXGGV)h+AdO3
z_4X7wO86Xq*eEvH?>D$bp5M+f&8n(?r)bLSoTJn9dy`~a1M_=|u9V%%wF+LW#o8ZU
zDBlhvx-zDOvmVL;9L>zk%Ptawh{&3B$6F}|GnogsM2t&8K+wOz+J)@DFaD5=eMOZK
za^O+F^#!15+1D|&<Z}lw>5K?M)3-TC1`o}(jWdbe3n#q#2*$B#JO;-qKrF-YY))ly
zo<mYo+a;Ghj!wiyj=6B0OJGB+*h5!|dfn}^vplHZdQC5_vR-;WTy87!YJl{5rAsh4
z;{IK0%FaFLw#d!Aj|VhUEPDFu3}k*)ga^)y`nZ*zS@XFq^tCL#-bQ+9r6h3_Irj?=
zOu@}pR2s8}IV0r;-G2xWkNF&J%#U_e_}iLHePO2{p``p$NPRO}osWph$Zh6mt-O{k
ztMP^U`FIb(n9HeYx+y`8)v3TWS!v%Vv5a<WF)F`MQ~(1f>&$yMeS+53C>jf(J-oTE
z<(i)~_Y=Br(6|ZW9{9QW=wS7Ttc6<4Sh%Blumz{X{ErBsdJGS<*s^NGgHYu*nBI`9
zdkcxGfM#D#^0ZR%E3*}dyYHHiLvM*_7CB8EiQNS;&~?<WBXJhXm#U$MQXtj>@$vsZ
z2k7JJ*~Qwv9N8_McNXMM&Xk>BWX%q3uP@^ls`)G@g^%J-woPZhZ_Flb55KHfzvw?E
z=jiygu%^a&ErxpmdB(CM3B5&P<xe@K06HrlB;{D0Ur8Q&%qMUlr4iYx${5Tp6oF9+
z>V>~X7TO)~>r|}lMyifXY2i{X>uwrDJL_D(24Mp#QSM)Q<?f|M?jd+P%g1tVcbXP1
zmnIgFCNnwR8`+3-mu*sYbbMQQ!kc|@mn3N%?s8Tw7X=B{Z8+{gEZr|_<ifp^FcQ2x
zpvxGS1KHd?2^vvX9@)}63sMvyu&C|*{%gz3F!!~Jlqgfv0JhHsQMJfwe~wAYl>bG~
z{qo1Fhcst?VQ)i1LZ)}>$YkpW6kG|OX(+PEB=S6WO^9>+10pNzDMZI8VR-)j=+Prm
z0xYx^ki)z_x4202#{ERpPWwI1mBr>>zfA{|1z|?79lV|A<srEBMP$(;rYi?SJ{A5~
zh0*2r>6T3agiCKsxlUYmP561&LcgJ!BuUT9k%FPuM|I|g3e8S*2+Ga&WG3i6t%q5^
z&@^|NQ||%7MEKd|Z|4T)y7jdlcVxmIDHAYR(CXs?kTGJZzrGo@mmqKx58L)76V6EN
zo3xDkN5IW>0v!-!8KHV75)`qxv{Q<yA3l;Kp_a)Orv1y)CFFO8c0<$9s((`Dkxmz+
z`W-l54-dTQPqcelTNtu`ymsV8?5w8Ya_Kij2)k?ut}NeDe}x~$q;Rj;xShz(aq^E+
zybHK57`|TI%~oanvX`y;s5j;o0j?42tNo9e(_3|1Ohk*$%a(<Djr2n13t6oxpxW@2
zg=2z!XpGij_-F;Ik@ZOhH$Rs$v~NG);{=}+_%@eny_O2<JdeAI9G#pZfB2J;#*vgN
zs&pu(wd??i;;^wo1HV(l;8(YCK>I=%Xv7){^z-?HNCW#P^fw+kpM0yTk&M>W;{C7y
znY?%167NM~<2N2%dq#u49^(280=k$np&6Ef=w7LUM>jwJW-9IARBDj8L^YIc6{Bxv
zLe$f^vwcIcUzp!}W5a>byRM3qLGo(+dL5xS4j3^?67gd0PxkOd+<oMjMVKZH%=q}6
zh)+=nD?R^TAvvES@~V^_Ne%ny$U9ntGIMy_%?Aq!*L+@4xNaR~Cse;u5H+HYbsv1^
z_f%>gAnCMq0nyQwg$#vreJ$pLE+@<ru!ATD#is}md`YB{-wzW_ziO-ZScJ6o+K_di
zypP+prS-EXdwj)!<#Zl@k0I=3d+_2B*&h}|B$^%rd#MYR8xvhzDWweKQ?+`sOZ+-R
zXNl~m(eZAyo%Cr{F{AP1O;YwKV@HW#;vOJm`bZ2?XrD^l3s?hLB9V!kyuF`*GDRo;
z8`I;>_=u~!MRjKWHsC~2s2My3we5w)ZjF-%pcwd}<ZZl;yiCM>`pCtn6Oq3a^8V`r
z-d)3o*SRr(He#}V50b@!@TD+FLv2;NKNBbCK(jX_;f4?7`qsV|dw;#Yrr0KH7;_lj
z_Pp%g@&Jvyv(#mzmzP%yGsK=vL9;|7qfqo^!y=YaOXBWzpV5&k(n}}LFIxT@*ZaZ^
zvH!ecwcB4`x3HM2u>&Y$9C-@~?rzcI4(O!@==8*_QZ_$Qi-eJg6aT@C8;CWQ$X(NS
zo^u&AM6~zUEq+hU+>!V7*Sh|x2iIXFEtJuJPR{dC6KJ6`b3-{h1_Dwq?z*3H>g&TB
zf*Y=*&awNRVaX;M;40eoW<b&Vy2LC7za&kT5r7_1%@Zmgb7f43d;HirSpJ+~-G_i-
zc7ERY1JWtdiURN3ySD)W0XL#TZZJs3=oWwn82I-53c9I|wbFA;ORM6n>`wKosp%is
z4u|XM_(Uc$oKA8}5kgEQ!oC-M+%l`KUHwDPhK;-uBxd(fV><`yIxM#cpGq`2;0oz(
ztgfzBk&UlR3;>ns38o(Q9&~+QcO`9Ck}9TiAi!l|E(kq$JX<Z|vE60Q3&)a;e389t
zmlqRuuejFaMdGs^^MlZr)q~O?4oq0RP1qwmvTg|ZlO*N;@-EMWaDb8UX;xiEGR)}B
zzXSW(M;fb27&a}<iIo=ogRt@6e*#!R-vEA8AorOq+Jbcs-|9d-c^`A*!k;*b|8Xxr
zBCH7C+}smiH$V7eA?z2vR|GCa;JJHC=#R3n|GeN036PVzvGqv3CBb=$m0WC=1AL&a
zosRl{^=f$EKE4GOQcy6E4WZ)`lhtLyS_Kvspck0`OUcgb1P$10sl||-*MI$eokhTX
zDpjr1hyMqBGXHrqaQ_Tk;E<#OD1fG^k-L;27515Yu-Ez;->UQnjm7`t<9>RJy_Pj8
zB^Q@Hg219B^!Ly2Z~(&F?@ez)u*^vRJ@@_RPb6+qVhv$rB(ll#CMM9~80)&<0_5~!
zn$hLIxe&PPhj-Yua{mNY%a{5&R#;iW1gmgLwaGU2cap1bcL}gog+hT5LpM7C2CN%P
z0LD<~I71@&cLJOeCS>3R#oYHS@Q@5sejicTYdyglmW9k9$zQ(VIQCk<7pqRxwc>Y-
z^67falIkBX_dnkz_$Kx`V`I@xbqw}*y|AWqLkm38vj&gA-wqT!<Nx^J|K7C!cmD>o
z7=ORsGDsvb#!Upk7JRk<`!1c>M#AsY<Bu=plXY(v9O}+*z<A9;5ZhN>7VPRsY=PE=
z%ZSfWe_>SEw*(swIIG_**M6rJudtNH*ZHva9)#|J{$b$!&n>U(W9=P%azYwIQW)Ru
zhBbF{AWpow=JIL#4+F)2U#b|qjno>teHpt>1X%p%2}11B-|d;VLsx)x7UJmE)zx_=
z>c7MJ{W>48RVoO}(ucoWsAsIeF)6P)I~IfAy>$d-dzS+AcZ)y#`u|wOCmXP18K!6!
z-NEmC2pF%c0|)%9`7iy7#N7yN2u|81dR{0DM3Nk^hH!>p9{tzDxUyg`8^Id>^f&q1
zU)a2|((Gvd)EuCTD6<#<>;Ju<JUS2<2_AME7R6ZnopZQ=yU7X+RfHUg*ll}t3u{>9
zSi|zI?cw`N!@?4KxAcn*CL99_lAYBNc9|rR*dGDZ0v#xK^g%wL*B!BlW;J#n2%$H8
ze8DFRi!oclU4H8v|G#a@|GiOtib%m8)i?0NM$7h^de@f-b#VHpD%0I(+U9bfY@swb
z!xm^e-|@ZGPUedQlsMfXPfz4}ts>t!T@3=^-wrT}5YNL1_CE^Z|KmBDV(|dQGawds
zkT*O(KfC-IIqlX`;yQ5edyYy0d;BK67V(JLAZePEOaJG{&z3o}UY)H<FvqShRAJ9#
zDob7|xacbvZMw(R*txBm8MJOtVR6sEd*GQJqMF_7a&YJ~Lb8sn?_St3N@P`$JFiub
zYpkgKmk4$pl{Sn>Gs2Qfw=S>Ey?s21-JICC?xZ)_5!np}>ca16m3Dor9y+6G2VGE~
zZi8=-+UA91`+bW2vE37JVf_n;m}$s>^s1BJoAvGYzbar$lK$kpW}zQJq7ZQ}ot=6e
zdCD!bv)D_sz@0KOJ22n=dUuq@pK1tNV$x+XWb3=S|IANPj+~t>ybWVA;R3V{j`KRB
zf!?2^aeR^&#A;juh@;g3L8>R0NH7!Qw4-A$iMKk#GgXem`+sy#>3CBM%VIT>Hb_MU
ze^s*bny%8px^xhgZ3nDmk^xE6U!(m(Xywvx?=MD%glO6eIPU<S^lyRKSj#cDTIqiq
z%6~rH|AWtNevS>0yp(^(-YH&AHy%I=**gwt9?GjQ9)@1arI>n^H&vuHdS0rm&2P<!
zzq?evHWaz!hdIqvCWKA?C=PpI&1{@pz+8CoNIbi1*Ppa4dP7ebFSofNeO^ghtJWyo
z^RPw2pN=cZ22nN0^HC=$X-5z7{q@2!p@S+J6_|cAO&G9;G&ml@OPtUzER`Cg_BLmD
zBP5>-fL-_ny9?85TQ&dgOMY_wcW4C2R5bA@Vn~*ahhWRnS~Z^KY8(cVZNay1E0w;Q
z5;Gi^)+(_nk6>3-X$zq>qH3qK74H1S(9UFDk;hYnINSl)e47{;7y{!>9a#p<vXc+9
zO?wC3qUN=*o0kD>-qmUAf}8(sng5p!`fOeQ*I6y#iM!jMBp&UBCh1IJXb+Td1`{!i
zkKf^`q`fh1aqFWCXEcCM^CR7hGW!#vMbX3^;hFu6)<}7k1{)cFGL{O3TEOjk>&#3(
z`NcXH)8U4=QskgZ=RU?RhiKa^4UD5l8S6KCKY;b=-Dg+Nj|_+|ynW_5w8%bR4!Cdt
zbn|3@9BB`)VLIMf2y3PzhcxdW(oIJjv|;Q73*F?`<3<=Q!+yL*AJAykd#4r~Xk?7>
zlI2Bf6nd&zoMizDypCIP1$VU4!FbEu+}z6<`8SbAI+Y?p+~!@O`pz40b~N#wFt*69
z?si}C5=+#fLiyyi#g9S<we~_XyUfWt&RDK_!1v0E$m%*26Dv%&n8^9P+NxcXSBDA>
zij`E-<&9R}lmCC+)B8@<u5NDVj|cdGI^=21!O{0+XG~uZDZ80`H!IK~Og-3FHnOGb
zuK2*lA#S!{c)XKq*TxS%JMf$`C}M-|#M(oS_T|V3*0Am-G12sA#UT%-GEcd6+7#p1
zBH1I9Q_vzi-BpOi{7s$i^Ex&TvBgSm(y<x6;c^|^`KU{n#*#Mx1`iWVEn6SgJ6IFH
zYpcy4ZI?JHn~GdtScv8Ij;G$FJQY-Uz1U-hcc4?YZet^ir4Fd6(Vj$I@NRtEve?=k
zjUDWHOSDTuH{Kp2VYmV5&%by)<qSrR{DN=Sx*smHDTrZuY>=B!KV2~YXKs@$U|q7H
zJZ8g5$z|}Rhl=->eSRUr-tc^Vs#4{f=QX#DMJ93L4KBW14W8Or5ZQhEgmogXQ>*3w
z(uv4mD}Rte2<+FKspWy`Wrh#=Ez2XhYGJpybxqI2;}<v1&}`RXV_z$Ph!D~CNetjl
zlNo5nhdS*O&5`y#Kc6USB`B$F_h;y)JZJ3;_qf#_=W`rLHQ3o3pQKW$?j!>S67#02
zo(I#2Tb5<()Mi{=8I!{TBS1ASA~JWZ1Afsj$m{9lJ#PK(Xjb~|`SxAP7(|6}rHJR=
zvrAX0=<U_Abh(h+rgD^IH0NWHyX)9F*m}LCjk#2|sj(d85rPv$gQHYbzAgh+(0p3(
zb;q<;qYm3(yw9<TO!%kD!z-*BHEC%YW6*`vQ<W@3@A>J2h6E8O_1onZ)@zeB-qnmR
z5<2vG;|VW<;{M6onrrdYk%zUpR(ttz0u@u2sc%T!eS^oT+rYe3s7q2*y1FQLsj6RD
z7${T9MtT38dy|mBMvEXrCaoX`EJo-T6}d#aD}xzP&tYfu4s$>FH}-Nh#0Jw$Jp_TQ
z*EU=Tg7HGom$;u@VujYl$lpPyGRYUTY#2B%GXsg{a4aK1$Wt^GSaY{CWVG_rbd_Ts
zFe%%*#%>!oTw=B&(tWU)J1U2G+`{NfG-Iz>K3<|%7?a{u+FVy%iU|FJoh8nO*5_QM
zJLNR7-?(xgVo)sUl`899`C?tI^~B7~vDynA{Llg}Nh{{bcm`XhzqUHUe-OJgI<jT1
zka%~Z#H`{D*?8CJdTpBH;U<&&-tss0X%w}sJz-vRogG5*c-0@TH~wM7W`mmsH$q?B
z=II3=5;DzNx6C}Wi`3V|H<mM+B_{He7V$sfGGG$z`3lKjd1M^CJbVz?kn9reF6N9z
zf}!D#f8wRQLTH5z0`RUM@>ghGM&^##-50QP>q;JCmi>O}W((w*O>5tvCZtp{Wm!>C
zT#$oUAgr=I-+d6oZreN;U%3%lAnFa7T%RnHoNEoR&hrDKFc~!;b5^xqR#$f><)Z>2
zwfn7sr)~+S<%Y$>+0dsS4>0g?(@V%)bv7>XkXt4*B0u+mCT7>yU*i4+@{N}3gBPYQ
zk;iO~m>1<8o2T}E_;5kk806J;m2V3;#l253%-iFrEbUem(oraquxF~446N2)t%lD}
zY;Xx5;d37cb#;JVtK}SL8<oEK4m=oZYS0ki3{BHc><_X9q6OdI`>9k|(HQIaoVqcp
z_h|CBPw&++VMX#RI0sBNEA|0$8V_1pJ>47wHrm|>Y^_J_ZEPm9*g9DNb^1Oj1z_*v
zw~Mm(Ac6F0<VhRNkDPQTom~#B1Vf5Z)x3zHsjEHcd^>xug!=t!@fEU%`e%WJIPNbc
zB;=F;Y)181QPyJmYtre~i~x>P3s5j1!1rm&>G6}&)HfjYIaaDF{>?4>=ja6($-u%-
zbQ$DG#RQ=TK{{muoX%kKI_#m$%lIp>gVXApTpBauW|xrpA^zm-QABOE<9CeDB>lEj
z!C6JvvjoPy&*L_L=8_hyH#!-1)_d!9!gz7MpIvE^h#QYq@iLe36#5bpOE!|sZ)v&*
z=yW9c2JU9`3ib#*27RYxYglroh)tkSuRzTQA(;n``3|EY*F!peBR4O9JS5GV)D?=q
z`k**?SFw?8>hk~!XL4kHeSMI`X?&%<DRN<3WjXbfzw&q?yL2$?xsGu>RSax<F8wCE
zh62{RvQuK1s0K4j1>4}%V6&IvBM;YRxNL=C*77%hl3jXNT4!&luS5AjM`17U(})~W
zrlu@=J&7}`$+H!Nr+qUXJeJe<u|8);Z2Z#&+!S_0P-N^cs%u~a1MnX9E7$(=HEgiE
zbj;jQImOaoYRLPj7SOdwkI{<XqS4ZLR5(>sty|{_)vmN)HgK^scl@@(yVNo6AC5It
z{YK02yr2Xzj~AEr*O~TF!)1a<K-%-|>3(MzbFq!fXw&IXW`CMVYn<dKul17SFlHyV
z?wI{9pxM|uBO3g}$)(Z;hG?qW_^Q&Y7$kQ2^rxy=u15D@=Dw^UR`d-MuDB||9XCZ?
z=p>%U@K$00i&6=0vTOMMgU|d~3jenBH%hg-db`5sSh-O?6vUlaFyC~rFf|S2Ss(Ym
z7_+1)_!TY!n7+*e%&bwp4WZ;JIOTRrSm=mrwb)&a4Dm$RhuVynDda#oxx}y0nb-(S
z`K2|VMy(5{%N@c=^&+PcX*rE7FCu;}%fSfmm%;5j0Gr~=^5GnP=tq(bW6MGfVj4l_
z2b0eH6*TaAnTKWiJq@o-dUFaEH3r7gC~0JECkjfZs~qIqy{4eI1@i2{9V#s+bZea4
zHM|hxHv+lzJkIaNSFVM!k#~13)A@~y-YaT4t@D*LIZ`xcGJ1zsvY)*8jZUiR-344_
zY{ouZgV23|#fJWTwTvEMp{0f-NIqn9ex3n)m`MdEK{%Wu_d(RL2&iyWQe~O68Xdyx
z+|cTI7k3*P8V1d03AC!s5}!HxGf$M7MMY$*bYu^iw*o>RhCne@{FU9MZsWaUF`r}f
zA)R!Pdr)il)Ku1162F2K6?a-8Ab<K!`udPs8<yO38V*QUOwoNnlgZQ}fJ!w;u+rTr
zyhSRcyL73asalFhtHv<uM*x_H!2luxpcX1O)rYv9a{2%jCD#+feU%Qy<%5qD1`Mmh
z2Y`?1;RTeKrql(W4t9`I?7(#juKwNDFvq48`sM>I4<UuhbRw?zQ`_W2^?*hxc%q=3
zjS;A31BL`4>rceD2nrGWAm!_c7qB-uO<O5(9Mczc`Sq=C-^=<=v?6{VdjCYd#H=$d
zo~j#-m7$(;UW=j^59WVzbaFQ9U7x1E9+z@EX6y`J?V;$M_y|f&E5rfL#8m~-?p_5p
zjr%O3wJuR0lfN~!7Y!zuQS&ITb6?%6H_ri!C_}lm`bfM@6lkshl#*e$ov7u?mIq8`
zz=jj4_Um=1!)8@LW=+g$+PvToMgRUmO?<Ynr<Pbv*Hd9e2;H5c%ABy%#oRGQ=;sAe
zVdu5kJ1@)JPLKR=2r0$`atjsc<WrA<5u`!x+lGRJjpfA*q8@Y>A+9Af{mf$EoA1dA
z1(zP{`;QpLe;q_D__Y}BdFD>QY>{R*(zP@H)BC$v@JEoMR%27t0(9rd-xx2!-B}xK
zidtJ!^U=T%K2gLl@2X$t%6cunG741DO-|B^!|1(g?sBPW?AimzCE|Xn*>?U=-gn*c
zlH1j50Ks_;dUQe(4kL5_62Z~JA~=Wp`=BwBLm=J(`_O&N0Op_AAejHN(%!#wgS)Q@
zu?MB7`y1TdFDQnV-wTk!0zTdz#|q)!nJ?byZ~U`=8FVqMqcFoZzaQn(Di+8&VR?)C
z^C}<qzD>oy*S4w(AfIaw(p<nl-JQd(SJh$gm%l8s-1yIW(cKUu2)qHVPe20j)n6%n
zf`1pae-gsJO<z4y7W=zQGJrO}sr-QRmuPb~_IbuMf8#Y@WP<{JFBAbec%qbMX_mk8
zpul+Ff`spa;W!pKy*uj)E)pz&yh>14*aScGTd3?DN|*i>lD4ankEo;${+lSW848?w
z)sEw9?9y9d)fp!blXG44aX>@%L`A9TTR^pZzcfRktj-)O^7p5}=coJseArLFanENs
zMhU;)*a&NNYk7iXxZlaQsG|fz7#`ZoZhijq!{o;A3>Iws8!;i$bOdeKpMFROi&Hd=
z)Fr@sa9v3gE)w>$j`jN=OuYa5w$E;2qb^V}R2Cx)B*PlcWvt=6?PI-2?z**=GF|O~
zum~44cK5%*@NwqAyiX5OVGf|2>FJk~wqyhRC)c`BuTC34X4}10D`q|U<CC*n;O`z2
zC0tNh59`(_#1}%kI?OOR<wQuvSMOq?Qdtx`EA@mwNtL9vRmepbcCpjZ$wV`kgSHdl
zpAGM7dDG^J>>A4g+;RJpJUUl~%t70OIhF%YCYGmK`~$UsT~{GlhAg10Ow&)ieST1i
z<Fj@1XL5h(5|^y}KKjWZ2IDv;>dXNIb_n(kFM3U@?jKj`gH#3^`90U5A+)OYI84HZ
zSud;FLIF3C+&jGO_d-9$?a!86f^D?cXm^q8I)boYVZ~f>8CU04SFQ3;w(iOMVRyYn
zWMZ2!hxvA7365Hat-lMs63c`lo=4JsdR6xiH^n2;WXR+W^0eNaVLtz)e!hHA=CO&R
zRpwg#(0)=0aPv~vBsQAci>)5!1*{(C&vJ0Ttdd0rQoS3B;0IPB@qxVPoTlmIo=P@i
zf4)7yyuP!<?z|rAzF(`fHlDJ3s2<e^Kt1r8K9%5ZqFtPoDFUxx{m!?qSX9JysM-YU
zTC{+>7w%3pypz$iCV0gZ#4|yaG?OqO08_^8qNR@jQL`ISBtM+X;Gs^5X|K%$rLxB9
z$3<bU5$(@6+3o{g5`Iog<S=0gX4WY72>oVWG!n_MnrJo+cB3+0Uyi?)6Sen^<yY3~
z`5fYaxT(;fF{+t~trL9gw0;)@xl-n9LGxClwv5q$ATU<7T@EO~<F2z;2|wj2m_1m@
zTd%9HUp#>cFq!qlfFnfPoW|?}^;o^f;bJY_rB0AqwT_LA@py|47$41wsg$@XcUQ=$
znsrnmGGv?a2u;SK_`b386y2TWz)h@$abfHx&0HRVBQPvO;kI;Q9Q16RWcktIBL}q$
zV)12`Bl2AlY`-?EfD(Q7W+Kk(^^<GyUMIS#BbY0LIi1Qr50J@-6ZG=%uSDl~F}EGH
z&rxmyNCi}sHtx22JbcMTCXBIop*vm<U{_|2=d%gj_6BvoUHuWn2VhoRv%kc<SIemv
zB2Vg@bf<^=OPs7VqQ&ZKE^FRwwn60;=1)3vdpqap7Uu<0i#D@<bUQnNsicqAB5L2=
zR*D<WHfdRHeavSpjxFe<;P)VKPW3;WpD~oi1?qeoZy(%^e-R~9U6Xixs9uUWQXqn<
zHEpK6I6DW+_hSm}3woVy%zn6#*>K^KAK25+Ui!Q}-%v1kZ3r``Bn|U8r0aNpnIx#Q
zvr{z8ci|_*vKy1x{2?|Rm>M1hHX0kM0-z&i)8H`!gyQM%*CNov`e~GmJsl@#Bpw@C
zjOL8VK7S&Rs?h%B0mPn*1EGbF%&$Z>c@Es8>jdqlED!B>9cHmor?b~_P%w);&6L0y
z$D7CZ8_O(4$HyyOJBb7f*m_)6#$SZxTu9aLfw{g>GZcF?&vS|NapT&Ai;{LZ>RZm^
zjA*Fb((|9WuL_J%t6~b;-swq5$9`9#=Jr+dD|*Tvg(c^T>jAV6YOYcbj*;?=!i@MF
zy56uJINUf+b2nY8xg|-qh@Xeq&VS=S_pu!&fC=x`DA2KKK*6=Ny#{{l=oiMcul)RU
zuE?bbI+f1wazTlL%BXEXoH(qDyqgNWhb82ZuB7z}x?qx&APCf1bYE|tdy&(MFow{H
zbDukG6pAy;MD<iOR%!|<u_G}WVvG=jG$kC+E|oH{o<HTX_%5et^K8y{8Fnjy+qBN4
zC$w*z5_pP`ASdkk0pOsYFvXFT_)Sw(g$vm?034^hyDPXb?mzUpd$(f1t-Nb-1TUBV
zyL()xUl8+Nh}f&GPaN76Dsg;vcikKp3C_ssq(V;ox!y~j+BhzJNo7$p#awQ~gbe8@
zR4K$g`f_z`sypL>J@!@|%!cR0Ukh_((_gnOu3*IVfMjNY?iuI~Hz@YBq(Tot<SgK)
z9=V@x#n=NdRM2%f>y*dplUgp|+}CgT9VR~Vdwc9+@BWbfShzMc(0e+~lE-p~Zm{aH
z=n5j!T$=b=c*QA<O+H2t&?!AL#2zF2jV<65ZKAvW5nC#Kqyjn@7@StnUU)q~oT?ku
z&JI(9Brk9IpZm1w-qSG@Gxxzji-sc?oiz2i4gj^CaEe<#Hr*n4qz?Ep+nU}5Jq`l@
zBLz5*#Z7b{2Tf@mkj0Rk33Izma!?5ymAHRaz=;(xD(ht!yG%^OdWC{3I$@%;la$Zs
z3qB~7Lx3#=xZi_H?VGSUx`D$i4^gD`G58jPy%(bEE65UlWjgiDfc8hk{2m$QrEAot
zo^*_IacUK|x<-N-PUu3@F}N3-CqfgLP-}@EMqg!fmuunFw|nRLP=C5hzg?7<x5m3&
zOypNU3?^v%?Ix@4&%ttHROR|<{vB~|m7dI`<;3rT(dlIWqWu(;mcU?AT`)!^o{P8V
zvqgqrbh$~IVKakE;8UjSW!f)*gKjX*$ZO^BDM`1O`V)<>dhPb6=z^KSc~tOVjcMu6
z^#nLJ5MiMtSaW&XA{8t*6^!U`<l>?d%PJhsRc)!dy}OwYod0pJsVnw8!6S1;G?rfJ
zGzC2b{uH*@pl%7<%%P9*qVWMU%bUMvmR}KpE&sxS`qqcYw^T7>P^AKcTKY^NCV*pQ
z=E}hLbXph7)$+4r+E;F2ZNf2Ua$Z#?Qpnd+CI9nHF7+QG)2?ThJ<qBgmkRcl;WALI
zYBoUf`9*{6t3jc<LUtM(A<8P3TEG?>GI%bvk+Z6Xzk`g7GI&^`cCBJV-tV>Z#spWb
z^Co3|(gQiOdAi4{8S-{BJsUMn_u)buh15EmyzD*kiJE>$MY;)7JLJEb10(Qo(SDL1
znGj6l4ip`gbI<)!s{b)b2o~6m-ZO4j>?{yPFZ}#v9M;2-y=}1;H^Md{f4$TtDKuE_
z&|&=qR${!Q52)O}R@K(Z6@SCD!}Z<@I^;Xt!e~yXJP)9>aLAM>p4<2z|J`K8|6G1k
zHbtVie(8=-b*J5^VQJBt@L{zH&ucSev@LVz>5_0PW9{l^v^CUnz`H0oMIpD1*{0fI
z$k}asH9e3{aGb-e7c=gdDHc+wTdyCSEXGc<f#EcG?tib^(KPy=?~Y8C5`AxlWKiNg
zP&5b?rxknHzh5o#Ax<F6UI49UHXVWswH6@tN|~NFXP@aYfQf#|=3R=T(BZRYOnK@@
zO0%V1WD)Bb|0w05rP5T7u={Bmht4_XZgH%|p<*4LLwY(9M5m?wv|h({>(g6aoI=h9
zt!_@;x+f>sXpP)oj2FA5XEzrtxmCi4VCP>r1c~BS19Zl?!d)HaJGx<*$exKS9oUq7
zezmoNZDZ8APrr&Wp5H!PlRI_Fou(K$A%229n<@m8nGFTrh%{3ve;W3TwduMpn?Zr8
z5`;k8?`%X&cQ*7yG|O&YJ;N_7HoRS$*~$1@`>&?&41-y29&YH3e2ydmy}^tZMig4b
z?(grYqoUcAHNQO%VFnc==n|J+6nD#I*{l1yB#rPoAQ-k8*&?Nw?WpjORV%NEQAHGT
zjaEqV-m|NjVq;DZyR|UOwzgB%I(9QP>_*MLQCBU8vJ6eQ{rb;G&FkJ+s>&V%PReMZ
z=(Xu`gK0!P;HDjttL9-EJ|60|Qpr2x`0AZonnQt#E!3~4m>G(KFQE^;qd%-V8gA%{
z%Wfo0*rLwQ_Okb=Ay4i}UbSZv=hUx|1*%&N#f|>-<XsUe^%ZGqoSP;ar>%hO&Y@Jl
zA}==0Y`=>bZD{>7{zf5?<Jrw>5ZpT!=St5w0g|bar{)-u=!P@D*j<>Pb8k@n{!FG*
zz{j11%}nGYSgoT0kC`+BP;w333}ZehWAWVBf7Xl#;&us~<c5ntZ2JiXhZeYTR78WQ
zaJ*=#cjX}X9N{CNZZTqiX^Cm#P)451u@4TO`Y^J_&Ow(r%bI?y5COQ4=ViCQ`7(Od
z3=>OPCkg`rZ)TYh4<!G{LBmr&CiT5#q}N09;KTY4f_Z7+eDrvnxEtK<ue!7_^=x}&
z(=>L$uZN0Be)*>vU<BvtPN)tr1%&Cy>J8SyPdN~SJPU8f^IvE1)cgIw2z=gBZf#Tw
z)C=gJnPn~=zezN}yckOzyF2A3QJ7jt!zdT^<5$K6bt7EmIk$Q@0P`1S;w!@#W$uB+
zNL!x_((k|Bm+crJrl@y*9QWZ0wQK{1GrN;XvtC5Idqpal2M3;*>D?9C(!h!}IiI@^
zW>=f)+L$18X_z06T(L2-HE?<QQ;?-00!^Regb7%L5FcA?K=2KQXQBJK6qB43?&LAz
z4y%DcELi!?&u1j+k?x{!HK?uqw!xzF+4Ko_m2EdOkJ+i3<A93dSj#L<{jhHXIs+Gl
zX5GXn<TS|l$8*cvlL|J8_gvZ#&DKp#5jove<W<l(9ii-K{&<c3J$nCDRj7qdXUiwz
zMsq;fUSiTW3u&)ys?-0OyMO2Quiq?%O_vFe-lPl|r;fU{irv|?iPN|L5hKInH7YXn
z!3q9T(OU`nKJ&#b(|28F8R4+g8UyqJT^RG~bXI@jLCcr{j0tcNa~mmH*OWJ|Yx6|{
zWHxp;*6YGh9EN+TuRR14w(4}dn``y5wde;Ta#?&^{n%}~($l-)?IgTQn<eDdvGK^B
zK+O37rIaGggsHf{gE-Mcs{#Fk4dMGIj-zSCPZ?deX5ke@mfggbQ`vsm(&8>{&r0)%
zpYJcD&zXtL*)x?>GMOARC(OKh5ViR?B(J}^H#^iSP%qoLGa|o#$hoeQJ*&qw^w|Zq
z(!VX9)pW{Bo=}-njk1g_S&CljH;|5}2ue4qk9%>@wj|Twh5^)Or>%10a@A~3JswNh
zEyBI9v4)ALevcl~-)VNkjb*rbD3;oK=QQFeb1?1dB3n6inG#M58L?>Ca*_fCm(Bwx
zYxVFE6o1xMtAW{>?P^AT)oR8AuT<m2j}I0Q7%?tX?8&Z9JAbd~&n<3J=!~oTt3$~t
z{we2W`uK`<NdG#FY$$nUsXvYp@gvw2sg=A<MA>2NJwI4~b%I1_dc09XW2(1q)O!+B
zanMdjk}eYv{QB39X{puGt6%bqFVB87j79p9U?LKZ<zm(&xKvfldXns?BE+J4ttoOL
zXbAMvT$XJO?LbPj(R&YJ`P~(N4M1#?w1IC}UPC`7cHgSJ(yCW-Wiq#ssGm`(QJj+}
zJbzORWOwQa1hc#QwTwV&&Iwr0OFkpo<7rgWcQW7}46*K^C$aHIf-p}OHH@Ms!RDaP
zy^wmi(r=IEk-UDLr{xq%`UXQ+!pc0<RV>>!ZsSH(QjN?Sh)&Jo_T!_xhnGqYY~v=Q
z%KK<eYR5nGp%wwLScRMW@p*l%%mjvQMu)deK87tkv$rB?l6GILKjGo%seXm=p_nDS
zCfqiO@8v#cGrFFsnE|8<TPt{V==I)7cJs!GW28`H1HFJ;-xGD-iuMF?v+!&(shA}p
zYlz9hBS(d22+j1%Ub`jd!4EBal>GX)1ETUGaGpxVnzno-G`1re?OvshF;}3;w1dkU
zj*elDn8{{`+`2|@F<>L0>y)pY03)z8*!w>)9gjS*d!HS<_d6kHs)S(g_vGA*CN|@<
zol$mPhjaO=k>?KNG)K`UfZ}_r)Y;-mTVZ9oWF*nx|Do)y<DzWWwc$qu0~9PoNrR9^
z5RgVuY005sKuTIV2LuH~q?;k6VTd7z9Kb*tq$LNWhmwY&zU%f`d+)XO_rC91`UgMx
z0W<epamH~T=W&*+=m*_kO-JQ=%IIL0%s#u-VhS_{s$Rqk6fnHmrke1^3d_GY!L@(u
z9PJGI=8+J`eG+4vJeo+#+#H%3+ckcWh>rw!{y|KG(_MnR`#|Ew*&38Gh>)D~bgByo
zJp$#`e+dF6Ku{)-0B<4+I)=k|%8Voqr_~H6C=^TXfkk`$nt{Zt=KDg4&{Ew`H835F
ze{tL=_iM;zNZvxsZGCE3^$coDrOye?28u`FE`^D1))PBp+y`0t3H=2_V2|Byb0Ybp
zRh!6=$TqVseMU&@A4n{=yr8tkuw`jAfAo1$q?V7G>5h_zWm2%nUSZ)Kt(^1es4lZY
zpDMNNJmVat_00J&xnKM%Y`zB$`;q--?06;g!p$G@a;P>Fk5meJAzLm#{7NDGNWAKb
z3arI^@6{>9>8D@jRuoR-SQPJ2w#V?oB&WTuj#^}B#J3UjvZ;Dw78r63JeC8`Hk@#Q
z6pa5-ddb~0a=u;?3BwEryS5D%zg_-yZxR`7M_0QO<4hxnY^ynaP`8%$xpv#BX`HQs
zI-cie$&qfSVzEc<&Z#OrA)jboreHY?1Fz7S%#!_ysQ7N@!7h-J%jrxqw{_^H^w{>S
zq4z4|3_ECc{6}Jzt5sN^RQsw&E$vKL;YE6Jjk#PlJmK)ZBVLPdl=Ny1iDQ(gyMqkn
zK<$gImp$qg6K>fKM()m1(d0dG_f%yN;^;e<@4k(rv=VG9zv<X%XT0OPKVT)8r|c%t
zH{B9`EXE`iP`*)#_b+kmKAsDZ)#tDGL35ea4w{Q1t`-(u7^{cz!A^<$almk}xx5Mg
zEkpQu+=$Xa<Dq&5MaDNpje(J<_8Z&#+!_TpP_F5ly;Y{3?mJry+O-b#c@r<eVMPLR
z1uy0Lm%xj6qq4j2<H)WseP98|OiUWetw|8~l~+t9Bzf=H3**?wwywAqQez|L2Aa3A
zi~}g#SW@lonilu%$8X&lA_<iS8H4!RW|fl9u^s{2<I;hId<~9#?@e|)4`f2EVGxI!
zU^xCKeLGd>1DyHRhS%x<=>>43SxLMI<c3G|8R%rEmHuzbsBMEBI}gk8y0n^o_M9Zu
zwb`ib4jzAU2b1<Yeas=HbQ%ZGu_j+)ZPKNJY;*-9-r{K;l((aMORN|i`}+IW?|wzm
z+9ivmBaSL&j#z6Kg`T8dHS5s1bwExZ`)cZQTglO=f>MLW>6){VVAOUHIo@@tSHr>N
z;1L(R9`&ADk$-;J3#Dl|emcEgU`vnWz-qw4(p!3|FC*%jikLuv3dv2UOOd;tqwP)S
zAcNHUw?SeJ0|seUxMB6S!`NF3Ub`t(#|)cpdOF5T!WjKCk_l(K+NO35KIGy!HtHH@
zQul}MB&_5&#YEepAZzX2W0A1c`%BHK@8ccg>m%|_O8hp$@CeI}x2$vD=F<H)+TYzq
zbQ0=2iM_HswzpSBP3a`UAS<Q(x0QN)hlip6r0t<MWTnU;E7i!e9|f$GJL0lUPg0)4
ze3w3}N>NRoEw9S>c44iU%k}snk%ER>scQNz$GP4L6%42$n>#GeQ!XF;6}N3%eAL8)
zecnWUab~QVOf}DowFjPA_=)hdh}&RidGM2hL77po)9Rpf0fSYc>9%pREn8B?=Xb&%
ze`G$gInb`B2aUB>Y}cWlltcZ-n(w(ZgE0k37dK((yESaF^aY#mm3;RfH?g;HQeJ>#
zor>@yd_jf7qxitF$4u-A!JaJ6{)W!;wPl~U4@_aT9Gclxd6z6Ia(ui7Kc&b^z$3g-
zG`8cEdGrOwxhfUuPAfk~bjEgGcAmsL=1lAW0eGg?${<F$=oSp78O4y#qL{!s0K4=Q
zSDYOP0{-~-i90d$HtakbpNInco0fa7=Co;VC$v(R+XL2CrpEy3+|P3UaZ<J6vvY;+
zgBe9Uni&RaeKsB|)G=9VwXuU7`#&07b)`PsntakINQE=&(!TZOnIexbd45}TMars0
zn)Y-}_N+Pn*^gATK~x@_S5d9^;AZyo8@8jU<KvPS+a78wzb1~(n$^@--_x&AXA_0%
z0Z#1C*#peLyY1t`ZW<~jx?*M#QNp$Op|yqt-ukr|{M45~hr=0*1QDOSI!B-ROB<V=
z7+Qf2;GrRW=z5E8)rSSgFMB;wjH#s59{gGjx0#Lw(hA_!-#N_u&#N)ZGs{ywuk=5&
zt-$^|`LH(Aa^gbZ>q<(ka*B>6=OX<EBU^%8G*7*^<(VbEZCBZ=?TMzF9S@fHQpn#h
zj8*hp^V+ksXH|cUfL9}=J)CTF9{-%}FtL(YIlZaDe-NukBNG+iTre;@S2#Mindz)n
zgfR4O^}89#Z0b-}AU;2<8Z+;_eQ5NCAhUjlq+`o<Z9?`qefGm*uF+A}E8jW{20^{f
z1!S|Mud}K2jAe>gEGzG`YLfRQ6-B4!DBm1Vs%)`^0qKcybf?o&ZP+S_6=6mNvxe|E
zLFLhxHOaY&{+AZOR_7_Ykq1#V6%&E>dt*y|`CowRepT^W6L)IMHDMd2tXxTdr06`p
zo^eKA9Cqsw#h|A?z<x80N3Ub_^=j>dom6k{-HW)}o+gIua6%OI&5Mp(wVoNEDPA=i
zqK?f^(eTKn*Gw9}mTgziJAdEm`^pTv>fn}TmG>->Y=JjJ?;Gdi9_&dh+s;YbCjvpa
zm6Ts046ZxG8RLff<wsv&C7uzm6ZM${7kGQyX=1H{=rm+REJzA)6FLv_>`2FiMrokf
z2AC3Ou}{Y}*ox!>3h%gs-4kWO<?M3iJfss`o>1Vf_)XI1Y%fmJ>2~T*Q&gg3;%c@0
z?yLN>*kx{%mO&&VZp3@7tiF3+;OgXndm9EES5OUoq}Mp$>)r|EV&9!a*zZA+fhH*2
zVIz$QIak1th#kr+h1{KlW-WxueWwNGNVe&N;Bdl=)cOT;i3J8<9~jkwx0>(Q{2|+T
z!*+@8R1v-9GVcp1_btk$8Yl3jWsV2eRr5V4b;~s3vYwL8#YITraEjuuTJEX2=bHrG
zQPqGYlrw0cN3Gd9so2#e11J`aCEACkiRTcCO@7eRG>~agQDd$4KDQoWl!KiOphLm#
zXs$*nzx6S0^I^a3uj8LH+5Ga1Mt*Me=E!;PVRSF0W#V7CN8;KcUGZXYC%bzfREQQA
z6GpZU-dDIOq31BW*Q3+_5A#rXpFh2p2kX2f=-6fOkxd&<uM0x(yBPr&d4jd4=)nqD
z9t+mHo;=cSFhb^K@6Ts6XHTK~{rxPiO3S{V!6D~C@KM|71&5uojX)8{-9}I+h#>sV
zTP(&LO|OkF6QA6g^nY!~Rj;Tn_;UfT;_lsc`>HerKd1JRdr!fF;n-f!8(N}UgQWz&
zVK&&X>p>U7;qa@hqZ&FT=S?VIPN@AkTAd}Wu)%}fX5zU*jHtLkfv)^WxwQ#$8EG?o
z-HaHjC{AV&lU`%zZph=owcI`eT<DXtJE8(L)=kul!*=f$47@eCkyd89kG5*~^JN1u
zowOQ@!>+}7CaWAKrS7B8E&9@G-7a+KUW6*|+l_AW-nE`^0qY+qwtf05M?!0_Ndp!>
z5kABn9;}(nMh=50K5Sbz?ntp5WF}|lDy>JE3PqgwDE-=FxNeicy2JC-Z%mLTXsrN)
z*`4~s{GcFre#x-z_<6Czy0vV|vWOL>#YA@0@{bB74;LG5n7Xqoj(h?{9yC$eU03w6
z^=?ysyw<Pm`j+)z+dko_W4jaWN8QEs2V2YOJ86;A;vESMGG{0lz(`kbuT}o&L(tKd
zs?|s!|L7{!(6ICfH<Mv!;<3NhFjw7-94p+dIgigq*SQEH7Lo7D=D4f}h3d@97L$z+
zy2N_HJd~^P4E^ZZ1oI=u-PO}jF0{yGy0%kcR_eT(t6doBwD`SEr(aYDOc)nLYOiGw
zo)z^;y9kXjW@{Et;8yI4H@M!l9AHliDnXX_FREg1PsbhoZzDIsrPbc_a!kg7OnjhA
ze&B8pdHspYd<w0a*z-<!-B?FygHisIYRkEA)BSmBaxojGGl2?=jG=hCAJc{ir41YA
z#@fy3W{f+8ffGMHrTM$OdhG=D&<yhGap0aJ&Nsa{#XQNubE0unteYmMuXbMZq;Vuq
zpG-Dk3c+*_M19+E+g#h;?6wp{;7klk+4Q0jjLMq3Kkmf=UTZMy6TQ@14a0i*gV=1O
za{fhg-+fdCO>17?e8JNs@oc#iy;x3y4+&)snfv{S#yTn<g=fHp6G=iY{7p!0Ws!YN
z(~X{t;cO8Rv|EzPukR{(Lth<dU3BlBgecGpDmct{tlF2luZ|w|jt7~2r&OE3#)yp$
zzCWtR2e>Rxus{RIZg<ZHn<rw#R?z@k4Aa~^a#-!xj|;si_|$m{JFaezNv!M|0P4*V
zuRZ&zzK79EFx?%vcx|4`fS0Pu)kfR&vjVt*Kn)FFfy|We_TH$#Te|p@3O9YYJdT+@
zUf;E~`f!;z>D=DjPh`ah#G1<BgK=Pa*4U|vM$4Np{$MYWG)^{G>u&T=jboO7+y!8G
zT%gY}tG~MPtF2$Y1{|C(PL7X&`hjuNhuaB!nS!6<F6v?uY=&_!t!>5t8W}qa@gyWC
zr-@PhmM>8uL;3pSTRT%Qt3ky8p;FTbi>PM_O$9t@h)d%-4Gx`Wvd=Ocy!yz$);r6t
zigB<B1iY?G4?QRDXcyR;^i%!>VO7!!2WZaYn`kMCG9Brt2GlN+#gV)ai*Li;cx21B
z=Sf__aYfPQsAg%gx8#&^pe)I@tv;|_Wj`Hn0n!Ee9EwDXK?w~*?}136$mN5~L6bNV
zFk!UT?lHlrf9>sASDQ;mT4{1(LOzR;KQ#3QMP49w*WJpBQ!34Ir!2<O-!RH1$qW{1
z-2xFg8x)b}krb@`MZYU`LZ8{dXQDZuDmN=H(t(*+5;eHnv$k%*J1@|#19OuOL$axv
zb+~BZhNGeaUE+~p$;l!GvxSahRS|C(eI~{*yDIvkkEtSlJ-k3GtTV@{$F}3^v*!1%
z4(EAoMhN)5OT|Qkc6PuP6q+vklx?;<d#@2~*6yyxwf4=o0D7Qe_g%t*RNfk!9j=al
zNPhYBCYaO&!>WY};ublW^mEbP<J79<%HF#E?hR%{bs|dIqf@_GENw(ZfQ`R&0D5cN
ze2i#Cz<W)G{N?Lz_bPr{mKfyd+o4IdZrUhyJHr|ogIcfpXb$+e6VeR)fTSvN)~aQ?
z;W!d-^ySjL+|^xE&MR*3d%uxx0buBn7!MAG(CjNJ5{4JZc;^^^$Skfv!o*3qI|mS0
z5m#P_LvJR0YUy!?Ys~AF%GKpN8O;`&=%W{1a1SxMmS2`K$!z{PuWKs`;5+P|Dd`&v
z>+l!J?1chb(}38Q6^PPF5Yco=5Os-9n6>v=i5r?W=-ibztk+5Y=CIMP9fT%&kR?wU
zWrAb6KfeUpYh--}9Lap$!|<ne51WFiBE^*MJ4Q`KlJGHxpf2I{!3^38)SzW%O)kRt
zF?_hx#Nmhb$)2a{%W#%+ZkLL=3f!I76>(0wlCUBynACQG{=2*!r6)tED<-Art8TFt
zNe@<adv&5mE&S`3Y`PSBA(zKa6t}0o_($D6s2t(S6ynHCSxBLEm}9r)>bKEvQ22R7
z#aIqsts``)rCI7bUS4ad=ftpKwH+uU8&13}J?vYOSh3o(0Jc|cu%M~HPL`VO>unn(
zwhTtYyC^X+H+~Zp_HOxpLJ9BF!m>oI=05PY%W|t~WKiZ0@(Hqx1Wsegu40z@)dWyT
zh0#h|HsKF;5(|IHM8(q4fti1=zs^{cb?)c-;h(Y<qQc{O9(g%V^h|l2kay@FWOOTe
zNGPHFu6XXyUqZaGZVA6_IzI=yva*DpafBq8i$;sHXoWrWwk-$X<D!Sj*Em2#dYESy
zNq+gxTW2lInz+>2Z4JR6l;w&;ciS}!qv#Q5WC3P?q&EZcX5$wSlJ7ks8g%^&>yEfu
z%)c<<fu*h^BsXgt8th)k^{L#~!B+07;1cSn9p(>v>QX&iLpN{4H@F-HERZ%t+?Bqf
z-!n1&y~GNxU1?wDWId{f?=P@4JGk~_27usq{szIXzS<c@9t|cRnavL^9U1^J8Cu~N
z9?U(X>>5?CO;j4RS>$dg=?BWN?Z1zXX-E-O!47l3+M`qC_B{M*G3+||j#k`TuPX)n
zktGO$*7fcr-g8RfrI};^cJ0<VvMOO7CI9_fhs{lC5TQ&Q^i%H2zS}>=ISDf~SZn@h
zWNfnP$CQnn|04Z7KKPZ!xmVM3E4@XIN@|>@K!ljQ)@FQr1xGn&-jTxn1;(#&(8f$o
zbKJrLs<BtX2OwNM44k_M1ap8yZFD7NyarP+df&3$MIlj#!h5C-pzDO&bC)jKTTDcL
zzm$niU?3l7s9p1-u-tl3Iq^ZR&78Y)TE9+D{(k+%j+6CfsaDv>%skO**Jk0MYxmO!
z%C%zJ&UK8+93q~;o$hI5qs}W98VG3C2hp_~(GdLHLhG73=h=_6<upHTvhkp6<<ZK8
zDfq6PqH@~_8R`M_?DtsjpA0^0Db%J!L@q?)`d&*#e%9>j9~B#hmX*`6=cc|SRA6=N
zdi%9es;dwB+CRrS%PYX1U_WE%YO}1mPhFWu{wTFvr0tm}Ihgu@(tuSzLtIrBt#d7t
z`qAYrBxaEPn6uhz8|Ad}UB^;Af59H3HLhZ=k|wV|+d~Z*r#fM_Tpulx9iO&jedZ8%
zpUtS0)i_6ggOpRhUC$Si0?V};e_uoml5~k)SGU-$dW%6+b<D52HDDlEJzOkB`)e&v
zTG4e0ldli=@3&L%8n?X+WDfjrBOleu?Q*Vzic??K_RvE&Tk!^~P^ozZryWef^(i=@
zmXvJjGNYKSi}3?X4?s_yPb|4jqO3m5;@FX_13g~#RM>gtE|dJVh-)~Oh)-XdWef2!
zS!H;OUT+YuJw%#gZ6S!9+y=Q`JwzXB53Yg<5yJ*uqX&9Z(SN^;ic6MhTST(Wr1dL4
z?|bc=iV5}=yK7~!yEo#88W>DkwOh8dN}b15!R(o$id^?FP8AI5aAS!xLC`VXq%FLw
zW0MsMzCyw;LnpP7q>ccf;LA|Dv@P7A>AMe@eJ#LxXL=`7_ZGpfT1DX#JIGoi^NZPz
zH%0&+I=u@JX^d<j7q%lr&$F_S59fZEc>dR-sOjkaXHYzMiwzWfyxv{<1ek44PB0Ix
zq0mbj04m~FN+kaxgMcr%S#VsT8R`jMglHQGb~=-|BU~#%cZ$y(<ETOEL+59f19rBk
zo&#5Ky0JqNSC%Xz9kavYuC+D@jt(3QmdG<)4X_w4_r2D#8)f5j$otrEf?J0p7zBNL
z=+|)W2g0>23)VW*v2+TvO;?&o+W`h>{Yf5+^$5|0h-fBT#itC;a2=Jx9p||t9(`$!
z$HNI;``el-7kd}^sMN!=N&rB>LT08IyS1o_T<qEzG8p)MQ<g}(gv05Won8tRTfO1@
zfO@k9YQh3jRv>ER7PLjZcBQ=PB35M{6$eAE>_*tHkwEcHO<ZRjOU`+xr|-9pv;76_
zCR&s!TM~2FzC8`O@^oiSkK5MP_Bkk>KXw5&z!dlCOQbw3v`_4s+l5QIp6ew(YZ@Y=
zcP14YhnocTXLpvX$x1Co$+fEqM+Y5SvKfq0H4iY%NrgG)_%&*h_nP4nCti#MJ}&?!
zbO?7JyBB%D@3DabDzD&8ew1e4;cl8a{*vM7bFrCt)Z-X#JFc4&y-O2PTN|KNG}Z!C
zw0HM>k80#2h}=7?>a{8@SDr2Q`NX^1VIBu~(22QG##cUO_eiMjV|fQdOmNSWV!5E~
z`*maUd4*Jd__GfQFWK^Umq!dX=3ALm(w~6o&|<LwS#Ev(DPv}(wz3!Ns0;Ns+Za#y
zp9htAu33O+5omjI4Q!k<U?kfIYFgX-);UgVV&9Xvx8^Z#Y6TN_<YLjxn&|OxZMEiM
z4`DCRC%>>cu_|`<u;O#w@p!&LhK9q|SJs;%FFpdaGH3X#7*@42z~OmvaILd7=Rm&3
z;WE)C_sNl_18R*i?aSL(MwILIakY*bN-{>-pHDDDPs6luh{yh<O!9L|f?~#ti{|PT
zvg1~<7&-}$cQXfTKlaD+oo|4ERgKiE#r3ZxY?mN_1;yK98Zz@bMk}RR@|26BS6%^=
zz^Z265yP7mEZ@$&-RZQ}Wls;}N&M$*gj+-P4;0qu`dGqB5%Z-)?+LrXAgmwpn6ex#
z$*~@(8BfF4*#!2VTie~C{s6g*Q|yz=m4d0>Wt&UR-iXyjkylkx6g7l<2Ncw|$zlt_
znM3d+U9uiE+sTSyx|DOSAUD9ObJyX%z6W(jr80e=AGIeRAE-9?EG@BmV$ghjN55}r
z*6tg~0G|6hy2IuAiTND=M4&kC$vZBCZTyQU1rQiL?-+e%x&8|P2d<rjNXwOM%6OlR
z8N2;FL)J~Hmw>0qC`EYSa6~|tsyV9_=D!>VRR2Q}pl1CE|NcQz&C3KKwKG8sf}u&G
z?i!$_(VED+#vy*yk05o1Xp<rRn=k}ZoSfU+ew<Mj{Gls*@w-BZu%d!#!B-q}Gy`vT
zoOw6A1+!AyAyn{aJh2yJYRpaX8I)3dF1#Gdi>rQpL%>?Ab$yy*V;9%0u$wMi+*get
zgDIB0x6uVxRX{DojUQJDD(@Oui5C^(vVqWC<l+8C%d~WuNgU~~w-;{qf&va;$U5jd
zK36<Ga*gEi7QK1D933}hjTL>fO9Yx8)dX+2fM)6x*{|m=&(yA6k#Cv2JyTj^B;_hi
zbLYu92!W1f*Y9{RQ}Fq4Y(ID)<c4vlmwuLk&zVw&#{uV9+2c9{qQrOB#_RQ=3W}k=
zS6^R-bg-F+(w-VNXJJ=dY~eMsKJBjVV8>kbc36c08Rg7N6j#bHg$9Y?kt^18oOg8I
zjjs2`eX~dl5i>Ad`@wqU#*-sgCq@68a8NL`RY(-It;&>(=%^P`nkLLebB!Og6FPM}
z>xzv&%lNsi&wT4dZlFnLmeL&jdwVnFJ#{6YC_%n@zCuIrqMeE$Mb7hN)z~giTwg4R
z8EY>7o)6<2Ms=e=oS{=CHEQc4duwwDjjs2>O3Hc6l10csh*n|$MeUt8u11fsV{?Tf
z9rNypjC@<ZDpY9J>0pA$oBC7jK>Vy*t<StO3gCZ8wq4s#e(j&6q-Pc-PU5?VkM)fv
z@Ci>-`5X`9pT79^?sju%GH=ses8mm?x8OK8uVG|RtAn*!T<>R9Yw0EF+s^%Bh}i8B
zq)HX>kuA-|9ZuwiAKE)dB^`6YG!O>#-)oUJbmF@s_dvkwtHk*0Httlxt}qU?r5G(D
z1Mm+lSx@Q@HG8w<!3=elC}gD%AC?ABvzQagV6-&*wbn7I476;u7U`@!o7*jY3HPz7
zZ$9#xMJ>>@I8FI4MoG(m+p@5!sU2`mW#$w~eDO@%yX96>@U=)l7aE>hx;(K)_s|U@
z%@N1H-X29xe6#}@7<64HzGH{$JrACHE2j?hWhvPZZ5&Y0#-8aML4|w1Vuh6!e^oWw
zbHpDy&mEFn-j15WDW#48HcGAP@g36v{-~S{L@(op)ZB%Q$z9yQZmx0mP?SeSzWl+U
zqK&P0EAif(sHs)_ZwG#k6oi`SV86@p6n;Khw7gK_L<5{{y~>M(*Vlfrf=k&{!>${q
z3%Vh_=f<8|;Hq<~FXg5#1-q>1^7B2a1^GZNBM-W=>}9K*c7=D8o;u~cvwz;?r#Jar
zWqk78MJxRzy$?MiD5%eM_*|l4hx!qY?@SJng>-T83L~>!pP!uLvF;~^MXYD$nH1zK
zS~7J~4@3c4ryI?=-6iiu$<E@4Y11&&dxxbRx~t_qQ=5@ZWU`(3n5}G^H<|}loRb4y
z4a9Q{sJ70P<NR;dtE-w+>g>^+w=Gn2G-7zqzC-xCW5*#@S-CdZ%&#6}X4-O#&MUI<
zw^AzPMZI4)cIsBbD3_)jj(;*;O&U^Mpkb?*CluCbX9QI@8uBl3@JJZ`l1XTAtFCyL
zBTc6&?&wr$LjXjqQEDUNQ!GR~RJej+!n5%B`x)|s9XGRH?Ds}KXssON7|p0i0q29f
zoQhrlsqK-AG)n#6U9no{;=&xeF*-3@lwQMnex3l@eBtAZk#g27^Z6anNu)4ZIuQac
zxIV(ZIpxS<e}i&!;=0a}Yn14|>zvs4<7dqIbRa_q^r=FRDU@Y>;0NkKctwQfp+`|M
z<_lDxf87{Jwy^7Zgp94<mrIo{xUKTp4eC|PQ_U;jZ{1nYkN>VCbGF=db(kfmD=A8g
z?X^LTiOQy~+Bz=`<ZguBdq+Yx`}pm-vGk$tr2EMPuOS5xhfJa==bT3e*Pq7=_Yo^>
zJvb8LF|H}^MZ1~@Z7N!eEtXyANEJpr-+ndFvYfhl`J>#^ZgdDJLGG%T0lJ=cjYFZ(
z5dM<+seyb2D%c}9Zp%vISM`v=8xWzMd+AHDPi}}E+85wKhb{i<xymcGUEr|Mp{+tf
z(`ke^5Uz2yv|5^aqO`S2JI}#`9;)_StG~b?^oTrvLW2HeJ8of3_GZ6(mTe&$=2pGI
za|%1yn(N(XN|*E_w5a6SG;&{GVCbDc>Nq)`J(}=+1NE^;zCN$jfE~8`F8DXnZ|gby
zp1;&-Uk8F{&d&kMJ811tO;{FxvYky(Ao;m{Nw7<hH`mT}anS1Zevuh0erVG+kEX$6
zhwep@)B;V+_D8$JLe2a{{A_-@yX{Gs9p5QnT8As!AA&u()K9!+cdsV{vC<3l64z7>
zs3F2O5gJhc8xKZG<_*Y1_l_vs30nz_?-+*qn%L1pggqe;esKW}&+xtVL-SgYx*hYU
zkwCbYBh~k**<VwiWgk$T-1|tk6-GfY<JDhZSEHzjY}c=lAT;Aag0x>HQZv$y)I>9(
z@caRvPKZ~>s@c&74fj(MoGM5(DNgP0uHuc;jy|$~JRJni6B7iZXx%sVy7rZQyWZuX
zi>^;TruqB0G=E3iZ`YoxE~zPfxY=XerzV>zbNL7X$E=Or1$~?<f}+d<{*23lAMN6g
zX1^)+9kd4SxV^-s*nQhxdnNoK-SchlQ%3RKM>uPZOm!x;61OnYfhX@5_W3t%+&S9C
zX*!%V;0~QAO;gW^?-Cflf^yNhWg>!SPYB#DuMK-2v0WPq57op)J8ur!rF&M8QMRqm
zF`BQ8`TVLCn#UV#E}xxPTj9U)driY$!_k{dYX(!F1MWXHD#+-czk;AYm*=tgKBMT-
z-quY6pNWP-Td!k${yn_ebgl-UfjEKbcZH_?TY@iSj88$p@3!k{qRmH>6hXgr{luRD
z_3Oag5^|zbkSL2`(l9A>)4*^4)0baD=S95_<2vH8%HEnrTgQkRVd67@r@<N+N*_1E
z&nBPa!YPq6PJZp+1x$=f4HbW3xvz6k-19<*i2l2vzn8e;ueIIO?e;HS|I@ccYy>?I
zKc_Fi1J3Sb(G&X2yVWUi5(<K;>(fo^14cTockn2#`{~k~1Hv3{8{@cuc(1&VzfgT6
z5ZDvvY4BKvz_<VXutr2RatJ`hngM;(kvxw?TX&?G-RF;=@2pC20I3%q?6b}k;pdTv
z)U7W9mxzZf`_r*wnl73}27&{#f&~U9C@PT*&|{|HZvkFga`MvTk@%~+=gW}f;NNd0
z`JEEt@9aK!Y$(2Pj6jq~Pq=>P(Z)C=t8-|of(qtZ{`6QC&_TivN&~_Jw^eM{X2~cW
zoWJeyIpW_l5e`XAb{k#-Zv@|JZ~yc^EAro;#ej5yND@#iB06<3?G0#ygjtB5x2T#E
z2`D|XNe^*u)m(hEB*%NxX*29P&$meWfY^py*y;+CV%tn8*{~S9c75X5-ZrKqUR1}s
zCHj*sdB)%SPzLS8X8xD@e|pzn2B37eKly2#h?(bPW3~ZQgIV`iy7bRyAIAZJOKtp)
z!;DPb;PJg*wFINJ<^5oXwFxoUQ^xn_eONSMPaeNLHx;J4Ux)PAo4?DdSDL;b;kM|P
z5P4Y3NG?)va$PA!+}Qi@!;Ra1nX<{f9X>~d3W7>`f#~s4(1)7>k{id-eMVv_w=P|S
z<n5X?la0wai2lZ&&%}<KNdQm>LMHy@%b~1fV4X8;ztV0ZKD-WzL`qc9mM6OJt|nKT
zT?0cXKRQp+LVeMfz7o4NP`u!N7zic7e=qN)1!6tA_#q+7I51KeE}Y$!$h}F$6~p3l
zvhs`QEd|wcOARz*MLrB7bO?8ly;qvZWq5$rt2H7Qv-tV;3a^O_obPaZCg=jafCfPM
znQG_`ZX1j}>`k{g&8m6}eKf=E;x(4J$m=|(CmSQ0z>z32F!c~^aPU;vX@zOXZtOu{
zU$!jkrny2XC!g0AaYC74kXw?i?(56Me(}I;-rDhVtnz(scsO%267;yWMkZKl_^vh?
z2mYVd;eRd5KfY}|_dE7cssh!VofTb+fwWrC($Yw)P;B^#aoAOsX=DiA+O3HWDhenH
zT-NpuKW`i$ql_MV1zJm3wbIk?50`tCeBCyUOYp!F6h~V?8%ak^nv{PepeDBi0fd>}
zEcT7VCNe&(_B5fl%0Q9tnCV2V^s(~*-5lrQkL-m0T%A^z+~C-v=*z~;iEW!BGOlX)
z`!{@4++iqfTtS)fv|P|-u|ylhvrFgRgW}VhpZQ()|FFUI)o&R7Lrpu;=GC0eNLe-W
zn}uz&^70vk3PmjgrSC=rrgqKN@XOP)$p<2Nx@C#w7CrYSO(ec>f}z_6xOHW;EW41)
z&+;ljqcRv5mWl9lXR`jWOL@R>vi*cWar3rr<(h!BsP~LvYw~7u_pgN`^Ei6ZJ^c+T
zZaZpSUb}!ynb>~7pZCzi3tCy(w!IwA^aZLpGIMzb6ryM5oWsruZBWJKD5bVGijQYK
z>G3-*GcNa&yhRBF4rJgDU1<J)hx-4#nSY;qU&%WVUD)iEtl@D_Msp-uOUQk5E`;=@
zd0fetv+uwSVA-*cGHdBiaAdTMZYj0ev{Zu4!Lc5kP$&fY%w+p>BOnQ^$i30G>G=br
z6d;L<1DTv$I`KM_(kku7uWo5n>CvO=qfvd?RDl@Kvv2U(-;?1^C0r>iRm}Afm%*{N
z?Kna4h0j%a|AL0N4~u;sdL285z{)!O`lV8Bzlj+!5N%Bm%m4cRW}g5&Y+-UIfO8bE
zua#9RRNdXvP<0IA9-o(|cY&pfW#E<BdI=vL)GqS|lagOOy3P%^$&O)Hd;GIG#5h#&
z>BgFMyF2Z0wPz~oC$3Xr^?OZTe}TsE^qsl6x2Ov0_NG*yScWo_Sk`IjAF&ByJ|zp`
zZmlo;I~{6w>BAu&5A#L53>ac!(=O(|QAsP}uG4jIo-ycZ{*fH_edBM%ot4i7Y(`mk
zSI6TX<f+O4U8I86xphDuEj{^uIp~sj9Wdo>0^K8lKcA8&x&uCc9BAB%AKGs&ka)Np
zXv4()3{VXi#R%k)5I?nkWy#vdk+6*ydHMFj3Qnyz^EoS^1BDBb#kv99-%PiB>CVU_
z<b{Rtfnd)2H+?@st@<zPx@iB$sr<Kj`d{wsU%pM1gE$t+BCfKA-s`0?yoL)e&lf%3
zIKZIe-d(=?kpJ)~ED+Upc!LjZ+7|$|hK@Rnx~{}<i4j^st3-uj-`#cfaIe9c`{ceW
zph=^(O13Xkazc;oQnDQA@33YY(q+$n9-){0oYsP9c<=$;i!}+8=z{U$;Y1Tp4iIc^
ztxl+XetX^qnH^_0R{G{Vc9a<v!2|N@;BU@!pYg(V@cc)PL05!IKTwY-C1O@h9&ZkM
zco3E?rWx(i-<qk;QeT|?Jlj5KJ!(9(Q<w=F!7%gm(j(4`7O3VNg;<5_-AKGWW@SG}
z&D<n#qhF8{+}R&4#*b?X+!d6)$66ls=HryzxAsc3&1chxp=`uVFR*={Q*UlE&wQrs
zIOD_32{>>^MzMV-4_=OF0K8&g%xWlHqm%ka_EH28W0Fnv{leHKSYo=F$b@kp6jz`X
zQ-2ngdPlQJzp}IMZU}xLcCKwmPzq=^nGCl%<Cz1jdF{6@jj|EW1OR_9d`yl7ZAX8d
zyt{vu=~3OoQt#P2x-=jD$#+3j?f=(B{@0)0nuL6jEBFUSn@SBC015>c<vFEW`EgyF
zWk7<(JX0muWn(R0Gm^>iS!*gw&f)s65=+P0u^NPQWG>rgSx#tNOT^s-Oktx}`rGx{
z)$s$>nkSbj>%-WQz<g28Y(LJDzaHf+COo`j`m<b{*8<ORHQi3VAr>Gc3ZOrjv22br
z65`wobkfL=>%clUYDhiXcgEER2&W^JVKLmWx_4d~ez?F;+Bp6tf%gHlB3>W!Y|)y4
z(E|d}7@3GWat<&i@nDpLj{;p>kr$eMtr?Jit#z<J${SoyZo_7e-z&uPei0qIZI3XP
zOjK`u$`GX~wd$9p(1LZ?@9iyA(?wt3bf}@!7#diW^1r}Z?O+mhPbEX9TD3{h)Yay`
z!!jcuw@=DgB)|MKA)oa~>tT#;%HdJv0u9-j?Iqj%y_5T35_9HI7hnZxQXXUk7d=3K
z+4Z>5pA&eETc@#oy4dW2)wuQ!{lk0W?f_-S)ga=^mwMaB&e>bzH1aLzFTbj8te~l!
z!J{j&W6vW*hp|cXsGDHMFOz)jf5m+N(e*rc>mvz~4Z!9#htllna_Pq!0#o6gUQgRw
z*L)6**uI6)_Tn(dcPUM{HM20F^&&z&Px)Dmi?#8bHc${V>HmJrW|-QJc|N~-1aVNA
zU)S3YoUjLI78t;}j=Y{y4;C_UCia(c`b>VmEc9wG{xF_DYNjQ2Kmm@iECh^sy%){z
zS;@?mA^>7zs_WeWxT1(1QQ&E7tZ~I-Z<`B2A4jfbQ)zFOl-1~lhOWowo$Yp;n2ojZ
z25u60^#|>Xx3J{>o`Q9V1C3tucB{_>Y>i9!hN+xeWmTWMhM~B2Zziwt#>=a#mDlUs
zmoU-y;N#_MCA~-MQ8`%#(}UUg!<J8oEXn%R4oils@nOJ>a_I7WnW`FfUcIgBx_m!o
ziemYPA=#Yn!NPip>h>9j_4(8+?F^4zt#RV1fk{wL#ucd4s*si8)5ejs9!$SbV%c|p
zl@K9a=)yZic05NFf<0iM;|6W_aouH>A_+Ld(^Fc1s)ppn1i8|QAj9s|hF7}-6MIH!
z4lsO6jMY$<ZKq{#_S3r(1*{Ic69`uI4aBQ4ab;WnQnz8bn><eC3*oz^{%h=|y1x4@
z5qDaF-KX^%sNGrC9GI$29H3Yod--{Y5JZ`&6eXN>f#HX||CF&d^4Hdn!rfbtq-VMH
zh$MA?-W1PCYg7Z1^zl!#kwIs9MG+9~f}w-0fEzhF=zchKwN<UEe4()x0rO}$Gq+MH
z;=at&n!*`uL*tQ&MMZkA5V*<vwxWDdI-aDkbpr}OyQ!^N{}@?w>XWw?);4NuK}6<f
zbMW0IO%5lXf%b}}UNwv@j+37)E-rLMClMyW%mdGPMrkox8g#_fa&(p=Q*xcuY$PBi
zxTF3d$K+IybH>wdu9eKk!>aUi$0vDUtRW&pa@}E|<1-M*jV50IdF=D_+oe|#kaC*s
zw-Y;1WlZ?I?;s<onE>dy%Q1%3{}pWii~IV&U#7h{$&VL1bU!VQ36-_)MZ7tjDRDmF
zqWreXq>}L@77JEIXLoCOQx&jf&(n)m(N18sfgj@30CO#IR2@k(#a$pq&D0uZGfPDL
zb@C%fO%*L`rS?dy3W>~AjFRikk}dR`Phe6DaQc~@tu3|qo_~fAf}FD$>_{kR#Wa6u
z4n^9tSJ^VeOSr!Zgn)2N0ey+z_~`?uxGPV|65YKocGQBN%m9YXR?ushDYcZXTBc(f
zXrrDttlR~!S>{ocNZ_-nGm(k=rcg<=sn#48ZmrEL!XaV^B%<oPDz0_J={~!#I?tmd
zks$6_{~>_~R-F~S&o_b8MSC8N@Mprx&X6ww#oy<I3$)Dk^+BA-A&!#HvYk&8p8;-v
z7+;wyiXbRJN<jW(GbO3B7Ig}<I(TMZnqI)r$}`wUe4prhZ0YCvTY6Kz8s*$!>4_<d
zL8m{nA0+O(^vm_s8mhzReQ}+*B+=&aF>l|kKir`o=ZQxey>{#0n0D5LT;Y4>G+b}w
zKYn{(RM`CZ#Z7UubjE$a3D)5q>LYC!uV#NL*FX_yr&l5Kvnj-wtYZ|6C8xxKP-s6e
zj5aF4k*dAtDvM&1t5vey)uy-}sk3sxdv#`VRFk%XM!gQVs$!$UCQ&h$rG5>$>+Fo+
zey9by$i2ICn>Kbktg+6v_*I^q1L$F6HK_V{0Y5ZuL{k%qCGT6Bii6wA9GTg4?%}f>
znV^_sj5J?_tOE$9{&oN`_1XO*6cM)BXg2X;Z~n=pz@a^3qRpsp<T13vr5<A+s)rvn
z1kjBN#8Ja0c10&G(oUGm@!u7JDC@j&_Zh$@0&IvoA-XQ%P}t|2Oj9><t?%-ypx0&J
z4|7P{mrgVCtVPBpJp0dcwcp{wqy&V7ydfcD{*)r&GqsBQ359I}bhxusE2l^3D;*cx
z`1ATcRws!13^GziDlr1ZF6F6Jfh)r5_k?Qf@};s|v6IJAfmyQcp;vA{CKk#i>LlDM
zAl(G#R`+1DTcUgR&|kh3P_neET`~?gffyfWJUrmSg2nYbm4>_|aYq9HTd)9jYpKTO
z#{G{(o2LUqBcHZw$S#9%@D(-HxAY#)8y%an56R#j-TlfLkEH!k@#xN53cH>0+Q!2w
zS-$8cT7a{dB?ue6%`v9qw|!qTZ0P%A_s;iXZ4n`-t$0$5rt+!X>*Pxvx>ZjCLK7!V
z{oT!BQ*fZNo8Wl;fgqnkDvw<0VR%oPVwh3^;y1Fniu*EcJ?aQR;dUUx3-ny%@zJa%
zQ_HOw=Npf1eI#C%+Dzr;K!?ROdP!pO)@T1UwE8!3nD0kc$P0kP$qLj!;n+y1XCR|F
zjLEz1A+OJzNf0$t>6iSy)o~GvffD5Mgrnq@Z(;098XONcQ^h@*g*L9oxvs965Z*?x
zF($VfVLyHO*5a4N4y9PUHa}(f)})9wl~Tnay$3l^ETMb6uQ9u&d|Rr`cO1$1fpnFE
zj^6-ctuej77U_$q6<Q7h24;+~63Y0FYDho~Y{5LYK_sA122TX0I+(}Zmpc29Hh3aU
z8pLX#T;Em!_Xd-J%33n*zgQnE>Kl5m9ZU5VD6$0IxbIh>iSE=?$@nqYht>xn_e|u5
zRZphxg96<z9ZQ04RUG;ygX(keTI+fncd_0gd8OeRL}eV*aaz{;wMU9}5U_ZPAJ~ld
z0R9sq`AN|7p5RPzu}3NBE?5*Z%>DX~Uf;!ftH%5^*cl-38wEIwLWn{!+pzg_UW*``
zZ`jg|pZ*ioBY^z&LFJmYQqs*tn?MvVj?loi$r{BJg-7AtFdR3TP^1QM&{YcpNi`71
zy=40uc4JJFbf(j$&$c)H&9a2olb>HhnH;l2;^OZc$Gg|UNcJ>VY7%%5yU%TaDr>J<
z4gB<`QpzFcJ`g~P<A$T;7CK>1x87rHcIh7~XcXwM;F#Y7pst<*!60HUNBzJi1GB`1
z@N|moWqLmno66@?a)E(Q<>$BkXBu3IOh#V<Vt_=O#KAm6>yFyxzSVf6(~N6MLN=qn
zY)!rw_msX`lq-|*t*g#7S-%r0B<10rg(^!Gay0;iOEyrj=b_wpj@gN3t*_*t*Ec*~
zYe<#L11@PQHH@)aNytQbZS{({*Fz}5|BxyQXpjlqgls<&$84F>Oj!k_hM~U1VsCv`
zG@F6C``ZW@%CdpHbm{g#vKlkJ6XTUP^lKw&74C}L$+WI(<8gqQ()tE>65h`m+5WhK
zE;RtC;>h}=oI79S$9CKoyZ%tOIUjIG*KfI|scvYEn@kq`#Fk;=0~+H1(0VNI?JOkl
z2T2XMdE!{fk6<oJy?bzM+q<5tvxO*`qO-~00p?$IUSGFcm*3{zwxuTDW}%PM_U_0<
zT`2hK6wXsOBy>xMDZJC+Rx5lVv^bU)Q&F|Y&x6*a6?RA(X)w(W0V#amE9b|QJPr3C
zEO)fu_wfC!+%U$7;mlClnhB02X0&oG9??(c{Bm5~QX}6w_9Prcy(Myh_i)^6YP_W%
z`4zws+JUd?Eylh`)Fk?##ow4t53XQ@Mzl12hfci`TWDL3Y9@C**S@r<p@qQjUB;UQ
zba+I5`FMK4nY#QE-5f<B+e(gHj9w97X%M#U$>x~9oZYpr>X`z-j4IYZt-6qHb?J6e
zjk{zZE>*(kHW0cN_~eZS6{s`5;J&mD!4X+(U!|h}OmW|4VIFit$NngJkuWcQq?X~W
zCWM%)E4P@?!VjYGPWIrh%)9l&EuE3^NP0}6E;C^9In;<>y?l-h!p+*)JMI5$(84c^
z-{_|_rGkF~E(fLW^Z^2h5;m{5)guC}Kkf6RNy!t+EkHmLkn(tJ&~~Bir!mX(C_sXV
zXPXxOcy#0{t5C7|ZQC+Ixwc{%G%z~Hdrd{o^12iB_Lo|(_C-%T`~22E3z0tu<gqmJ
z-AAYK&NQYg0i6ySBugi-N6unksDt!Kh4mdEo?gnio94TZthAMnOF2C|=1-Pg2*NEO
z6|Qfy;vrZH)EKm@+^WxyEzNF~0GVh>p`2JY{Fyh5IOdJ=8YR$w>?a<py-C%&e${+t
zxXhgSVJerR9IGZK`WkEakQ%av*Q?uGs=xCrRY%C>n|(R_u<329iE?LYZuSnPn}T{=
z@M`9$>`sB0lkJTJ^{m6}5WEaNx>d}kIsg19P;bN}d&(WU*_#}__b2yZ859O&$l6^x
z4y%4EJ?(A1?~3C*pP)850O<9f5dChD`!`PKpFNZwJLG@3_Et9<>z;1Sb<(I|^)+e3
zfH*~-sBP!w;(9D<hMrZGSdDc&$5g_kp4?wteW2$mD%@EMMme4{HIP5F(cX!?A`KG@
z12$hN_`v;GjZ$F<HfH?ooh_>KAPY!A8Gz{CCs%GoB}V&6LjiuJwC2STcf&+<75<Db
z4{D@N>5VrQuqIe9-*sD?22792&85!K4aH@xE6fTnQw63i>J1t|s5NJ2v+=_yQcU-{
zQu{;XN4vxpczIHt$C1t;7n0@t)vvCY8-16~sX`~RzrFL*pPk4{lfRMNJ4>g)yn$C@
z0ypjv1N`*JIERYEfSGTeix*40wK~|NsaT|iHDG?8%zCpgD<<u<=e{M~^~aO)VEIq7
z8a~r9{8>PossTZ12q#c|T(P2^sa$>E=oKza^4BS!E1>wJ6#n4PW*dR|ha?b^<LG#o
zXH7jN=oHX~6mQHOzC`2=MxL*k^J@HS0ps68L=q5)zqY#i9JE@a&j!~>PBy09O+UG$
zmMy~tk|LK+*IxpmPjPjqe%Dq)|7V~6+}<<j<6|lQjyI9XMmHe?@B5Jn0w%E&zl$gT
zVeST1RRDh%4~>C2O`tUO1Zke+EwG9V?+iFx{&4V-<UR00UZ75q%foQ)gzJYXc&uBJ
zfO>WI93RbZ^7encj<;H%m;z!OALKOo{$?8kLB-wScTE3&@&Co!O@4v4mg4fAhm>;?
zhqFeC;HQ)AU|Ua28|rE4{%qw_b)bc3>+r#A#;-sRm0ALdKHYmwMnix0SbIdjp+iT<
zjL(Nuzg$1xhW3FAjGJ1!qCx%i4-65s?<c>V0`mOM;Xaw`*T1uuU-y8#X~sE-75>k5
z>)$<Pqr^W}i`duw#Ou>bGVsTHkzfaXWYNsc5Gm-ttDOJ#e~t4jkdYLB0oKbKE#e7H
zC-S-u%#1{EoNw}<J=bI~RJENLA5U&Pq&gV-;tLf(8CWkV`|gL0DQZ9^_J8-${^?hI
zB{?pMjSO*(9)PmxxsF<exB#$DzLKCsEgs(RdKqfe0I&a_e({xTjPc#Sbo((FAWiIZ
zdif6c%U`m@L~J|^5(Y_14qn!OHYx=ehQdYwiF}RmbqC-w(Prunli3n@n#Oq`lzhC2
zu=&CFCm;6|aXs<x6!k2{a}W^jNlgLP=U=BZ&jF=ae>R&xGx)Dx{|&%BF9upFRk}1Y
zznh-^It5LYWBT-)>GPkj+_|d9;6m*iegaG{*CsM)B=jNUZb4zI8>P^1?%sdCvEp#(
zLynJ+pYQOg=a%pcfX<r^sMDtorWXELeezcpFg7Q>aHCLYq{7|@P}}zT#!X%ez2tv>
zG8(CFK^K6T6uOwZ+>P(0ejoZ@=HQu*FUUFm!An8!I|<h1A2cCgv!M}Mw<?CO|H%XW
zMf6AsNYsA!>=b$dnZYt(a88Ent}R1)1%Ghh;hC@VPj7zmBZ>Nr!k*mOes~W$kiKES
zah#}l75tXg{eu@2|Lrd4=AIc&1P;9(1`i_{4wYI>;2z|(|M>}k9^tRcz)+-+Zl2oU
zE&a_Ud<8U+DU#4Mo*{p<d6I_E@INgBR;tyU<GXI#_?WLBZtCB8_HJ@Ib^`0k(lAzK
z5qlt@Lew*Ujt5#i1~5VNSgK#^&yb8$#9qHc$%(MP0qqs?61_%JKp~QRA6;~3m5sOo
zkY<B!-mO8qe0;KRxd9?P-YU2ftH#3y^q|pgu<DH&pnWauj_4oSz*8sJz(R>@6&s$q
z8V|8LXvMsHf4n89)8RFhnNNKVx7L-C4vhjiV5?GfS$oyg8&SIXiY39BPiqaxMb=1`
zs9cphpqqp2dV6utRVGkeD7ButptN)!B4YmvX^guO4=<Td@4$J;agBQ|(D-$mCCr>p
zm)-VT%+g!Emf9&^0?Fz8!Jc>(K&KAq=Ya>tf!Z>F_B!1bqK{)M<QZKGv>28)pQ2B8
zaY|W|VBQ`eI3zsu$erm(8E~mvQ*YW2T7PxZ;lH#1)Xdw<6C5FK0UwkjMgo~YzT-VK
zOJu`KZNS%4FHW_!0+bH0xKu=NRm0=KH!Qv8JI{q)t;TYP9&YM0dgAwb^IZ&r7&ebC
zs-~``l$!t9XW8R`EW^Z`zc<}oQ`|PlCE2rOkj~ROq}*~)89!8H>)G|r+*fhbMXtFB
z%cT1CU8&uHu)U)rAK7@V4_w$~jUAeg^*!xzD?~9`q<^#CIqDJt=4HwFmojCV$C0N9
zHeQ21!dYK#Rvx%r3rdn9w$gx$E-|$y@56SqG<0MC^Seb<2(7;Go0W~<Ln9cKrh1uw
zjAKl%-V}0)^g`aNFVGg2_+HO*s$?2_=0ZeFzF><|b!mIm<u}&Ig5i$|Nq~hJ=@X|8
zRBt(AEc^L3L7D(+zjvgh6~iGlz;Cc%>m@!Y!r0T8lt15r{^6)nqc}P@`i1;j`^A^a
zl5MlkFW=jVNruEj{_`gX(oBCl1$~Bic(vJ^Exg2&D=c!i%5p;D#z^E^MRr|F-MSvg
zCj9h7hw5*2>DPPchti61`5dn2Fe+REFx7!<`jgOQC%OhMG)=YRZVIiam%8m(9cR#$
zuTcPWlPie7pNu&HhsWV(|IKQreH2uH11loq-4Ux@|DL+3Zv&Du1}u)YZp#w}@k6yM
zdB)vIx08hf_EKWEEgw%sQqFdX!4&Hi`SMgMB5g|W+lexX*IKheYWBeZWx+@$*V}yE
z#)ik~BTDQF4W=uq`^+vJP~jTfp8CssszjUqBVDn`28s2~+h-F^uY7&Sq5Eu*{J}wc
z=%4v^(2fJ;6^e11@n~FT46Ts2oF(eJ>siWU3|r<<t{#|ZXtlUpH9NP0%e2kV*f?PD
zdDuZgB~So*<H7X4dw8C4bbEu_`eW+K<y)X3*ZC!jLOf4zy1jm$c46t4Er3JF<*XuR
z0Zc@j?L*0ry0AK=UuxQFjr7*^9~*VXvjQzf3?MoH-5{v!FSmjZwGrXi!d<0P?bOZu
z;Es9Obxk&lXk+lz(Kj@H?#<h|MS!%{UFc}=+<ordp{9Q9eyn$9cZId-{Y+)zBovzb
zifN3y60f9z_<#--Ear4__s(y`v@di2na3lCvfSFb&xdc$HpqXvLaF$4Ut8^)95c)m
z(RJ9w>(%jOpOB9>na_>^<GtrzeWw8JN<a_p{s7JyM)*v!DW7Ebq8+1OYdW-gbcI8U
zCxO?tiZgR{Xx2Hr&h)?*0{3C-VkrO=d{VEn!XWIRH&`(Gl5I4MPF#6orpst&X|~;m
z$=vtK#>T8X%vT&4%?VTR%SRYsy`z@LuuADD(oGso&PYJ8Mb0h>*s?Z1PZFTqb~fFs
zLaiXqQnUl5RmD+2TZ=BYP!*yrYi6P1I_8M6;^&Flwbs51M^Fv`c1|^@6=Eg-QD5uT
zfMuZ7GT!$I#Dgg|se%7fWly-{Ug{~-4dVl$v)rK12$-rM5nBF7$pKJngJ^uij)2Bj
z`FS0x6OOa(6@FQ-^r^l3w7rhPPKlaN-Qh5P;8B(1u6L<Xy8sY#kL7?rXutksh|C#3
zs3~AO&ecRl75xZRT1$Ueb65(q%35ojx+0>Xp#9ME{gVR%dtd0W`Twq?Z@T6iB7!mc
zPc&0;749)MJ`?o__Ak#u;~v_-knMR)GGjH+h4Yb!(PPs)(eU5MQM$nd`XgRic}}Ef
zZEOuosNPbtl}(({9d$Cl>$yW0J!c~#|7-HoY=2s^nM4xjJZL6Ft->=bp8_gfbs2L!
z2pLm-8?*J#nrwz1O{~iPu7RiTO>j-)_|A76ROX&wqzxy0#4P@(5Poa&H(=rJzyE#!
z-<rj)nWdL-rMK4VEYdIr=)fIjwW}(Sbe`Q^GeQ<glg1U?a|K)}&=x8mlukl7C+4xG
z1&v6AxKxU}OB>@J6p<A)0<!Jd7c(CvQ)67VTB2Bd<U<deI?D@}Vo}Nnj%xP<K~@6{
zDq#>bhN(qN7{k2y)Q&Rphp1E!eBiJ_v{q3j;QM^NUR)Ww-Z{MiTgvQiG`a$^EEMSp
z8@J{<E05i{;bg~f`!k5ne2VL1etQ_Qq-AvFdRLqjQB9jD=)s3aDv3um9<unH|M4d_
z9>kr$W0@!KCX4cUe1K_Ct$Cp+HCZr1P=+PzYuezj?iFt-7`ixePJ@6YhIbkO=MfMN
z8T%dGzVuB_v*0#F?OZYIOlnm-2n?eW>|+k21H*Dm?@w<hmPZ2HonWtz5O)l4iWJwk
zY&}qWe$}$l&ZKv1nAg5dfsfUz>Q&@@tbstxVKjSfShI0Onaw;sBwzXD!;MGefLNfo
zv$ddRSPu)dEp^-#&r?nN0K}=j^$`?6#M&+0Sj)DVdWQpT3epU5ABL`-w~cjtl-d78
z^8NR55-~I6==61ryqCW&^4bjQO|M+<P#p8C9bN|V{KhnELuJ9yTq<8h8(yuO=jrA9
z-o%wT7kW|hzqb)Gzw51UP#M9bdE5Q?r@sZ4-jCw0ME*X|-oVZjOvyXleY`K7-4)MH
zQ)wLsH1&*hSwLyNKVM%82osqjvsL1_;GCf09kA@sBY>#|(Ez>!fjYg1=*s-KT8HhL
z=zJaNu(p!ZfKZsLY&JG6Ax<&}^oZ}wbLoY5t?0;9v{8x{bph$Ty$<3e|2YYmmO&p#
zz&eg4MVHBa-6?K~{t+f}&gr+g&Z~3fp{#M)wYy12&8>=x9IJN4J)i>=U?rp*2zV2+
z^Xrt54|_i}cx}s-&T?@GD@(W%hyj1HB4>M<WzX3iYa2pPoZU*;?9Ff#$<taz@OvHz
zAgCL_T@bS0_(1v<t!A_pY_{&)J}>{7cwMZJ0C<=VbIb0O<v8Y1*VQOcWCW3zi)z~c
z$Jtv4RTcjIqEZ4PB?8hQ3P^W1BHi6B-Q7|mjRMjw-CY|{x;NeIO?PkDG~C7Sea}5J
zcg~!1@AV%>hGAwe*7JPhQ{`7n{<(+`I*B13%hfJFd*TTD)s}pM0k<=NU^H|RD3~Z?
z7A^~D5HlP9eFh!_=zrj&8o(=I7)U~X_5CkM3ODQj(-@1){rpNagv%j5yJIBjVy2Ot
zJXbA%FDbZC1?*#eu;0<Q-rfT&79cp`-PhD1F5;oE;p767m9$b9U;pq+EDAoFHaIyz
zhu|1iD%JhZJv*+lVFBqXP|cI3BARbXm$>842{>pH_(f@`zvL!#G?(7=QJd8nt@pVk
z12YVx=ZpeE49WD*ub5D+&^i3w%crS7vL?0?ac)O^qO<mk?}<46BrT}*@r}5`KLpme
z6lNM42uR<sf6QQ72k2O+cYvzeW_IbB)C^G5{;L|Hc>$|V2tz8^j2~FPZMYk={J-xA
zf%Z}O+3o6iVbe^*3Jp9()2TI$0f143#tNfH5qKq{d}MxvCZNT6M-_^Ufqpzj6%N3=
z|KlIj<ez~A<*ObvoSUnvxj)GZ3k&Tl?Rw4BGk*Oe_2Be{tjf~48DuT^_US=Yr^@5{
z7JAmUK%>1F=Ki#@&i06r_(stPrJKWT&&1n!rn*Q}=Q@BU=yo?YcSzL1==<a3Q0)<~
zs3Q;1=2bU&l3*TA#SA5XvOZZ1?j5$i2rY@!@9<a<j3gK0kI5EH*k;t0&t}gJJUYL*
zfV7>I-d|Dp$!(QR=k6Th2TqS8sDq>t_=(*z(i-;U0raV`*R@D>ak@m^&}*bhwTx;7
zP&$;>Xx%{$SA_qJH_9n3Ha)T8GbP6Ly{0fvUC9i;0cZo0z@L1t8(TOBNq|RN7-?Ac
zqbd##GICHLE>4%<bpU=SD@8|k+=b%vHxa}{|9^g=G)KNyNRh(sTJ9DcSOYZQIoW|X
zVK!Q2@+<sJ?%qZA{8u>-sIkiDe`KsM@uuB(X9DT$mun3SXk_1IulwH;Wwty0%o6sO
zJrll5Bp6GxyONHRhiuP5j#Rh<KwvtHNOQLnh<~fc22EZuV05GoB&@n)Ii6Y2&uQ9s
zl5o)Y{s0eTtz?e__A+})G<Shx4|+9LSiR9iA*(Tf#|n+x%|4gpb$Ig4m55iIVy3WM
z=L1{-uonvXszhQ*J6ZNp{~p!xRzcS@?+W6Z40nWzs^oVZB~Fo<bV#N%yYbSc5YLn;
z9O?16(=*@(f1{*C3l05-vn?UMds&EK@_4z<Qh|Z^pYNmnufBjpDX-6k_?`DUw4CZI
z6T8dqf9d=m9yLV&`H`Y_3XGt`fINeOS+cgWqFSpl^`R8uiecJ%|2g6P$+~P=qdGV8
zk4nEkXFdUJ6He!SJAStdx|L>cDclL_cKnF;X2L&!QSYQ>cEG-JQPYiz*F#}NWMbg)
z{l~43<jw$uRHS%#)S(;%YOW9Wg)SEXUb<5<aK$I^(__)Pm^nC`HXbnelA@eEIK4}t
z<@8urU#z#F74m)5mz0VkPMR!KkVNwFGz<1e%;f4Z3$t-g(z>O3@Ksq*?aerEdq2{B
z=RbJPMW?zcUGM+k65flVm?RwvJU=u<W*nR@5QcG=Og+wa_h3l8!~gQp{pXvf6km+b
z(<swG%=5I!1Q(^!2qkZB)iqzC|F0hQ|NJ$7(?h;>qQicsDv@o6-c)~oTI-g&*gXRe
z;rT_sn~*4nEZqk_-Vm;|`X;Y)pi_MC@<j0N?6|_rr8spvVZM)xxWw*wQ2cp@M=L80
z96*oc6?Xf}Rt5QK3dz06Ke+|4BAxA;NKyf3;!(Z&Xjyy)aR8658G7&hUvJ2d=QkvD
zx8W;J*S&3+5i#Na=7<?1tIlSva$o_MX;D}^!=1k2t5^T04;S?O;Q&Vi^rz4po(+{-
z4?=L3P*JHn@dVHTj%QeJd^+2S5HClAz=3)#FY<Jb5ktWhItVWjXQU?j&uOm~7e#|<
z7B|O+NHK=`NX)j5z5V`4JOx{VwSfMAcNtXSqILLzD=}bwdY}o0_T6UCcY{~|^SM8t
zkN@ZY97z!$X-1apxT!`uogHJA<NxzBCeNox2z7E7v+Q_v#_fK{AB=IAq81&Ih2VK~
zt8jaKM?t67=LTGlEFQmrY~c5!DMHz$S|!rnNUlDbKP4+SXceb`%u>mq7DPr>|F|w@
zK&uSS1?(Np9k`%sqHsn|-+f-6>s?&H#y55nX4?Gn(q@t5R7>O#GxTimbRuE52^v`N
z*xow1<k(4OdIY==v?ydEk~OCObQlN{pXJ#9?+=nIwd$KCkhymAW;5vZ-lTHr+d(vP
z!ex|1fE)eB|85045lAnRO`w<jA#n5nXb|1bCh_?_*WP@TP5B1c^h;5Ip0e7$W=!VH
zxBBleX9~LpK_V{*EXLwB`AEDDDw;CRTO&p901bTZNa|!+N86BPbpQPu*a*uT+PqNo
zb&>=|Fd&8!6S+Ulmmt2qLlO8QjU$pJ0n)#w2-=|S%-aEHt7R?o-9uBN2*$$!=7~y^
zVnvBeNULHCB{o2337KWiR@$2?^pNF|3Jv#VzuI#*G_&I+@cRX<L=;XyFsuT(blDh-
zsyrnheSYs-(smM#mlkU^A03vJ3?-+q?27|VD@y?<guKqD+wj`2ieR(Z9W3t=LLWN`
zzu)pibTn7cWT#zeoLqm;wM?rCI^V_-MIFDJEM5&$+%x*kZD?R%UWYZ%t>=9(qA469
znkvh*8C|KFR7-(<{$oou(iWhrlr5BxCkW{TZsEj;9lFY{sUoF4WUwSFc9-COC$aus
z`?r3U&c`o6#8|GG80~JH$YaiS%z+Aw=F&SFgM=(wU__E-3yVw!52$fJf<?#A5-xVK
z163RvEk4J-9kgg-3x7N?N|*Y;bEB_$`u#(5or&F2P59SQBl$TUTAaK5IIE2`$qV7Y
zgOwz72JO$s7z`f@$bqAP#)5VazdN~@NrjaPjN^)Gt<vv0>a2tD=nZPi{0Oz7_q!8j
zvs^_Q8?X?^PPN-yz{pKG(p<&>U+qknJBs+ye(0xAS>%+@N_~miq!dN3&rh&~4%ps|
zAVRAOnsd_mq_Q{Tx-;VNGerC8vHceXMeVV$Sg==Q5e|@7I1J){bLD<*#p(|mMT&fI
zwj28Wk=h?_t)FS<{W``0)8{9^cAHSzHS4-g6dX)WOu5|6#k|#dcM!Dl9*C11p}zk6
z&R%5BrA25Rn!p<^ac(Z7zsTyQrwJz0=!t;UNVR^M7a>2t`+*bBgaL%^YGk(UC(Cl)
zhg%k8vt&K|>lO>$x!EFQaq~;5^6&DGxLPQ>IBsLZ{MZdw-(0Wm#cS{f!}H4QcwSk{
zW0Y)Z<-%T<V4GwfJ9hbP4*U#brI^K5*a!Y32x6-WV!)M?B_cyL;u||tHnz~R^Fp`N
z8KXjnf6l?}aKaL&LboZx1=YL=#g*o6xd0?NG}#><x3|70Av|ZI;dFXh!x?zyB1wZ<
zLv3WtY%^0%Rk2i`)OxX7m55>)e6<i^`?w#j0Tn0leEQdvSY^crC@aG1QtE$F_0Wqg
zqA{wcxuBTmhq)Gpra+foEB7t8d1jmTKmJ$`c+<bM{>$h;Wf>JYr`qTK+VWOVMLb*P
zD;EAx80G0JT(8G_rTyi63LrtGKX(RO<o;V>EQJh^%j)u@zn3CVu%NR2b_#BAM><)p
z?7ScPGm&F8%;X={PnMh>+lfksgzSI@TCtX;7JoUL#qm@@JFq$LKTw|YFx>5-&t8I2
z1z=fP%_g#u<EnSIJbgPSWT+all+OOX6AdHXcX6+=IilI0@WgT78;?xmD&3(^7wYie
zfz*57Dc&`lZRTs&6sw<gO}9zWHua#G5%FP@A%@9nnj=j#xm_;TjBC7&oZLuxEfOYk
z25g)1ra^yuNNuKVyQ0_~rXsop2J!M_y_#uZLZC`p#yr4Hl-8gnU?mr$_tj3(MEA@2
z7<sG+6F29R^t<UC9g<epE0S<xjLl&MfWhl&d+kn#GZY1gwa(rxEm-@>r+r`>O=laN
zq-%8r2kcK+R{QHis$HlGOw6iTsB~Jt;h@7<H^~4CV#D?-D4s70RmQcN!*^Wo+wz-G
zC>O!s0~|h8^Zn)Au&KOv3_@Ydc(}2Y1KG`P*}7UjHM`Piu*&Sk3IWeztG&`hW_Nns
zCYPY$XzgV+kUrO}p0_ZevyKk3qEo?D7gJJ+dOEXFdtcNmh^1;bq2N=g(hY2T+nK@6
z&F|P4)?_$ju=I=Oxmt;8Q^j)xqBqbz-bWxg>~t@{-sVfiQA`y~g@3Y{CJe2t-k11X
z(w~WGMhH&L9Tt^NVE_10{+dXEoF{lW34QpEpoN8TBC!>C$teXXS;Gk_F-e3}+%0<I
z1Jq0OKP9hBLTh`nX>*utlb0g;w-GVZ8Ve+(Laera@g3@aBn!IM2NoZV3m<ZX^ybp)
z1oW%)>wfycN#p^ZYM#u-_Y%&ExlAq#M*IQ7;&s8KOHz7I*WAoKg;e3>#~Y}~P@@~S
zSEpJ8AmEy~SitbYUCxGcGD3(aI|cBWQ=sIQf(vygFQ8MbTPaHY8zga(1NM5{6Dn9z
zM((zhLsuk%!PS3<Nhv$sPo{tWqPgkH*gR_pAkakVSPgqC`3hedj*`!;A;M6`uATFf
z-GY68wuX%5z0)S+Zew|tz&@hP!}zfRGy2s)$WCIJsLbt6G9h>TgTU-k=1%hg;n04y
zD@^v5-PzQ=#jTh4S*)k%!n>XY+Z>Z&O6OJ{6Ci!lz52d<a~+U=j@Ma&KWPkYZpKXI
zvo?o0Y4rjj3MFP&9n-lAuDvMd4Iz)y-nWZI<G*1%CgcykQArbx;~wfm|J{FsywT81
zATUe%P;YRJ&kSG1>j|85VEHJqHT?TS`71crwe30JTW@{4)=y!5(&&Czb5YPgL96tb
zQ*uZof?4&8dGHTC+5HT*L7+AT;GZ-|zMV}cwoF&uYC~I&%&K*HGT$Dj+i=pCHAt+y
z<H4kFk>K^8R!LCY`0uz%z11Fl8jtJyt-;G%K|<eYoxu-iDLBPb)gQ^ss$5UqR4Y{Z
zw%B$qQe8P?WWFgIGN*9$iaFndMV{!+CmTq3KCxP2l`1zP`@a?Vef|o$_d)O8@!#Q~
zBF3h1wH2flg9HjK%#%D<3la=+yFK(?1i7Pvg97rnnTXZeG!+!uT|xJIYt#;HzuB*~
zD%5`iKFDPQsRHv}?H&&Vw~6h1jyg?@pW`lLblq|Qrg`yDJ5|YzY>Jdog8xl{4R&7~
zo>682wN&sPk*@#`u_@_^W@Q&~(5WbUv3eZ>%c7s?Kh!1xB2-b*v5YdD&N=V5H(d#L
z*w|N_G9nL|J7*h4#riY+AhkKq!~~%rjS_85?>gNU2P9v-HVJRoW?suw-(3O8)x4Zm
z1HXco{%yqmOzD?XWVpbv6XiE@K{xf7Y`Gn<n-9cfh3H)t{hVD7``n3ooh-@_-nFT4
zt?LN_moUu_!noNAUFjNOFC#9@jg@K@JgbRXjkgEg*r}qIv0W^jp*J^Czg<^mX~Nr#
z0`nJTvpCV8Ei5np&7DN>%-^Uv919q~V=`!n6%zlL^U~d>hW6>R8*J7-jm<K5@vPEv
z$78xWfXUah;^Hm52hHhMEgX4f7^R(FRkSqpL#X#0wgSoDFxC@dYO_d&_PI;}Bek{3
zq)+I+<4Yiql5U4ElY$Knc(>oNV|!wYPz%9x+51a@X7wu<Xmus#k}&fn=7j4b+zF|}
z;YE>lM(i)OETX-|eVJX1tZ)<0f!P5Ef<vcPL-5ceP%dI(p#2hJ;ykfj!rWHeX)!Qf
zF5|yHSy^CV$YDaBdV#2)A0kxNbxGV%Nd2$hy6=yQda<Z*QZJb^{|6m#DW)r_$Kt_!
zI|WKMuVl$D+I(Ai{y<tEPIkO)%TYaP>OOfIUZWD_#<vHllT))~cUAyic_Fg&r0prP
zFt|1f+$JRs8^7P~RY<FsOC!+hlvDZ^iAWvjXoZn=0Q$M3O;DfK3h|;%*O+}k;Q427
z0r2o`u{;sSc-*0+FKpIes0PJ@Jyb&I(CR>L9GvHqbe?!IOxSZL;%%7$v@8tw#(LkF
zop!$&dI07!!)q#?D(z|TuYuQRR0geXNwMT2xup6d=BR=`S_tNo_AT#6sN>Fr{x$H~
zt#qU>dK_EFHNGFoH^MxauHIqGRxelXbJ!RU_2#wOg_Oh$-6kHrGRhQ^D(d8~$}sL(
zU3s}(r|>dLvWq=5NngKIT%k+xmDU((gFyJ};eaoHT0>b+Zmn<9S+RYKaJCILSU&w{
zjJq!aRwbaFI3u8KF}o~vy`922!VVD_P_?exT$`DRu)h1AME-9pF2HO0lws(tCSpq2
z@hcMuKKmOMpsaLIQiggPDJQV6Ap}*O_)7q4KXvlSS;p*xobu&n3sm>R+3=hn<jW@o
z!B?wmX4BQ)0`w~NI0~d3)0Lrp4_4T@%F5Uz^Gj<4a=)v@cv7UB?f%K5I?^f|CNml(
z<aNTZ$W}Tv$jDw1GuJm|^K+FdcN!YJ{`9&17CRTejAtA$?JbcX%)_$oi(*>xRB0P)
zFP8oXs<%B6s{*y&%BJwp&$}CmVud8%^@}`>7{<;PlhM1Skv@d{J)j}_Hju%kg?qU~
zB;r#&rEt6w_ydp@e+IN!`9OdkUxA(^=-9V*f9l{z$QsVeo?ns}Q#~~jM+Sefh$V;B
zRkA27>!hmhpL~$(EYU&|h(OKW)7K@60!n}7-Vp$yc`ni765?0&QGnZqNgf<=e<`11
zrb1&THwE4!_+98I8PKE`D5P<x)5xdFEO<xl)Cf9s4GR)*-;`C6wO!`N=rz_{)fuW+
zxbV%O8g<fQ@ep=}bplg{H=7q6)VrGyC!&e*!nDV$1(TmZ<t?*L#CrdeI@6CigNvdp
z@usz^e0)9#{a6B=whBFO@E}-YmLY1%TlGWN*2MRlc<Hz6CXk2x6=1`7LO&g3bH?NR
zB9O$${j|w&UjrIfPYe8QpA?We2bIxaxxSD1wwyVDbz^B5U{`Qg8ZzKtMeJ;?1oV>k
z5ig|cD8aLphB|x{-vS6iO%J6l@lTmT0%#R8=0kh0N#=<}fjJ?wRu>n*)U{<LzQoWn
z7}Qq2SWXf3u(^7?JDFgcRgj8!Bl)p~S~2{?!CvbMnJtf%j2NvVy?2pT6ILRdl$hZM
z(%v9eY!}}kQ~c=%N8P#<&lOqIDwnhKnd!h&Y1w2Nt_nRiD0v*-!^%Fit*lFj*03!=
zjp_Xl0w(&SrJC4iD5sH|?YN`a9OvO*{St9&Vz%Nc2U)Tj4(LFQTH+Y<F>UtvF;m&{
zvDb$3ypzc#qZ>QvArK^#=x`QnOZ`*mLyO;0U&VBTWuWZ2h3R6=*+-u4QYJG402MAo
zyg{;_-K=TFQ0%`|SX9NqJ5PZ5`s@v9Tn5nopitW4nB8)a;x{WuV}$~)i~AD=6>Ktm
zc#9x=LU+@+t@#Jfz2LpyfUHg2P#-wCjG;HlIl$8GBf&ODAl^0`4Y~;=x>f(b>pvYb
zaEx!FfKvyqd8MF;HikOSK_Lh)+)V1f!y?VA8Z*e#W^CTxum@2Nq=Y0<>CWNBb8+D1
zPnN#tXLdAZmQBqF`#sE9@1*yWx?NI--O}YeI#Rsy^>ODToFt)sw#Haoy+GBwZAaJ@
z8a?OP*&#*gV1_|&SM>dx#tNGDXhxRSOo(=!-IlKGI}za|I!)<<H4&``QDP8^=~A89
zKiWM5!-kl<(Ije;Umz@Hn!k89fN=&HnlsMiTsd^4tP1M<-W&+pjst=)i!{9nN3x|F
z&`%!0*+Q<T)kOlZl%@{?K8z_zW63ix#(`j9sD4ri3X@f<{AO40H1;-gCg9?dT;&A7
zjIHk~{bdJZX67>&n{ravOjRrPSt4XkJ-j$~kvs9UyaX1FKIu%dc+1tjh`f^_^`-b-
z$0H`_sRbtKJ88e~=pspjOB=H=(gL^O=@-hJ{xcviuI%n#3jTnZWbFr|#iqT_UG0v?
zQ)g<HyF)X!7tV)qbPA=3Z&Mil#v*`Tu^5gGiPOBEE7_BFnMxI<Z*w_ny(KqY5=RGG
zZOR<{Zl*NuKZ^G00_x~tp5MRS?+Y}VP0{-jH@XVB93pFcWuYxmE2!?@*h~hBIO8D|
z2~^lDl@e}jlrFR|w{_L#2p+?-a6)*0YoSR#XDSgfv#dzCJ8MZ<q0^MQ4bIp+B@u6>
zA?dC={~I9Wh8s@Zu_P&{MRn*=XF9=1uM84T!QH+Bvd-olA?r6vrt~QyRW@_7{~Qj-
z<9}{gLAoqBGh)z_7K$mU>~Q`HvR!Xlzj`Gs=`8#xZ7&yfH56(7jc@<St1_zQ3h?)?
zj~nzBsnvSF5&T+dJ1pzMkM<;Vyw*Sq?lGNSeejJBa7s@jIIolk+-VCwqvP>@2%qx}
z&hS{9#NQevgP9+apKWz6p^!Mf;9Z(O(6Bc=42G_mKup$_!-fUFf6#Jy)e*yg&E7xu
zvx;}_u8rM^$n!uvGrj5P58S{<;OCyZZ(lx(y)BD5;0o`?e!MR!teMpoebg$@@9WLE
z%j*wY)$=)NzoO$Ac3;pb<Z?8MJ{ma@xsK(pDdO@vW`Fr`Ow=zGzxCAL#n8AGJ7Si{
z%?NC6Ly!YPEw~4G(bogNNMaB=wHleF_qo19l1r@kce62B$y9dKXKB<y+iG}EqnITu
zC#AC;L(2E2Kq=wZjv;W>SHf1U64RZrQL!ir96N4)vyF)Ic|!;?g`95Qd_#Ku``NWT
ze#+gTfMHtIa60w~+P9%>hi^Zv_Q5313V`R$yZ78>vjow>Cy3LHkXFzQS_l>-to!~o
zx$wP?y@g?<XAZ}k%TbH2^TkL~NBkX`bn%qHh+hm{_W@aI`Wt+b05VDU^5hZ6Z@qr<
z#ILV2SD&v|H@2>r>q9D%cYUl3SZj>^1{+o{k|nI>@})3(Z#v~0NE4xxni09R`*YF<
zqYs4u{ew52am0d^N07iTSn=$bzh;5jlo=9+)XHo&?my`RIKl!)4Y^CuO%F|1OS3~>
z=2CCsRxm#ntWCQp<a5Y-^3^SNo#Tuq-aS$#0d)G=YNQD4KOwhQ>+<%wF{Biv#v$$k
zk=wS{WWK;q+M>;8+&&T<U2=v@wNT&wv46K1`^|UKN90iR?$MVm38V><7W+_Q5aUjS
zZ*q-&<YQKJ_T`v^le*|Xy~<}g<nM7=pX+v5@)p$kCzP-$)I4XeJiZ!y0TyITCrHp*
zsP+yAAZoW+F3q3Zs?-(imwBA?iAj>%o^Q9aWxo%n2oROJvNw4UGcV#MU^Em9`5vdz
z<AO8dUOjmL_yNyerp77gy64Dl0T#wtf5u36Kd1D2mOxi=)k7{<Lga6c1LsvFN?y&(
zj73uV*=7R%pPt3q3#CIc(BJOEnVW6GAUz0sqhtEuMaS+ejZ(J61}!)TPykQf>);*T
zlEd0(%c1iA*ix7WO8DA^Fm7!j3^TH_1;cMw#lR+Wx?&0=D~uLg>QoX5LJP6?4EJ2{
zCeyUvYh4vZ6Ua5;`4-Z~t*j3@nk7B1d&J@n*GE`LtvZumK&cQM@vYnKA~P{;s)B9+
z>r{r7S{=t?Sc|~zd&2NPB(vx3S#s`HQ~K>YH(or-8(oBqkqaHJ*akaSS9=tJ#RjBu
z1PtXK5*~AwTGqPY(~l=Fb()O>7TY~V$b@||JR{_#E#&Z<=6o}=KVB3<mjgusv&cWD
z<tNiVg03rHR+fQ#I^TmxA)O{^%5g*+%ZJ$bVs+^xiTMxC31gdmKRLu8j|CwLAWjk2
zmANYIw0y}dQu~O@DUJriz4#~7gz^l|dEq@nCOb+h&#fqaTE=36Wgz_hE9#}#l{>Q1
z5FBpDZR9NdPWw0>;yf-s!?~#f2?m?l;;f;v4Ij^g;^>+Fc{<D2U;fGV>nRAY8B{tX
z%tn4&DU<WHQLZW+JBFi~YTywZSBS@r*`t4Om;Xbhy)~Gbus!NkgTjBVcZqaHNmhR{
z8J@+?xAN}1c9qRW+NkNfyjg(1Vfdi^UyF@WNvuD-3Xh^45^X%VjaXAAq!|5b+S1%U
zJZ>{ab~^lC*SwNLb6Yh-em$$g>Of9_T$i8K@!8%~Q6lqF)X{~TFK?GCf;2PQd~1b}
zW710(2E<TVG%<>RQ{fmQ;dsg(s@Lz>BMF%FBp*_)EhU|1{&bii-JNPWS*R1;Ja=0V
zMr8e%jV*86kqL>rlJs7$h_m&ZZ1B+r`kP4nF(tDvuT__X*NGubfa|%;(kzQslpBua
z>uUm0Yb2%VukQ=kvNJFcA(S~0x)!noX5hmR(n!M=j}U-lG6?x0H~CKUtM8jJBal3P
z>5Q6eKM+i~7<F;TlX9vD6nt_Ez=MGN<Y>_J@ff}XoigUeQMZ%`VjBSzTQB3@9sG)p
z1}$PdY&v&;`bJ3mb=ZJc9u0Qd2W^oOk<Fk(V9MfIQS_--ttPoEzvFN{e>WNRI%d!1
zSO}4Fe#UzGSM{nyc(F?Uq;^(!46%p~u0>UrKw-jk#w`n^tH}t=Jl$&MiT@;=@Joqe
zDSu2Tlkh!9<5E~|u}a9|^ZH2xa&6QpMs0<TXNP^bEPA%#|5aXfr*~MxB2Fc6;@M7P
z(r`zJ&#lJ^fv7;^?s!P<7nN?N?x#B{jKA@$%|<*nGr6b;u4KXyFt!sxw(gGM;3ii)
zoKub+#?LJaI1R>QQ7Cq;4y0>)LYN+~+xKktx@|pK=9eIlJxS7<K{vtt>AE@AVnQl|
z_rDCN7iKiS$AR3^ytX+Ophna*tgD~naBaQufrBJD{YE~Zo*c(VMVmX@YjfjmPs9Om
zI-82XK(1~*X01O!bRu1^U<N$hB+?s?odkr_hg)v5C@G}t?fKzOzr1VAmdZbE3^rSd
z59hjCMi+gp5GZ5na@QNDk|z`CGWnUWh%t)$p{BegsyGZI{K~FTtKjnO6ixJ>3B1BL
z(ewPG+jfi1SzEK`DNi#t<Kjn&Ik1iEe|INkj-HUe8GTlr8G1iAD%J(9_0eD~DwDA4
z*LzdrX$7!D^jibKibC-6kSDR@X${p^_brVVkX5y8t<q7%9zM&K#B7)t(@<hHpAsPp
z%_X`1ph&9Q;zhs`?Y;J(*dOwDu2~Y*@Q;hQR0%bt8zRK7`-?n>B#qlOi#R+cj1o15
zj4fq#21o2l=Aiw1Oq#SS0V6j-O?H)0OZ;RluHFGGnqN2*UBF=^t7%>gjBJTM@1Jiu
z2Uo<1^#jUH<0c(2u>^~HNl|i!dJE0^m<gPH3Fs2UbR7jk(|oy<U>+G)7RO#^7gR15
zQhzyE;#qjW0{tcZRXgc)X0IWOte~X3X#2sI|G;**C<wb&h!{z^A}Kh&_v2WzC4vPR
zH&JzpbU`67{EdfIy_YQOb7LrHl|@H0h=zXY`*S4@BVRp{jX#V~BY8XtIPLy;zq?~8
z<+rWeqA9`e3P&6^cTGa#&vYo5o9VH392jdAhE0?w*SsIWCg%PQq*#j$6OProo%1AZ
zRn*`W;a<F!e6^*eaA<n&h~Y6mQDcuGmx-BytzNYh`n*%}_i<CT@SCYfqBDxAgf=VK
zCWAe7-`RtpQHOSBI}oHqdT(}m!}=Vy!F<;;OB2Rocj+KLSGslKNx&fdc7?Tr<GH9r
z5)2jDk<44y;%zK-iPIK(x*_uz_olh;ulV4HdM~>IZr;0xEm4PbR*l_QozfVeych_5
zOG!LFLP=WiQp$ig;qw_s^g}cO7x8F{;Nqb3FSfWc*9uEIl|MNCq&q<J-9>=}-TbTS
z0pv0CTP)&AQk8ulz_?OLZob28vz>A@$pNd4lhL$4u5X1Ro&xj>uxy_!v=?x)#s-=v
z<0T#ReGaGQk0y|G@5(a1;`SOeuXV>RK}uX~8189rJoA4>qEq_kqG6k;r-hbdSF$k`
zA$K(cpU@2T?rA7}YYg6K<%X(4rjJTja&z(PD3e6v9aca!=i*)ueVDq<<_+x2T8u`K
zU$6qi<UboMHe0=Qa2NVwmKH0A!$OW%D3YtG&jW%4UDP`b%EEu$GK_9UG{fISwvHw!
zq19ie%=_P#xtf=gcuTy}X2MW90%wVsITmSrnhmEYt=Lq?`Xc4^avIOao_E?k?Jmd*
zErV;HD<3;$ex*<n&u}3vhP6h2h+(|xXtBF&8e@FZnc5AXoNR|hw{Nq~S+VR6&<e}w
zc^+%JzY8P&yjuZ@M$FL&#3n;meK|LOs8VY&bsPBuYw|_o&yc1-y7^J^Z3*8v9OY`R
zWkvX5++DEpWUA0eciA^MIW&lnRP<XAYTvE9t@7b~4LUi*2UhAEFDq)=RVQXNq)}lj
zQ{P>OIiM%+ZU5S|D!6J0mMw*?!45DGL{q4M;Yh6e3tl5u*xc%0{e@3H(eH++dyfP>
zOVE7lzV9rXAo;3^HZqnMx5)u^{3cZ>sLw2x>2hcPnd}x=^7!}!-gF+bpHlSN+d#9@
z8SC;PmQ<e6ln*<>qQ$s>JyPbGOx9C!Jtn!)auoDDO~EWh-prhR)a+{jLQ$f#H1-Tj
za{8}JZ?#BxRs!tqNMrZ)0SA5;&L7)n_v`SZs=X+dH)nnyzu9P1Snd6kOrDeS>yAn+
zEeH9Hn6bc4(SpC-NC+8%t{HssR)(S0`As$k1coa%Tvm$nfSu+aHsrWZCSobj4qKLn
zgXt(>k&^g(EL$v_Sa4YT)4Y42afa1oZAhA)9ke;4eY(9UVRM%n(dG_Hj5&XIZk9F2
zqfTBec8a9p*}IP^A5ZNAzu-#+AfQ%BGfD52#Tm5kNuFk3XxkIQi(ukzL`zSm|18oH
zKUsJ0hbej@R7pCXbsFf+@)qnJ*_Ua30{=PBf?v$}E5T#mDXv=A*ksb!)Ua+=e|NV%
zL;R*RbKkC4C3cAZ5Om9A4o(|1d{z6xyzHG|vcqCE7XAQ<G>;>+Ff2-I;^*oHR*JVk
zzp(EyB1tGQebvJ?mR?x!NBYw-1nj-#2qcfZKQplNM*FfxH&Q`=jndg~%m(eUfIpBk
zd&aI`Wvqm@=09!p_x4R#_H-6Q=CZLwW1lA_1Y>oX<f}_Du0kajMPMo6y~LHE4?4Kp
zF@2fuQDE$S0HrKp4A%9QQ8~EW`Zvm`|KDr<JU{maX>%Um<filOugn|AzQJUeHnk&n
zSSLeM<tk+KJpw-S*U)u~vLsv`qJ@Rs0z$mimAl6~3UtWk`OdIp($H_s@9bWl*_`fJ
z?Y(Wo|2Q%isx6KaisrnIk-SX^3Hqn23^IK@16xE54?c-XE2glL1KAr<s<2A2elMQr
zRM+h(dq{~rfK_2(IIIH37Dr#)4&VltdJH<Cc-_PX%O@&gHlOzoqnr0k2fv#yc#o|+
zC59{|W1Au|O342_Z)0SsaJO^Ix)eQUw0VNU-Z9LTYhmEj%x{bz$9ROJK?X>5`;j+J
zB(mBXtRX*k>~40OXqBus3hiYnkXRhc<{9!;;&MB~HN3)eUv0@UY@C^pM;VWxETABx
zZ;VMSA{hd7izLI3@t*yEn;e#Vh@LrF(HPP0+4T?%b4=dCZxbLE7VeOsHmNy}SG<h1
zT_-?E9P!~@VU8ZZjwz5!Nb@WK{Z%B}p0t1*4e!n);NRvY``jRJ$v-2$L8oz|+Bn<5
z5Vm_FDedD<8SYKI?GJFQFTAq0k9bdpmvPTO44eSNScj%5A6}yxZ_77>Re<Dhm?cwj
zNS+en3k+hC#}b_%{zDhRnZV)o<J9Jp3kkP8vMUJK;FkU3v}Gk3ILw^E{}~!^N0wBo
zEjNg~#KWjHHqQA{x60&$2(|q%++e!Wm4z0SMY<b{79}#dh(){KZgx&*&z;MepAija
z1$|eJ2E$BiP{Tm3eg`dfo!#QDemxhF+5B!RkI0pPjt_H8V(2$>W!+-j_4ei`{l0%H
z*(|MGyA0J+j0Ely(3fv&JA-HHSQ`tnoyi~zswc$zgLPesSL1|T&XJIciBcv5EipJ2
zq{)|dYZoVKq(-iIB0*pq3nj7!>(|a}G1MlNl`j>0_mU96tHI|k&&?p2=OjMsiL+EI
z-N((^7UUiddkm4HPlc?+Vq&2@wx4P;!@uy9Z{1DaxApRo28$KpMqRqC>i?w<OqFd&
zWq@TYHrR-tuE$wAuR7se?ukUdmx?GSm@_`!QW*Dnxr?5QcL*(GI8ZkIB!F=7PJ1BE
zAW^RlGnZ2!;TGOTVYNTPSAX&s7u6qSv3_z?a?AId<?UV_A)Ve^H@ZIP?!3&@0#>vn
zuXQo*!I-n)pht*x-A)bW0lKSkfZOEJ{?1{EaJLQCKIWG-wv#f-k-9erB?^zoNZzQM
zWbvM&5CoWj)763F{iDAq$s^V$o0z7sOQZ3Es-u;x`rDL>u^bJ!Z3eX>>L%s^Tm>4)
zR-MeK_ltAEZg6U=I+NGE4<Q&>E;QgX>!=ivOz~gtR;`a^2swhQ4xY`()JQSh?jcVm
zas7k4=u_%spz|53tT1W4efc2z*!JcnAaf}9Tp@#hm@1oxuo(4f05M3d1^^NAC--^m
z58}TbhAYwm`Oi!Sv!F(RzI{OFZmz`C7|FF?=Hqq15MCe8oFZB@G*dh`ot1>y(8$<=
zu{5ui!=x4)%uPUkWF1HTU?=yR`LAZFpMo!`V)<=)l{8<{mDM<UI0zt;HLV$blR0|H
zL^|2EPoBD5xWA*ZiggLgd#%^^4RQbE2DXD`4Khf!f9R{=hTMY5jatPOG{Bi{Ed8h-
zYWrpJq3u_qzJ`3bz~SN{40@FKQVPBQN6oT>*sMqMugq(s3H40=OQS+I7q}0S?^MzS
zEGrgO%?C>Q<f0|}#ywY^G{B27deIXu%xIzLh~>rVP&Yr%1ySQN)wZ8Z_P+(WA>U{E
zmLyy4Lz>F#8*HE&qa3Uv>%FFp2EK5<q)z~6JWasZFwA3qJa<uyNS}~i=O6q5TZBKU
zF4Fi{MTP!WYvbEJ*ZCpMQZqA)vNYP?Rk~o0JGepFdu|$qrO4lvc5>N5*)d7g^x%Ae
zL1b?hyJ^h|rd=@0xLv7rnd~$Cl2K~%zTGC@xeSXt8t=OMq~*&BO=BXF>%u;_odweO
zH(f7-nA;5pUf>muxRq8*LB;lUjI(TBr{u4bnTOT0>1O&0u=JdufT#C){>u8yVELwc
z+Mwc=%{glBfj*W=+#Yn$hL7F*2DR{$Y}y?vKtFlI8Z-BW=ku#2()v={@%ef<s8k0v
zy_m1L_g6<rNuXZ@CCVOmZ@uOilcb&=aZmQWy{8&0q5HfRefl#r5FsN(k}|tPnGpoS
z>F%gVjrL38CTATc^PdFv0!v<Vh#wtIMnE19g~RvK#n3-7rB_|O!*D;{ucgZE9WgN`
zaIXx}#~@N6r(LUXFBl3-z2>Fqy&Iw6L)K}mV5x9)=k|ER)r*f(=j*n<zXGm^IUOxI
zz*WFwt=jK8;jTx3iccfSvv$;}jP#j%gxfS^z1Ip-<sKOAbGlr_ywsCU;2VE=V}Q!-
zQ7U|nh(cx|V!AA9V9R|S7+^K+Y`v1Ak<sqzpqL{tb<57P@ZRmsHvPNgA+3@FxbP{2
zI@_B$4~h@Z+EpiqaV9P_J;e)+lB7x;q$r2$d=U#9hf!jhrC@=k!Xg1QG&{DIB9~U|
z5#Y!zZKROqY=0dmB<eRX|C{mJ4A0GaJdA2rIQ7yHl%8Dbd+M}v1r?-~5K56V4bU#P
z!$)n$oIEAlUXiu~ZRB(}??)NFx|I13dzvzj@<j{zM*RZZ<T$YLZytTN3PokVu97`1
zWJn1zHswdO<DV*EvlNF*JrW+2Kf#<c<xH{74$M}5KkwY`{(B+#o+`(JYyg+PIst>L
zuXQqY&ymPY8g2Z}MBZU}QpIr6Cq~V3Y_D_%*N1W5-$aBb5ZfeQ%-|4zIrlYly`g87
z82ns)*0ppb<cE5y3&TnSo9(0NR#Gg2hj*D1U~N7Vn9oGK(@gtE2W1*X;O+kGKf;x?
z-<G3(FAOZT$t$wLDk)qE2lAUOJ$@AD+fxZK*cY)5A3aY)7Xqlqh>HR)ht2Im8K=QG
z_*LF`)moGkn<`{(1^`>8ZV97)MU*1<gzY<E0AA+vJvPHQ+Jk?t^W*L>5ISV2w`2GF
zWyVM`Oq?QjC!@_cB8CjY>)xXDl)K+C+G$-BO@ONlev!!`;Osn*d)bre3-|mHZjTPe
zXrwoDDoRi1^30{5YL)Qx#ij8t;}ta9m5N3HQ<&i{vc(E?jJQ^8=kztcU%x3^rGI5&
zNbveP6UUZjZKwgKZj0>4yOY0V*JzUJU7(+oap>Q<-=u+^?KxlANEmCAs$2y!S@kl~
zRB4JSJp!^;8>LyqrlL@9hBw^>40F@wGs~4(e&R2tx|&km>`#7#(*m6^>H?GX;$h@F
zlbP~9>+NL}%|V9^<B`zQ@+4e<AgMl|qlojDb!~1F35_#lGcJ{PG*>YuJ=X8~^yd&N
zb&19}cttt|d)Rk+6T8eZyceN49AK>KxQ|jf0Kfx%Rcgx2A9pGI6IrS?<p}-fu{~7k
zMI>W1$=9y?npHe{@=a}=b%|G$O}XS7>oj!n)zY6N;P>2&ZxaAsIv1klm_c=r^bb$$
zKuY4ZA14CQFDbcOUj6G=S{TlK{i9HMH!UKGlGY>(5oPOMa`<RQtYr}}WYj?Yagv2R
z!o|uX=39&%$QwS1|3RfJ2lLal!vT(Nm*7AntNA9gwk&SDTYF!=W_5nxw#e!PNP(8b
z@xhw${Z6jvixZR|rC)mmN;&BVV-$>IZ3=kjyg{ji`|O%h3L`5Gmf0G$@9FX=4pEk=
zgan}p5>ij?s|Fd<ZIzf3{Mb%?j^Em~_vr3$JCXhn?TkW3YN((&_jwj9g!M}dPgj2w
z!pZ65oO9Fo;yU1k_6B`^p`<}j-q(!pY`fV1jw3F-#)#8LVch19<%?G^u6HG@x3m2)
zf=$F{ID>TFq2XjvJ>xAl+3y?EtG#^^JeD7q<)<X7j95weS`P)dH9f)C0Yt;KJZzGA
zGtR|GP_{A=n7E_COQ{Pvv)Ep<>wq+wGhL-M8)wvkfnuaqG_ngsHU-AnGhQ2_<##((
zt_&_9jSSi&l1q!M&A1=l^$5#$UOdn!ns?3bN6egm@rhoAUG-d(dsDmao=|PGZcCC`
z$q6X@oi9fsu**@XbA6c^+k&(0bDOzIMyejbn^*m68(Mm-W`z#ZmJSIZ-tp~&3%DJX
zP3BICpGvY=lq-$>XC?dt?U`7TN@;c6CeQ`qX~c8fq;=e}hQz`;#>hrDJ&m_8O(29M
z-&tI;Z-|B({<FPVBSV<yrsOfEDpP?*JL8$L*irU*`HS4@71~b^AobIw+>snL11+g!
z<xDImw;iOiOhYQZoeC^L!-iTh=bs4>EE<AhAsVX&!*8)-bV2%p-@@kpzO=4H+()+7
zLIrT-zeGn?Z(1rbqz1lMyQe<sGexrgZs4B-oA#v0$R=a?^SfzKGH6xKC|@GE;^ZHH
z9^Tre&fwb>+3Xhh;l)cODr`1xuOsB?UzLVoG8?!~d};Gu$PKX>AbU_ld_saNUcBH~
zlld&BK0|S9{5tE+_GO+c2kx?V@{M5mmZ?^&iB_n$Yhd)8(<DN4IqAwfm`<jx5Yo2O
z_6u6V%KaI$sELkMMIO|Lmlxm0qjq0}^A<ys>J%y{INxlyXYS-NjTBUDSF}>#p6xnT
zu1^(#?Hq%eiOE+E<gx+8=2;_S$bvZko^Gta=3x=N{wJM@UuWY_fF;y94Q&;F(EtcM
z>{t4Z3Rb>eP@N5}6YAmIDRXuaOe`_Zl?*OfT^_ExQP}OO>Y4s#Q2W*Q`k-p^Qgg@l
zw`o~^J-y<b+4AoZdPSbU!8{ftD&HoH<Rom9N2exi%EnPaTO^H<!fu->k)6(K%|a{5
zcy=7U;w+B+S;5?uhMUSL7%DclEbUwkikyyhZj9F-fW@)uN3%A1*JigZ`m+xS^cr*u
z)Gsf&XxrM!xlHIsQ@FCf$`eb5z1rMhD%qZxkC?K8!Y_LaU;K!8TW@`7D%-m>Sf?eT
z+ZKS4+BC*-MY!b4Wi|U-+^3SS&ayz#wW#zlY)k0)zZh{}M$<WS07W40vPi;SiGMOA
zl&QBvKI6yv%k8`j1RXk7EyYNJQD?c9{<y$geH1xWz~RmM>UTpadCwLw48Q4n8nMO@
z3IDz+{=CV5hy3z2nIw>8k>|}ptD2?HvV&e8pYuxNU<y#V&HPThL3CAym#3D9LPTXp
zHlp~d-^4zXQ)cLs^8xuu$!7Z<wu`=HIIk-oz`*j8T%A1<Q18(7zZ^Z7X+XmNl&EAM
zJ_zx)J{@p=UY@9z>3$?0FG{z-^Xk_@7}Jw}{G42+pAQ5(jBl0A6@N*3#aV2G?VDO2
zB)JRl$!p3nwixDYKJR!bHUZ8KvMGNXGOC?n9{cm{EYGxT;^`&<i{W1p<KY{$N-8G^
z-GK9R4AGa5k?k26YveT=EZd*T0FVOka4!iEdfd_)`rTH&h~+vund~a$Tg0Szv5c!{
zW!T}8IWH;!tftME&-FHGOh5A3Lpl;@qRG2pKa$Omwtq>*p}_oXUOFzx3VO(I`wklG
zgn#z={(|H)of#Z4k#mr+-eN_yNZd;a@D!H<-=rD{5SlCTfK`srpR&9-SU8ip4C_?B
zH(9Sp(Z(GXdO~BY<yB8u8<QUor<AN$B5&aJrvX4)E|dp2Q%vDMjzZf#vyWHWq?%43
zYFBE2It@tt3w<zLUK0c&Y15jlh=6>b*z=vyiXktKen^KaOT+PerY@(wbmk&=Q<Jrz
zNpJ%(IF@2rjN%O5b{x!OuQ!8~8itwlmimhux$Cy7DP(qO?)3g9yB^4b;P*UZUs<a;
zgz!KoFVmZT#BkdPtR;kd>S)F|;|JQ2=1o~LkDs#PO}`U#*fgeBt1Y%5YInc+o`ms9
zVLy>xDaJ=(x2L4;t)G*Cqu%{b3qH@E06;(qmsg<vevvP`CEGGw3Q3Repq1AyYK_s;
z36Rs*i1oxaJ4Syz>b+g{FS5hD(IEpkiT3%KbS8+GLYrYciZ?haiJd>yXrpW8&5(#5
z9yhTcx%CV1%ecpZwJe>&P-4B`nSA8qm_TXttQxTV4{i!zUR4K=v|w0o&JS|Bi8_|*
zmXzQ2{Q+lXLvxYq{kvt0?yK0}1M09+p3N{&TaK3GE9s>8@^!(z1Qkno;eNB=ifJbL
zYjuFyT-5R-Kr5P`DTawer9>y4dHRo-!TxMXLnQpm_Bemx+reM04~C}0=K%Uva%($l
zE8FjV;AE!*co~|n-~(mVH53p5Ry%BR5c7Dy1c<}oBd+Ye2vZTq2|6bYPph~#%e6>c
z#cClw?gy*Nvfx1gP%xyFv2)T~%CQ7;dZ|R1-9)6Yj+F3+f177!UHN<}lKuF6R*{38
zVqa{&p5GYD<`tdDm-1ZDqZtD%Ipg*w_qt^R!=g3KDk}db9rcjh3@&-6HEn>ZT>HbZ
zDW-a-!Y?XH&3cJ36UWx&$AxLV#~2U1Y`af2j$L<io*N&43yFX;?z2LVKRj6-)K2Cz
z5{qTER4Me^NArP6fCQ9n+83QWB&MZO7oaw)(UV7(t~r5v(kZ1|RrBkzGgaaI?^%M8
z^W)b<9wp{90eevC29Oe|UT&u`^otLvLYsFuSEL#E^?<TgHOMcBenm|OT*8k1Ueyxo
zPZKm&yjh7%HnHjpkK;-~R1uc*;u8O2fS_BVMOvYKiO1#8bf>2lJ{VGM4bZGOfvDhF
zDb#t`KHhHPxaQ=C2<xR=eELPgl|`~y1OjFaz;h%@>dv!rZl;X-LSS&Jb2{wc^Da+4
zlR>|?%QU!)p2h8<rPeaP1W$_IAY&{)JE?=4LL~M9w_@G1*DmV0AYLKfxJ&`yR-$3-
zApBx8PGonWqe2#XF$`!`EAKyka#)VD2G2H>!vdr1LoRm#CxQCFejiytCA1%Wto1Cu
z9J*fHb|^V`$7ZU$th7EqmBOm%j~bKn<<dqij@ka`Y&&5AMo@$0^oFa_D7@9v!A!9c
zgcYNI7~{~a9+u{Id5hWVvP~x$@us(grFsppQ;DuzX&&U?Ms<V14H_@+i_b5QCQ_dr
zRMq<oLK%dRhU6{BhOM?ctX96&WKH7ROe7u5?VW2$O*>-2v*X=d|C_kFHvnPUZ?QI1
zkiPANSEQ>PY{#g>AY-m71A?er5UI~XmM8ZCTlA(NK(+eWU*He)KXiv{A_S_D@YmG>
zlc0%HLKg+dj+a_Y#Buz1<bp><nrb>hOlEB`vU2rj$szps7=p3Xyvd5_s8;fPwo#zM
zuFCF};kTrWgeb?b#><#<rOI#HqG5F1@4Kg$_+|%{VmOQ3^jK&i)>`BONN=-zlPoU~
z>Y!oqUN4gvWR<H$Sh|w)(f_L3Q?_{KB_u0zNu~R?;fGe;n*l_eSCp^!jkD?x9=~7c
z$Ao$tymbE#CttzcR(Wc7Bp;9FgIRBEll2&4<4B&g-!WevPYgyJ=Hm1D{Cx2iS6SN4
z8u}}ZtFmfnDDatl^_6-xk~OaFyNeU7(SXwxE?!_YA^lBT#6~+X*i;cUI{R=hQ8XTd
zzgmIllUVI?t1Az~$+l|YYZii_y?bD)6ps=ugBw`)1K}2uc|E?`KwebCszZNYQsU-t
z4;446gd<=ZqLDgko2)vtDWj44N`6QLkhC#nii8lxn7fopF(8Ly9!hA?|8|y@LLM+)
zIDcCJ4S2|eA8AVgg57B<io^>^S*^l2(_Yn0MT0^D5(!0)v%rT^N%$ir696}wbsMn~
zd8|Z+DSmO?tN|eIVbe7e;Iqt#k9c$3*R9UYL(=_XTS$Cs3ZJPU>)tE`dTA$wFm(uI
zngI}goqjd6a=@Fr#xe)%MFWZi)iMIG^N`CHur_F8W7&KSzCsp%KM;SIsqJ6(hUP~R
zK^l#GO1u||!7C;ca!POh{@Lp!CXI}(48rqxqRnNLGkgC+0>+f7@=785C4G2T0fRaa
zpL4r&5@_{UKA4ykQ`zwnM-phaB|0A-+jMvFvim_`BB*@o<OD$WNt)=xH-RkEL_7Bm
zsjI!*#FMY(8M5ZD;$|d4huuW}&IiO?LCiHjrCGQqZzTA;(E0?z=`7I&c&Z8qo|rXX
zm1HP3-DX*Nk6S5E-WZTkg+Ko7yo>U~*7P^7Qmi+b($sA<{;k^_>NpC(eT-#y9~?+&
z^V=-G#P-yg#hFdF=}DCu6}1i(UcQyvQ7AfGU>CsOGMFv4?ELqvkN^}>xx~J#l|&Y%
zMdDR-UH?Um@{IPW<I(7MzZ)~iN>I;L|MY9BkSofdE3dyQTCl$#k%a7`ZT*u8`IcZ3
zU;PB{pOY=1?tfB!8F2Rw<5=W+wu1bne+rky>jK53;MNObQ6PiRneRlx5a2)o&)Bdj
zs&!>A8gP`5YS8H{=zr^Yq1qQP{NGqHLXbX+Y-!k*5z3K9tG$;0*sn6yhx3Cf4;P&C
z8&d%>K7jQEj4U0oz=0=|kV~0^5*n`^`~ErN>=^PdHVXbP#2Fo-!c#OmUovKU{BkEy
zSZhubW2OQPHn8mZmsPjbCR5ibHf-m4Gah>ktjOap|9xD|#NL|^I*ME!fn=ixIt{4;
z#xCKHt6j2HWrJftqF<gn10in`x<V+vNry!n^WnFR7fTy++Wh9LnX3_=j_%_^r^l5&
zZK0pS<()>%vC?)OdUS^iA-l5|!Bv5eS8)Xih@-ipcc27vjdH{6$wJv)exDQPDe!yO
z!VC5IOckon5pPmeYezDFlF_DRCQurPFyO4uReCLK;~JX3DDuvxl@+b_P8nQkW%3O5
zo)&SNMlL{_F?Sfn+?{Sj5xBJa#^`_!gMcJ}0Y?B}O8^cYmZ*uD3nsai$gV<;XTWA%
zljks!6+2eGjk(<l3<-I~;l%dlqqL|@g1=1Q(+#2hLQNEBAALypQ_CbrPBRYx{42Q@
zr60^!P;7L>)MH73btERAh<1uwU*GOHJQiOP4OnhND4Fw60bXsAA}RUymJ;iK*5J?k
zaMn(wN60qvQ7&d+_}hlQrTd$3raz<qnk(u%f%fjksQGJt&0^z^Fv8)bnI$<uZ#$b+
z*~AWD`ye63ISzlgUz0OGuAYZ!+XtAYf=}7F{~h+i{9P%N!nP=hZ%!T2(xkhWk9n?Y
zgGQmMebIZLVLI6C^tSzPX2aIJ{p!W{GbO4l)YX}98!Z`h3nPyf>UL~=0lE5@1zRzr
zYRrYBB~JtRzhx*8V^Id85}I4Y)SX{KANDnO<SBhn*(h2(XyP{sf_w+u>0eYGlYnn0
z^0Ucm_dRj+LZ|@R!2EAP1FR)asQ*d45;HL7t&U3OJjMUCk>~U3@eVKs*}}W*_1c`H
zD%`@-=tUTqV+QyAu6JeVG4%*dhwbc2!q2pVDOa(P=U0v8eo__r%$4s`aN0%tP$XCB
zIwsi>S!%r0%Q7`|Kfll!W}o^xrnVRLyP{TJ>Vq$lig)#BY1!XR`J^3qW|ank9XQhC
zOrVRPtxv?RC6e==%FwZ7zto}U;O0X>!u*#M{M}MN7<cBhX5DtJrd~5K%s4iT$(ZBi
z+v+v_;1e`fmGR$Hz5#k;_aB)U{&__*{Z1&raFPc4ezG?TgjpjP3X;<WSy$&>IA!J}
zzE3JA6TnUhYj5o`t9pwqfCtdd)RFPJO`EhGGR#$$)z2Qa2`onmWKi|z3Xhb;{F~zA
zHvc53SGQbv;B&s&TUVu>-x2%j?EhlzEx@YWx_xn_Ls|u-yIVlIq)WQHl$P#P5b17E
z>F)0C2I+=Hv*?chyYTzYJ@=e@&bgoe`#kGed%L%5zV94!%+cdFwm;2xe`gjmL8i~|
zR_^`&6VXMF#98pScB5q#N_ifOai2<W9J@1yk@B}K(D9hIppA}~@8(;Aq?4Hdvy2{P
z0&rhsXnj6Ch_4y$^b+QT^QObtA-tfoA?MK7M5Vyz5)O=3?SnQ@YB9o}(`?SyRUT`>
zkUVZLs4J5-&H}fB=L??NLluf|uHKum4bumzK?OqV+2l{eJ9%g7d335hsv*%(g6{?H
z`lP?y<lQcbb|XYv=v3V(8;M+Uj+<+d4vkTZjF5KRKTXQBe_B+i>f69nljZI_ZKsJ{
zp196{7|B^Zh8fNBoS9q3Vg$<z*GzMZrJs_AK^M6#BTL&^3#!yXPiDy%5tuXl@TQ`M
zeF7|{$yyy?Ky4r|U;_`Y^gI2U`20fB>%{3PtGKs-aRY7Nnu4*cciM=5Jy;%A!|_6I
zli!|bQ}a(&GUORg=?5pJkSz8+&YCH!nf_HYCzVW%S$+Ery5jMfvD6L*;jln$=)|<t
zEb2wZ-FJ?l6cK*U=S}$IiN?jhq+$w+jX89gvn$@=7oF7unQv9cm=eWl5*u}GK`$8~
zzagU1h@5IZQph%u2ox3Nj?eD+g(=o^FXYfAVsO)ChU1(nW}m6lsOA_*tHl2{n&C0v
z)~IyI>hBqLm!V11(c}w`kg9iAy=iFHKSs(iFPs~9#65uLv}tm|rk%3<v0J(Zx5D@Q
zx6D#?O~&2{h(NR4qblEQyBG1oZIG%|h1qv5kI$a}w2H~DjHw=gv$x1?7Sc0(kwGP+
zbiCrP-R!p5*4-W~pgh-3F+9?z9ynD87?mgHT9ZjA!`#v{K}Ul#6^;47u@<$j^Uo)*
z;5-@qexC<sKCX+x(+WJCI;91(g1D&HNZpP&)qp}nGY(cP@=Z;NiWAgc9%8UhBeV<r
z-95&*)zz)h0aJT@nJ(F<rH@B!pf=Z3p@RJYQTwEt>4$Cx-rps!DuCXd4^pc3L?ojI
zYxQ31s_s#-pB1K!-ezlb?MP|Ucmg#qGTCGNAv294{)~rHEI`8cgP{M1=e`}ZKTs~7
zeTv;s(4Jm`p7iu<4Z3AVT4p}<t9))mJ?;{0o5MX+D>V8{2<<%{g98q7XyTQk;P|nD
zYxp6;>GsG-%R4%WfDrtWLo~l8mS<|b-Uz=0_&jpIsiP#<aGFNiLux}iFl@yW0$FG9
zOON3C_2|X?+PiQnf1xb1@~IA`G_)p&4#WB~i~Mk@%io;`eSZcEh0%P_$QIlrOC7+%
z)FI4OFbc%hRk~|^V8G0~1|@u|qL!L<z{D%r0f+a7X|T`;b55`H$)A(l03aH)$Oxxb
zVp{jBoZt9Y(RNh!-a4ri@h$N>f5Cj&{c4g0$Tzw3dm3ixPk(yHe|5pbPUN>LF1(GA
zt56f<_F8pgsYBdfC8_3%tIgI|Rc98@-@H>7K(AS0lofGV=1^3R9iV%_l6W|?4UrS~
zmJ8(~iv_dKOygifV0AD+O^HT8GEb<=LKNnWfNOx1(a2)A>0+Au1P5)q4esT)OA8=P
zX1#YojuA}7T&%AU#-*>oI9|TNXesZv59Nmy;-DIAgN_|hlfVjN^xRiv)R>mcKo>7U
z8`p)I((tDbSLqfryDm1P##qsd-2*@t5qr@^kO1=}tgU|sG<O^!&#J-mVy{%W-J3#^
zRQz#_7P@%upKE$t-GE^X_~(3fqJvZ2`s+|uMLFB!1uaT!32252@HgKtB?H|;=X2i`
z*f2Ibj`|D2ojaG3_Gopvj-zEf3`XB!u*+w>KA5Ut8~!<X=?ClV0s`7$og~J=-vP}n
zZ-Q#|R;)oRqv`OO1E0j+l37HUqCI}65Jwr3=^7FOZ7=xyw`Q|tA<>Ux>#<LP<E!Cc
zI=!Z<Z42^xXNs!lQYn9;zqq~{_SpGlW7~J#3(Ky^@%g--@TkrbtOG6G@74bI05V{W
zU3LYm1}~U-5CVBvNG8HXTz|N+i^MBj-=f=N$<p6ZG@*x2WJwrzTV$p2`BpK)sq>*%
z(KuesuKvW9>3uAQI9*dQld+jm>ftb8ui<gnsCgDEl;kOmi3>dbdOa(mXFW-_g8y0F
zC!81bqlGJX9>-&>s7(@zxrePhib+A>Y>W6MSvnxP%ZOCBQ~^IZon?5j!tVk7-gh0j
zBIV;$T=9TJg1A;Irn*rXzJs4jO~|SWP>Ry?e%V%jl+6XpBQn@?3<YRtSYH%tDLM;o
zboZ00(40XZ=c@;-qLkmxZo&!TUe5Jg+Z#U$V8(Re@4f2muAcL}Je-wCxCA6f^}^1)
zqaNwpv5M`hugpw@7bbzv{}c$co)EaaA|k0=1+Oq*EYh}6b~cbTk`3w97k7M=s5Bp#
zc;~(Tns9IWyM_$D&@T=+oKB(ofXLhATeN*i)oxK8d3B(?mD=Vuo3c7#QiNpJ3h+O9
z=O$s;+2oj;MYcy`GJc>Klj!+T_8V;qe7in+TjGC_2H%GMNzBi0*ogg8Aj`{<sm6W+
zx^F*m1e3-(cy~`O2!#lJS4=67EyiEM=o$H_$xwH#`i?dB;}W8cQWeCW5DOEd=z=~k
zRNIG_X>tLWG`^fLzW#yXv)yt@hwo*^gFRMu+HiiLD;Tw-_OPs8^<f*MW^9QWak-3k
z3umJ0+|DUxju`mIOCb9B2%wMZngejQTkn6v8YsDoPc5;G!WW@`z0`MMWPwBf!Hn(0
ziBGNNDCin7d+f=HrD-<kDwN&R&bAJPi6g%9^CglV!P`W1!uTN}_rs$vS7GJEZ`Lk%
zLZ?3!T$4+L9HFCSy#oq}{bT)fa*UcM>&(2T;OP_#hpEIzFj{$uMqY}suDe6~F~8O%
z9>QyHtT}B5Mw-xpWfBJ7K)?R7!f8N3<#UFd<>n7M2oc@iT0KrX^D_v6?e=kXo|STZ
zIc(~m5ljDLpdQF8EKYD$Q&JhB+MK=gS_fINQ?|K$-TL&RI4yp7{nI?Lj?pw?qh6Yu
z(r>F;ZsBTC&xodw=SIetOVBDwk<8(|bFIcP&KTjWZe!0Rj*I<X84z|l(=+<vy8<W_
zsG?P4zw_l}p*R@LovH7@UzwJ%nv4)%v*AH|Z6&BZ=X8mi5W*_chhfM1ew;=s;DmL`
zu`P<Cp8Kq%u=^Pqk;D}cKjDL25?}wt8uRrS?Rp4#<+w?Nw^;?m0uwA45g^LNT^r?X
z@C>fcJNc8`cN>fsUrBI_Lb(}I$ke-bylQzK)DTYR+<DJbKy_$d@tV#*Bwp}_;rM&0
z@lp)Bli7dFU|Avv!Aq(PyEsnUpi`7<QWHys3wgvrE^Qr^@f&sHBK!R8hExX)6wvKc
zhQ0hg#K7%&_>+urNk2{wOdH+acz)nN6U1-O7OJZr<O0YWYAT^86Xu)Wvu>U3dX__x
z3l4bti!V!vc2Tp|`V^15CqNCV%^%k<<g|GZ;`+gh{Yi$ORYYX`ar>S>Z`w<xW92y%
z0>3n05*j4{eAG%*sCqLG@IsYBmJ?YP)%Y+&;eJytRvX~h1x+luz<Vob^*(9=B7k#H
z=ctP@PfYyTD4Kqc>q3cZym)11i^wP*jw50&w8@8@SqxvGJgT>PROhGMI}pp>lHknr
zPV3TwX>V?0FVN&DOp7;OF<$;7QON)zXQ(fKd2Tn^g589C5`$NOQd^K1B&~Yp0q=xS
z(L_m}5>Z@s6jQPqY^@&M>6^v!F)$RAs#d0ieiqq!>4*hd+yR{l!)B!6*S~rvEwVh+
z5V5-m6=6y~c*{ECm}A3fh#xt8Kcw;{@VaJYHU3X683am+5@yDptn2z+H4TR))0h}A
zvah3BQOSzNLY}$H#oN{7Gmpy0f8b-?BGq>K>As>NRuNX=pugQvG9&#+!oiA(?5Rxb
zO-#Uz|9)p8E4#7Iemu5ddb{<f(b@jBeG;n|41gTB>=l^mj{4&quLdY+x2F-gsigg1
zO(X;FbP(lDX^g_47IfceHdv;GQBvBE{R5lj;vJ=`(z%=L4p0s~`9lt6cdE#rZzvjT
z0UFDM+Ohv-<>zzKKvK()OsFop4}{HIu57x^)2jC_H)k|ch0A_GPsMwnq8Vresu%-s
zm}G%rKbb%~tz!O0-^cs>uP?dmi~~7%>jW18&6Nds|2ZD6b`t==)qa<YuB7EY`HIih
zTZ<EQ_ay$ZT`;63RxuRL0sH_B>3e<E8=q{wSTB8xN&so+nh229qA|NDto(SWtb^j}
z9&UL@_1XzQ_{ep*TS0ZZTujI>?rFJ`g8d%1&i^P&A^kG@%kjFxe4MQE8{`8>uIPgQ
z{<P(BY&An@_u6oOuG$M0K+Kt1qDon)J7s^xsH4%<b#o-bU2hZIzC;rJCw(vG)7KKi
zUP{fx|0v=qe#AHC8~Pp60K*;#RG|}RZL$<8)+suC>j{ICogZ&tF;X;mkjs)x4C&dX
za{y+18wz8g98UWKz*j#C%7|RGJ{W=#ckA_idEeTP<G3fKAV3)eJ&T6VbKM(u0ETS=
zur*NqDKyZYX9o23ZU=Axpq0?sZ>`A|HSEC47;M`Q(XR=1)?(>if-B@{fVp{RtMK5w
zy4j!!GnzNv_Tp%Gf>#VU(0FTkN;O`&QLJV%;(gH+S<yMe<3RM5=0coktQ>Y?XMhQ_
zfHbF>TYPHwt?HJ2j{J{CU#^2=hB+r-RvytQJ`+lobn18Y)t=K7>0LtN9+~ua{rrzg
zU$yT7T_u1HZDl@S>|4rSU2pNPB2cu1{yI|C$LUahmq$L$8bcBa8FcwgGg4ki%FFwf
zhDNmzO$Gm9y~u0laQgCFP*coXNy9WX*&kQO{1rI^K{g1bkpW3Hd&2IQ1d8?zq+gLo
z^?04YbM8JpTj8#EUcx}mD#K#SZy!Z{NZ}yJV{NFh6e!CCsz_&6Q`>pd`yyg^)SL#m
zPRdrIm2(uNcW3Je*bDUrW-7VS!Y{wD{6H9S*JzUgCW>WG<|*da9i`m|ZZG1nY@bx^
zL2w$MGGSi-DHCSJ<c}r4HDh^~AvQEO0aP5H$yI(-{?bw>^DWb;M?RnBmq|syWSOje
zV0}?qJd1yh)wD6!(N!MXu2wpiJ)F_2i_;MRqR)#r&JBxJxhSW*sx^fRCtlmUQ9p|P
z{%oC$J>Y#9W}+P7l1a%4d3X!MyrarG*+zc|J?G<ni}&{6Y_P*Yx2zOUtUr{*9T!D$
zKd#&D;&+V%V!%^n%zT@tG#Ab6#D*Jhcv3MmVy8d%md0hUNoL*|ta91t(Dp(qkvES|
z0Lvmzd#e7-WbJ*W)w<Moe3~e}A&<3z%lCc$=Sg&yidhoFc1F5>jn$tgoNhpE(D{l#
zU!dSk_AI?z;^TO&DE1q9MN8q^mP(mX59qTy5d@v^UN?Ry{pW_LI|-WH(fs~Gh5&#E
znF?fcgzD^#Gp^{BPEfHO?l#oSn`a<duDP;T-j`P$Jwkgl{qYQ<^UnL(3w6-cd?UEw
z_{fyJEtl7LPz2puLAu)!4xBeA_;S*!#aSc#p#_JR6Y^`LY0!Z?Z@uYA)=SiRlMOq+
z6_+<edAs6Syx}#Z7YOflZ~>b(EXjLMe{ca;R}~gW|44Rx2dCF8ejZS$^4TD3t3QpE
zpJD%AIKb)SK1zK8n>Pyt+h-BO0TCE(mIL6=eH|`ses2G4PzyAY^q$5=&iKWR4$E$(
z12^6ZBvbe0vOp{6H|^Y0MH+M9&CVDZAzQ|YyNXZR-2>i%A+S>Qxw%RPKOgrF<rDx2
zrPE2cz5^gSQKO9vjAu%SIlC}cnBJRa#V5Zt#Q~bidvyb_!#+&Sh3;HZd4CX$8;qe-
z<G49&Ao|9K-kyk!LbRaPCr$n1*7&zO%T6i)>8_t=HUTbH=n1S>Zg5N*oe)SnwxQ=S
z*{nM#Y2o|nh*v#&DR3uPRiKvr(9}R$fYiL5<)Fd!1VM<dfR3=n^|^v0H3*wF?=!Db
zw!_)*{Mh!{tbJ$0kU|W#!bf0$wsN+yLZFr%`)|@{y7?f^6D-iDtHX`q#KrZej31M|
zc*OzyrB<XBPH9OB;+$Cx6ER_%)bHcp5clHpm*e#l@)l5s{R~VkML{?D!7b>XXS!jZ
z*`e_|IF?GcR2~SR8#f6X#&ViHVD7qq2H=jOT83VEJl>-L2|e~WzO>v-ppW$f=*7<9
z>?Aw*hq$MDx0nyZ<;+9TE>AA0%;Tq~!$KOPSucWIMVrMs5uhDh<t8Fzr)d7$sifr_
z_RRFW>Ifz!GgRXSyO-^rZ=iWT|H>}n!En&)i}DiEQ170t+9KvNc71|E=<ljXIqPpN
zeKR1s%)&v`^B}Q<2{b`xoDp9gjwHNIvbwJe8OptBnkxDU<uSlA(&~)48vX7wwRHEH
zlz`oNH%eAKa&O$%b1x$rw=?W|<k+#`$HFvGiLUbszx@X5O{koGNC85*$}TnE8i2b1
z<o4v134u-oofVeBq?0J3V<1fqfm+JS>F^|)tLPI#%XW0XbuP?-DP$8Kb!;=;-X#!j
zCe)dqbA)XipgJcw6COe0BWW+8?_kT*=Ht}vcqnywP<8_^I)C0#fs|>Ba`Kw4IRFi3
z#r0IZ4?s<bigsL6p?vqPzt^;}E1z}BjKk{5tGPN0fpFY(8b14F!qhzLqI})OXdom*
zo5*j$ADYG-D|T{MV>laydLCE&L3*};(c7`pcgx`SP}9AWvI&+U)f;61d^m~O6hV}A
zThL%Rf3fsyK95@1em|kp-PI=~e%J3(vGm#Rm;tQSjNe0ev-5xlX2A|$rS=+_e?#S9
z@_=+T3;;aoZA&#h1>4@+!Z7EZZ;2xu{XiiZyuJAK5wpc6i_DZJ!;oVqJ}6Hsz3uFD
zq=h<zjq;JbK<!t4Y(MuxO6=z`^(W`+UCcnEpE_dhx;RSqI0gQzK~#dbIzUE%a7s8A
zm))9`z~lr4#t<e#OmJa;F0UwyRmkLIrA3T^`-t=_nK4Deq}Am2dEV8iyB+iKVO^q6
z8&`cVUpgpa;QnGxYyl>|Pv(hO7=rs_=!o$cQrNnFIxj7dNfZ+Q&N7bL?H8>$Fosp`
z)m{4d5VdJe0@wQ>1Yb?p)n?Q3SlkPPm*DUm7Do8R>ow#J0Nee(Vd56tl(RPY2vl@`
zkz+nC@jBR@Y;YI1FNa`XwBq>)-cwp#J3qVvz+)0#abM#fBJ}^B+T)}l(~Dvf$T`4M
z&3CwXC%a##%z!!$i^=-ASUlbdHMq&)O&GJGDMD|_uWWhzKBOV+En49RESPqj=Yt|*
z%!zxWV@5J-%_T82A7=cRXNy&o`qS8>m4ZLOh2!%CU9cLU^^3!J5DDGwP5z`{;+Ec2
zh68FKb$%>C2Vl7;D;)Sx69E7lRn}wQ5YHs{O^%9~bn-aLrj;~DkgOtL99!>9kB(Rz
z0<dX?iv_R9hkK-UW(u^#0~_l@rZB7^CvhI0#vB@3bUF#u8!K&Ea2>B&nmiu}MPQE=
zp_%+Px9Hmih}Z4_4~lpdW$hB0oaf$ag&>XDjhfwRHgd*@Lx<0KP`9ptD}Q)psL_^|
zX)=Y`m69D~mXEDMz}=3VlT?+(zsRG|G&ki?b+JyZIy|CJaUbU>eISPJzScsudXP3+
zMAw*`ZPjyVxp6(Wv^d@sthgRfr9qir@B%iv8>J$ru45MPOJ2Ef_rTGZ(BtXF6{{D#
zzWzlY;#ZVFua}cuq0qJK`ZI*ZWt_vEF$VzJv7`q%pc-BRDY(?NMbW#HJ)7?-NUZD#
zZxKEzW&L6ygZr@9U4)2yEr-9f^8wa)+*d?=Y=;dyM*DlG{On3RgEVEFJa=xFBr5C+
zY#`#&Tkf>3s#)enkjm%o>v9RFLdz`v?0oz8@J^G}cs<#{ymvx(7|wg3L7lBq-*b21
za)V0u1&d#cka!qj4w2WLg38@$Akl|)x2oJv8TF`ew2kf&=T0^n9Wa;8m4UZ#yaIPC
zo_>*KW;GYPc!rA&5k}Zdda?s*g&BA?)-;x-A9!AcgR3l*e<GRShgxgOm)TE9%~d*5
z4JA~3;1iGO8~$SGfn1?UU*GEI11YIW^Ss@;37yYZQpeG2mO-Rg?^$ynYm2=@7SZVd
zS<xu?!7#lZd$j2E_pMd+e|@JFB$_<U=vZgl`pSU+Eh?oZ(8>5aRu{+3@o~A6>~(6P
zZbRa5T8rRSHnD!27bPWnr3KJK>I*Y|{*==+0dkrlV(Wlz{jhhzH~H($q_5X22JMLD
zg5RiOUYR783yrC&g|mVHR8+~5PAA3nnmy&Tb9Srt^I8W4z2gKH$KTrAUTc+6HWA<M
z04x=|2>%dIR_^adUzx)>hIMK)LB?%V&5E6{oxU$7vPF#^tW=$F$Ra>MVff}h+JPd`
zYg>cgm<?*Sl3$;iKgYNUD`PPVc&nTvrgBT_xX!0BtK?8m2h?w#M8{!-5zVbmJwZUs
z*BJp#NxspX94|I5RS!jQfshN}7QcsqaS2pP;&T2OjYV3}Y{92-N{Nzd-+*mA5rJ@;
zYX;ygPud(I3zzY<^S)->>Qxi&V*_<nf*w9L6$6>;lxY`~I&&hd%qA3ocXHt`_6;&9
zM@^h4bD{AW&UeR`6tmwGF7*WmguE%i5B4Gd?jw4+ILr98%UrchYcZ)9x;_=w(x%6L
zbm7ZKg$#uNhdgQ@f^~KaZTX#kM=zUj)e+K6?zb$9z}4McB{l?L#lD-d0+mlHSt?rf
zi~wpGEF216$7Qo$2)Ho++oQdB!nCV4LHuB{nEFQ_ph0-=PW=i!o`9CzP|N5OrM}T>
zhEw*BQy2TQr-bJq;pC^2kh;oH>~;T_I{zr!+a*1tyoU>|8~~3-S6R*p0*EMRIAZs1
zPSukK^$h}QZg4TjUzu&PlBMrlq582Cl2dUj%O-OU<|@)nnbh0muoz1#!o9DqJAb6z
z-FDbpjOUX%>TfZQYT@~Fo@(>Ob8uh3{rw7K<Q_oerW8&H|7H_#_5|SVtL6g$80-02
zlIL{1+m;?(+Eh^G9lZ4;j?`d5{&_gOSTY;k)8M7Iu&NcV7qe#dTZCRWFm!v#?ahla
zMG-gz=*PQzGz!D;vTl{4HYz!qj9QX{%^d(EV3x;NXrQt*3?^u`yNG9>WyPKfd~i5t
z=NR72irx<3euc60ui|$qFTsWJ-%!Vi@JhHj&miw;MScS&ByITo6cMX~6lOiXgdz#0
zIoij#Pu-U5r@`qbWR679ZS*`oIZB7pu)e4wdA80G(%~XsCB6{B?a%7cvKsq)g7xY`
z_|SG5wYh_s-S6c#ZL2iu-Gw<CbMcAfoj2O^-WMOvya$76LW~vlB99z&KR$@Pz+;bu
zz}XY`dR>be=70>|U5D{45ze;^(G1~Z=pOdXFuA<ExtIrUBU1|2Ybu)$KGF`Ct(+&@
z5Pnd;NDArVIP9i4Jw0)L6qE^|2QiY%Cw-|d)-xUPJ3i?i(lSqhzFwU8(Jg*qiApA;
z4tuuAF|c+la2w)0bVXd4Up2ixa0#;%Pg>R*=i_|gQ^uU><KBvDc2o%-zV(ziPnan4
zc}{qU)g2DLXfUA<bbiHpw1v3tzHfq(c3P^H)WBN2WI-R%!N?3+hIui6WN0>ti*p-f
zulB_?)oE=!xXT`7r#d~W*rPTk=9#F{%*lXip9I9_^HX6;M@RHX$P+vIKZXzlrk(gz
zbT+bmp?VG;9MY<p0uM)*5iNh%*Zs2S#2l8mEF?d7MuEoMGQ7SO2yOw7X^*Kj#V~nB
zvp!wxMmZS5qdS87BPMk;aLG#0oiXLL3lF3*zo*HK$N2@F2XC3dc6Gbv;lz2r0wlNw
zWT~e}SJ2X0*Lzy1;Sm8)hut#5=j2znXw6D;FL|dnT{5)TGLYcW1@8BFCt`J%vF{V=
z2<n`|eM-RTHIR&(LDQ+PLU`cyhz`hDKfae-&&#0i)$w`S0@<b~t%JRHnVdZM4Z0%A
zmF!)sTRizb&SdK0ka{@NskYJeH#Y#^m-h(!KUHM4z|7PRoeiij4-2n54$S<D?6e8-
zjvg8Ma{bM&1VE2LC@VNp*Ns*iZQk`c0E?BWT}B9>cB8mh)SQu+L_0iHSpTEY`sp8~
zf<I)sG-a&szoLR?_hXR8Ed<kkHL|I&Ty*ob(&&&b@xrXo9J~RSt}^<BECDrn&Kl&h
z=q{TGwPb@WC&Lo{KZRSrGZW<_WtBb!6#;6mkU^QYH-=A1u>A9B#M-3jX|7Nuc+6wr
z*N=#eLEz<N7x@QoEK*fu0Jz-9AOIai_M3;K>D3e6V@UvnG4b3E!{Cn@24iJT;F2%Q
zdL!<mnSZeDpAPh?ei0JBD|zmF509!uztlx7QvX)2$e-C8G{|+q`&c({5S@x7`R6w!
z&!1=L($S|%HwI{3k8sj_xqiH(BYyU$3ep;A;`gX^eL0Tt&lmp3tcH~;GDslO8o;3|
zxo44vf1(&dIsk&o@4=6~NJlb=Y@pkM43vTWdy+me&p%gCA&vlw*VB^`k<DK6b27pb
zKmY@v@$E<;2_K;T><s{bcxM5lm-GZ>`R`^#wBtfB-Gc+KZ7*80c%JtBg$lr5BT7pP
zu-AJC{&Ed&e)I*VwHNa;Q36HMxG#f%cEJB~%)}8MRP;2=*oI>p|Ma8Yq}lb0I3i?z
z_lFceKY7Ld86t)Hw|RFnQOXQ|-isKaR-AbIO7aF6)j=bFh=0f?mH*H4{Wtvi#$$x5
zWah`;S~fv}*PIUwQFu>;XcdRR#F5#S<R;+Y=wXbGhy15s{@dyK`4IT73|ww^X5C&`
z$jg^!g~<cs2i%f$PX4Fy1KtSFfkK+DjyvydlPIkx#%a}pJea|-grfz}8w^Y1N&nr0
z|L6ZFI0HF;j~MF6t`3hG0gk*U!QjgY4XKO-Z&81_KDzhFbpGG@@n8NE3FIM-E(vJY
zxDu#O4ERv-#9;z%PmdvMdII<UcdYSWpYp$Fy?^@w0xpD7WTM~60gMK(7f~Wlxr0Ya
zC}0@D@`w(?>FVvZ1o&TE^gljHSgdvVi|g4+k-&qCIdUD{pQivqv?Tyg;vJV*fGE52
z;veVv4_EBp-ts>#_<w#M-w2E&P6K|a7-|Fg1o$?^KLu=lK93mRPCr|=aF7BQyTTrx
z=2^QSI*jP)Ba?V1{5}aiuEZimcant>9r$F`@7hEd9-Uaw=h<^87=-`fUs_Fl5A`2z
zdA$>sdCRA<hy{sN1ew$82fdlvJTCaH#s9As0UlH(=*%pz^>T2U&BYJ+qZtwcsKOb0
z&<wop^gq7CKi=~LvIG3-h&?iB50_WS=b0}XEX?U_12U-M@-xr>ypcbP<ighbU$b<d
zLp^);_;~NSrT)*spZlqZjiFsc-QLql!pVxW$dTyf(W!+1to8f8IEH>qOwzCY&6Lt{
z`?t+D8c12fQVQQ{<GfQIc{8|{PSY+^+=m^}F11HI_%G8g2M2lBz|Kpj&1@~Mrj(?t
zC*{)H5<W1HPpjC<NXu}q5e;G0b@#s7MkI%9euC^|oMyJBKZVy?C&%*9gWLVC3KwgG
zg^M1Hv^*5K;J^N{9l^TV?6e`7qOI3v4Emw}kk&GS@bm)sh@G$6JmPkt-yh2Fx`Z0+
z;kqiIjvU}tcbT<G{&~fJ_4^r&FhfE(5iq#xv~lXsHdCISlH5FDy!oI<ArwVEjQz&6
z`BAr--o!35Zp4ifp(3iH_HT9u5MxD>c+$^xqx%(zFYy!)G2$6wM5{N<+IM}gy@&KH
zvA~hdhd?4k_c7kilgO>%{*=|CEd8(?*ODmUFaE_xP#p`QN}r#U)X(p_v{^*m1(WzW
zCIX3XEolP$ukf70IN$Zx(!VnM$d94XB<?zcL?jqN(am1x`PxkmlEpfA;!D;F3Ui#a
zuTB%0MIpcai%)F_gvQQw+Ajx}SGi4`Ae2MrfLV*uCmhXTT%ZMqYtU{D>%B<kE`1GT
zTcV}HRX4K?HvLp>2&4aE%fL?rXE1;0^IH~#!BPQl?0ZCoJ`Ho48|nSn#7M_M6hqb{
zKTx$d-SI05vn!k_ah#9QB$$^9agv4LuW0-X;1{T$uLu2=-WzY2sA)g%-upwPZ(LBH
z6_|<a9TG7Aa^Z;917If)PKYNSPn7rlhy`qHZrg?QZx<AN21A{I_6#%Q4>x@Ycm{j=
zbG2XjFRzaej5X#T1`{SFC1YwpNO=+zJ}~>hV`{Kgo&SbmAk_0sAV)WE^JsKArcMa&
zLo(8Q;+lAb56ndI=F!u_|GHRtl0;?Ug1NA#+6Md=Q(V&TA&ZnjC{UJ7tB(Gculg+-
z*lKw6RDUq(6SENuwt2WrVo6K><twgAK_rB2(6^AreIzwOdd{b#7Tktxox55l@gD^K
zhe-avmv@5XlYZCVz9AriTr(n{?$tYhnU)ffJ^%Xb4Fe$5WQ-5?yH3cX&3-zR&*1<)
zKbOe4ivFd9L{CQeqRAX?5egx|cUkPA@;|KFi3;^{uqVt-pXOiQ`X3?@7eBG8ZlepZ
z&Qx;Xv?%0+YNUPquIDLwPyd<<cNoA8SlYBxU<Q{!;fO&Ny<~lk1Oji)ZB_lP1lvZ0
z5P|O76BpcPF~k44|F&edIWVWI-Cs8;{z?`DR|}9z;aM(kL6{X;ov%Pvf>*Im9JTV=
zmxm%jKACc=NXGT)X8g_h*^ZzioFkoLU|?t)JfzhnyZnT#f=&*Q!yl%5`)`(fy0=0Q
z8mG|>!mAL3$UIT_HH5-NH=wD%)QqjEln?>q2XkE4ewSLT3=)SdyDAKDgKZv7T=ZXF
zv-W7nl_1eFc<7I{uzN`NCI|Q}idsQ9=)+w!g)A+`JA~1D`{Sq-E@xfL&Ty)5{*zMj
zI;OJqL~JI}{&PG|^3Uz>?Up@*8rN1xnQ|-F@&=<RJX`7T38zbzBU*-2Vx{Amr0rDX
zHnx<10}8EpT^&m@hWIDB<eD~z1@Du_6s*Mnw8VmW$lo%F?-40L8{V^hjL67%9hOj&
zhw-X%r&H8$W1<hgPG0ON_D$@J_XacZGNDmQ?_yXtr*PlL4{DT4d0idXCiqc&!zN+k
zO&85qqa{OINbh_<l}_Zvts$3kCqn3bX0UT($|jjW>??j%cZ!`k5-~#lX`Gz(hdWO=
zvxi2NK|$eSxe}vp<36g0=BD&3VCrg`{q5??e1|~)%qM%^yCaIO4m8R7NqLE`@~#a9
zN13OC`|Jx5J3n8$qWmR~p}YUNacFh={PGv{Qdfsj0&=O5%dt3wq*qjmytGzYljoYp
z_k(pUo9ks08+Tu&Pg<cbC4rRcMt_yX$!VG1#%|S~RLnz6rIo5U(AbbagaA5jk~#KM
z%sZ2&l<>a68f4O}5>hRm&sU3<zu&+*QSN_fw;vyECso7|{tARQT}%ozIXdQ;!JMK|
z$kS@DnT|fhm*__7$)`oN4C|m@)mW*j5lSC_yTvDj$V9<fh?%2p5w=PBcf!E;h!}DQ
zpsH}(C16iW8ntDlUel~(dtRTYB(^xjTF##qWlCKqG>$bEyLVj$$CGZZk4<a<xoyS9
z54w4p&0jE!=%(uJ9v|Fwx@D3XmJ3w2(uWe{G&$W=*78)gRzvjpT~BT)6pJvIuR|$M
zjQe{WaUQNQ2TRln`bTui#Y%XWn?<2r7f9^{?$#A>c}%K@TU6HPqONxwxcSHuMlLMj
zK24QY^Pt5KP)uym#}T-<ME|<BmmcajSuo&zG81em0CijY8-G9+a((~evnm8pw;yUV
z{9KJ))&r!2m(lKRm3LJcs9<$Ho-dVqUh*gM+awBxER_o})Tryi=X;~iquqLxr|{d$
z)mK@O%JW4k!sE8x6{z(055m%sd(P!#iVVOVo_ZpJZeQS1c<a?t6KJwWoPAPEv|LC}
zt^r4CAgf7*ZLvz7y0KTbFtzbQ$=_WBdR)yKOP+VGk5^eKIdlI%-5q_1R}bu|U<<f`
z$hbZJG;=hVYhx;Z)6r@$rA4`Ve~u~CTqTN^tAgwI=v|hD$pMH!Q9NiJ88nc!j??C$
zR#ko%rGmFH5B82rij|TcgK~AKjn;p-`|6!Jy&_MsnGr4#9>zd$TJN!$-?->qOD_N5
z(>PsK6t*tU?7iP9dHwNBS@PakYUfwK@E<8F2a&QRLUHMTDP;{geLo<B)_cO8oncPB
z^HkPuJ>Pa4v0t>2QT5w+r^FE+BuV%8D82hVINY?{Us>{6x{Y@>ORfruI}Bsc*`w&^
zLiz?jF0WxDxdggieU$|Xnm~ef3e4#(8e!z|#Fo_I{)p7NS^+l*cI2T$Y#`n2F^*qn
zZoAS05mchrLZW0k6yLN=5E&oyp(Oxwe*$7o3D!bP^975DO^DC&7a!jlS%4F-VGuDF
z2-<jIKsM)uq?Z(O)I^Q*lGDO9mjQr6dF&7LT#EXVuP=AF&D7F=#G)tB{o>Qc5a`_D
zC0PP^G{4zcB3U!8aF%>v+A?lmBR%r<xdk^8Xxe&?@ie|Ddb|rsVw1HirF`5gT`q}a
z`O!stj-!Mwku~!bS%SEJSRt-sN^imR#-)H<Usi8H)Y|ICc=jh9$>UxT?vO`_-9?;&
z2-u;+RXyc@YuW5m0Wzm?V6&db?^;0ao(5W6CIV0?l7Vq34ze$9J@WA%&odn?=HI8e
zk!BekSk70;H>b47d<Ts%u+znlect!GhUh)j#B|~uKpkc~=1bkYm6rmOq)U!xN*W7Z
zI^CrBi+jb5MVm?g<C5W@`k8^-GB&`-*je6})lu|2(1d=jIng&xo;rk5X@fN1ydaVT
z-3j6wHP9OQ{-rHQTnI5;i3Ggv8pslstH3;o-0qPt>8^e$m#9mr^{0py7<W`JDwepp
z_NDU#8i{&V*=AWTG>h*}=MrDrnM?zFb9H%eIm5<fd60I!YRfctyt)~;nfZv;c9+#V
zFur~-zcCgVC0R0D!UJ+VR?IxZe<xh>=J8O=$^pNk-6K0^qTd3=;!{g{*duMaY!Zzm
zQLX&a&WvW%Li`L1pBuzf`hR5{e0=|2OxLOFZQQl=bpPBC&qi!~uw)-8EN@f`AO=Ek
zICZ>k*DK!^sz~Y%Cdvka=WdH+?#;_GrSCHvXMd%U%S5!UHv)C6y`v*k0|JllrNW(t
zC^pw=AfkovIU9&EvdA4(B5@7YWV5~qIIS;eI2>Yf>3lhAKfPD4%~m&8Uzf}g(@nb8
zRS3|9>J{a80NQ500yk5oWA5-OT{ev-FdYA%48QR34|z%nXp48#gadMaqbdL%DNBc#
zcYt~8EXV8(Xp4t;o|+(9mix%`Fy!}J0Del$)$#gHQmxa0H>+Ly3$BMfNe0Cdm8?cU
z;DF2zyy?pB67uXTd-=VKEfq_|D4Y)fb!hYo7`=>3#~3fos8hd2k?;s=B}wG9@FkbR
z(bMF}r2qzrV|9sGFVvFEJ0C>jBCF<3tzq>in}5Agmd~EN23B}<J3$lT0@}No_;{+L
z0tsaf8Hv!IuB$d;r)b+<$~nBr+;^Le(c_l(e9iJ~X%duvP}G~QG~@!iiqgN(nvkEY
zJo(b2QGpI$U9}h3aL0Sk_og=|^8_|erXF|phOQhmKP{HVk;`n?eZT9Hj$}35ceq|J
zVZ+o50?_wmDbz}|qn9V^Y|&?Ha`lwfx*BN81JeO**glwl{!T9GZP1JDCDcIcnoqaZ
ziA}b#4{5yD_khXNvl)*?MWMKv_yO@+&*CKCxIf}I!E(GlAqM403X?mk2NUe6aXj}F
zZSBbFbBOQ!h0eE@JmGP3(shUDQ>Z2Xk#wzUAfxl@{--SG=%^@;O@9MV0(#!RjHvhs
zrl1e53zypQbZ+CuJmVLsSB@gHFqMp<Ch==rsB0M+fauO-=)g_yX`5|ePBeLxN1dHi
z7pv&h_oK9}YplWbjS<R`m=5tUE+h~}v*(DHMukD(>z#F;g^BzSzygjPl+S6{IR+-g
z0s`}qn~unXRj%aYa+MXEE9s^Y;noTA(=PEKyR_l|s5=w9Idl&_c6VhxHK^wGm+lb|
zLIXT5LVe-#b`Kf!md_m&-svsG$5T>Zpxk-l*KLBtwA!0^CcW6;c*Z_|G|E%V&0Frk
zhbJ)_4+)?`crI&eCiZiFK3pX|8T)rW?405tY>~gZc(!1S+8o%^OI^p)?-1Ec?1b@+
z&hOeTm9h^|*GAY2^YpUyJw!2^9Z3tOw7jW*X;vIELYzuQZ_tx?xO@u<la7q9tiRI;
z56r0wkDl&&it+sG%DvY4NikqxkUV)*m#B)mG=IW6KOib6W^yq|yzOprby)lFG>>5z
zL@XVzb!F)DgYtuEo(z%&Qb5@47t14ojGXUF9scf?D?sAMfa5K$10Ny;IlD`GfJR2n
zQ%cN44SRuEWdAxbATfv}z*|#bGkozUs(}viSKsR!QELE8Balav{MDkh7LYh|&sR~1
zVp^=CGw%Mg<+3<Pgs<A%p$&-BEuMFb|A~J6i7Nfyf4_e+&z=Hk8O3njPu_=nG-T<9
zC7S==3%kY-h_-o5PPO7dUfR|M;@LS(^FUVjQs@3VgEIHYqs4qu)S@~spI-SnX6-a2
zlGtF8;&(lxBS8OmF>k@ir@RR^6CrSpYS2ayGPX8J0%rY;4j2fp9o`u1{GY>gE4n15
z_oIlju17UL7;CITp@h23jQ{KX`PNE9{Ie(OEHrt#m^_ik9k?|ud|p5Kll`tgV42?h
zIq3iVt$=~UWtJS0Qp1=3F>E#3T{ZqrW8z)F*nbn<Sy>{1#6Bd%p16od!Zqv9vc8ZL
z`Jm`b1?<>4kjMVNioey05=;As+jt_LQ0v7hvu>s)38i)YcY&|Zp^&=^grtiXSsDo;
zl=vnDL^|Q&vFHrj*a?|AYq2tLfqj1TTmST*clhVOun6nl{=~A@QfDsc(o)OH38fRu
z_Y3+jdHa85h3EzY&k5SwA-23A0>rX^r@d#c9(v<V!Grqv`l@d%q_3^>qhByZ&b{ph
z)%E)1r@nJxC&{?CpF-ky{n5mG1+bYU($jP(4BEf2q<K+e@jBkfUjr#D3eWntQ5>?n
zA534BS9T<N_x@lu_;cAyiETG`Rc6cV!x{G`aK|NgmE~PyZ@WYB?6!~4PKKJHqe#0l
zqS)LyTu*{xbdOh#rxPpejz%xT430dmRs+f1s|)!%GLY0O9lmNeT?q80p1Sr$@TZP!
zn~kJJFD~z6RkD@yCTr;SM#^H6ORTUp^AXQf&sP&PY$VafPf<w4d`KILk<>Z$2l7kH
zuuwcso@8oMO}dq~z6}w#L-Yy(ZnC=3);3kKak6->u|^wP>n2ydW30~I<bB6?_PVQ1
z;WM_f7p#jzV08*p00;hLU0!^%`Svh+f5a@daKyBpOjLMDJe(jNz*?3bhd+$xt+SKp
zj|pFnY)oanzTRe;t#eN&mvw7#yWnHWOLH5iNty?*bxD^yKh~T~jP#Hzb?2P3Jv?_L
zc+jREnXPqA_Q?}))?4e0VzRL&fW5cmtzgTPrvpYPoj7Y2zL>us@~U&#i5e;2RCc`5
zKQZR-0E+=qsX0%t*-q3cf6KGnxQ{&Eyx__XP}iz06HWEj3O$$kJoXobXOAmneLv>{
zWbvj?TWufO1x}V)f0jGW%LRpm#QbJ>BfS?VYrO0WHa@GBRLoIzbj_0x3b!}h9jLOH
zHU<VO)ht?v=AAGTJTWcm^9gYVZR(cJaO@E?%#R|EVDHChQd(VJfnyI!baAM=*~@rF
zJq9Bx*=Vx-q3dn3@LoSIC5k$?>02JE?9$R@Y$ftURDcgHNsdOkf=`B)pzGglPiJ_8
z2NIn%l-GNf33=&DVOxIO=)3Tz1EqmhL{f<-EGEfA+jOo6HaDiF>#ut+e_iktb{ERi
zC7+y*m_&*bx?Y(!KD%}EVzWoMd*}_f+nr3u6!7w((PmB;c@eq%_%7=<-0XpyEKf-w
zYk5{Oiu`kk1@C8_<Z4S`v>qQ#IIX+a5--zL<yNx2bx*a^Mo;?rRhu5QQIc}hbz%-h
zQ~AU~F`J`-EIh|UVgC|%0Azi$`P<(1E@3T#Yl1DQitoj;tghU7*ijFmG)6?xF^{7_
zn!+WS_Cup9`RBFwH#2H=4nH=DcKaupcD*{Xt^95}XHf9xEW!)QdCxbn`Y$ehHU|^<
zj9cEBx{_8UjCbnug6F&sE)$qG7bRH$$;i75Nxa?GyjxDSFf0Be4xAGK2Jlsbd{r0@
zCc|)FZquD&)5md5P)Rtzi;U55J0IFe#&d+K!@g)qz0>&~>nUpX)~H|ImBo3uw7pq>
zjCE(SDc-@OqN?#&v!axi2MI6wj>NjoZZqF_C`yBQ;#{twA@wn}Sr-VKvk0|LS8!2|
zo4x^3c2La5HG6l}_}9m|!};P{7vsQ4-f+tn-CAV;R)ij#!H^#(>v-6!NkxeX`gE|Q
zIWEl;&Lz{}UhxA8uT1Ju-W1)+x(VI11i)R6cfiCi$!R&Ors1w10~S`x<NgS$Z4@Ef
zB5)Ux^ojRqQ3){qRt>M{b#+J6?d;HPtF6c0>lV3IG=W|Qdi|vMkT2}WE_l}9(c*3K
zk?kb<MqKKJfK<>L_Fx+Ah>7QKI@85&hS=@P-2H`0QsSRdmbH{6!L`za=mjmaWr6to
zcAXh8n^M^EXz&+~XsoU<-J|hXEf18kdhSYL1dmf>U6@@+1K$jYt_ZHq-;uyIrzo}`
z0|S*1;IxX0JrWgJH~jg-OmKNVe}8ekt<=^@y}s5H%*0pk6w!^M%dSh9{*#|d>EccS
z3B*EOYp@BWQ#@;r-9O)SBN-oN(`zw==N`k3-we!Vl|)HMz0jE4i58P?#<stH(Sr3H
zy%)@Tm0Vf$*?t@Ya@8L__7h@?l(otQ;#ELHN&9T1l$VWn{RRE}F|xBkls6&R)6gIW
zZBm`3=4+3+2G63NjqZN-H@!c>-XEfoqUaPv;LdNYNxSrD>1|r(<xNMlsK1_WMfa_X
z2f$!ZuDzsDkwn@Yp;PJ(N0KCziGi5c!m_Pr3TXS<;2OS^l8;<m?uRM(3l)->6!kRQ
zNRG3HS~m~-w{&VH(HsX2yQF3VQKI9Su8Lw_Z>hz4VD66fTSkZo0su?w3z_e+In;P7
zn!uPS(c2$2lP+1mMh2L{<!3vJ18a3`3++a?h_YH$(ZEdGzCxz%0#Vg+i&guq-SbHo
zH*<|9<6^%0o=Xk;*An4N_psH`7(^(O1_azKWB`OvL|I0FWRRg~rQQ!uzVOa_4_^Yf
zV6%`L4?pde&pP3^;Q8j^y%2eR0=o3@<igkHbs*G^jiTqC_0l_0U5j47{iiIZ3oPE`
zzMnT+Typ6#!nA9c)~dfRgdeLaGVu86{3zsysOuE?pmkX@C)sVrI^z%ZV7=SE^W}v(
zNi%Dfl*ATliTjMAtPWSIKjIsWa^ooL)VTslm^3$}=y;_jGKO!HoW+{k?1Y9x@aM|8
z?_sZR?_dv_tgk&Tp+q10O=OL_ercRI+?>r>+zfJ!7c3K7l-}aBU;p}wyvy>2ehFiO
zG5e-#l5inE5s(ax%Guvjxa{Sc=PQm?*9^Q~{z-4qB%qzTf9ZOvgouC`+P0N|bus*%
z#Rd~W)nT)<2z)DIyn8mw`gxE_v2t|C*Br}c_e{h5>$P-!1)eosTc`3?YiTWBI!jlJ
zVU?Taik%Dib-3>ukE5(J&m)gx>R=#@VU$mcnY|3Cqf&x68&Pm($z~<+1l;l{)t!_6
zTUe<<->a`&WxQ;!!HxNs+`(?tV;A;@cooz!K851V^$gQ^rGd`QY*B{zSO|5kQz&f|
z*E$=a!PQA7CRZGtPWylWEgHh=fJ!k#&f}f5xFhCZ0W4{z!T_f+xY>pxJV{W!PMFK}
zY&FmXXy;@F?@>g(FXC>p8{79$^+K&aFom-vo{@=J0a**gPxdnbC>v9oZNw5KH9XS5
zblHr0<$ypRK}&Sp$=qpWxs-P_z~GV7B%C03PUoMBiuLam7@84age+^b1^aP#-)#-2
z#;cigP8I|j2+I}is=yRz3?*GwY0B;=G%8m{$Xr>vNPPb+Tr_@e-Vq0ksnHv+eJF6F
zC<T%yuu!8Ycs1L;H9OJWE>q6bNd8k3yX@9QPV77sqQNgCPB#0gQN8=7k>htBMER?@
zr_TC}c*{8&-sr=+@hYXea;NJ0qCl77yxe>Eojm^QQwNXNaAqExa@z3TJ^tgSTH?*7
z<-L~%>!Y+zwe9P{b%HzXLsIkDikIeFh$Dy=a30s?Sx{~^iB~_b2FF*7QujB~@);u7
zLq9Nslgn|R<>)VQl3DapoDbe97rjoGm9;E9visyb$}%-fualR}o1r?Y_13w*NA5ei
zod=6im~xS#P|4LcKMfq3p%f0fzo?-iMEjt>1?+$<eST(#=Kb5!AbRa`ZMc?Y@%#ek
z@TqI=o;O=g;j`cd9Y0<m_D@`mk*nR*e3$iQAwGtIK4;EgY`L8lq!VD_Qe=X)GydS%
zGf;*M!swG}4K*ie=pLHy2OaPjpM4`y%zw|4+AOf@pzO)l12xB6wjz{s*kp1$ycor9
zPkAjAGz^xGQU}7R^y<tXw<TQP&(;*E<mK+ma2fZVRF!Kp(Asx6icp3V?69{H@}P2<
z|Ag7VIL_2g#8mvLEm>7M=#^Mvse(Rg^!&|?Pa$J{HT%ZY$vLXqPXc<&qo{K6O*fL9
zyFAq`y-MROLYr17AN75v`Ub(I`dp=g{5Ku7G>tv|bAhNtV|UD|&$L!<J>BaMY_j#j
z2<(zMo2#N{cLYXy+x(XY;s|)oe_<Mlp*VtRpAk|r>G`>KmMu|TSv%v%f10ifoS&Cu
z4!2`hTBmK+J~xkD<Ux7U#{0U)Cl&Rud`|Q{+4I(9gcBY}Mk3p_%vtG=*G9UPe=B*L
zu}-9PZ)lEYJr+(Q`vUf~CIQY3NcKZhbh$vz$QBLa%p6JO0Kz~u#5G#5^cNkK^=FkB
zT%}ZKD$`Yva}7@@aJg*@nBwAL1c{6JlQkMXCqJvUES#>aS_*Kyig;dbaY=~FdZ$!|
z1WAc7)*;1>`?=u+6=}5_2G0YS!F|VAEq&$JY`oQKp+OwLY;9dn`2Mrm(@cprsPa#H
z99A<mCCmbDcg9tUC)5lP1Z-;};eBRG%?T9XJVdCe0@awddv_j_)m7|$$AstjR4naj
zp75DY_n?#a{XHfVyP|~GM+2!Owl$(~2}j3<KUtwx_m0qR-F42A9PzSZ=Wth>oEs#Y
z)GS=S^0+P>SlH1{EFN{VlE9(U#V|0Wzi?mH`BI=(B01Y%b=DugKFL;i<xS^TN7mWe
z_L1VGvtpvToQtyet<8i2M?NB(-bfPZ?BwgEpH7~Wa>Ns+9uzv0`I;qFAJ>Ktz0J`v
z3e-hD^4sseD=U8YwJjEsrmvFTaziLDYd6h1nW6}t1G#UmaUE9L+U5)&_fDQ<Db*~M
z>mMstMQO@k789(}C-k7gQs@?EtHC6{yUC_rw5uyy8<oTdZ(vIph!4+Fl5JT{E1=0+
z5cSd+VE4Qj6sP#Lf^_;&;ItSpG`@Borl{A1b(`<Jp6bLx@uGHO)AT8$p--_=5^f&a
z^9oe-wlTb5+KToT%_E13-$-<s=U@ihFwvPv1X$eEi2CBZAtD^PN=i)prFKJbzCUmb
zEvN#Warb$``7Uy+Ej;+#zw;*3WT+`qwcU00O_;Pstd5sjGwdu@1W$7v`EX=^n>%N4
zJuxnKT*Rzlm`%6k&TmdL65|+wlhup2;&I-2Kz*Iz`cqJnUGkl8pg!T+1?Fb{&Ys>o
zv!pr4z2EI`OCMWNWBBInS#3b%;gdt|1tUB<>}J5|n8@@qa=*?XtiHL;)6N^Y;4mwc
z=yU^{cGN-ke3dAnd$+{GGpf!!|G?03j)s_U0Y(4-^`c=tw5KnQNzT#0&tM`yr<=O8
zG+d>ZP^HD=(2rugN}Q<5_Pv`%vwoc9aEU(Qx!1}H35`PIw-5rZLC>)JACd!3<+6w;
zYz4PxE34r1`&8~JC2mdS&GMYDU@_+9#?R2M4bnW})cTDdccfek+?fE6I8T#$-M(iz
zut!qJBPh>{r3$|0M^6l8fZw&23^ZT6Uj~Nx6zLX)CY0>g<3FL1HAq<ubcrhPW#-7k
zGWJ=wL>1IwzN?WoL~b!{6Jv8h6ceb@Q<X5+jZA>6hno6DB+&bVU;csAwxdpPW7<fZ
z%348p#G-*oKAw3)MZmc^vMQo>%ctPGn?10(s*@Z|Znd7=FH?{v0SuGga1!7%W+~EL
z#+JkFte1co6z3DtVogJL>v*Og-m6h>#aZ!es8PsB#L*|dWQ<VTOr7V$y18PaGQQ5Q
z$~SVgFZg7MsFP{y)ps^Haagosivk4jBTZ!+)v`J+^cpVqql<W)q@_%hsTG-90!xRq
zed-toM;SF5b6>|7s`$rvr`#x=G)Cwk<=Yt)l+S-ghxs8V|KKHMmm3Q$m8bF+a1M)1
z$1kJ8Y^vipbuB=#yt^=l(MD1m$1(wD=D~Hp2nk&G5Vx4_GPr*=Y-q8I@ai@q^!?(_
ztbL91ECqkfX0chx$-6?nL{KYNpI?X3VnIuLyx_L@o8@A)Qmk3SobUmn=Lm5z)}#I*
zU5x8v4g8|xi`UFyFO}#F=RyTm$}|?IuLds-8T;ZnYjjzrHBIqLv|1#+u6E4wR5J3l
z73da<RfP+|sD!`g4-78qr(lx=c5QkNo9xuBg45Q<#L2aO(<^3v@N!nfIn&GV%29_M
zF6>-Ey#wn9VDji*Z4v1d2NKCxqk)_;5%8dVd6Pf0DBN3@<{wq!_N(WrHg~)C_F2tT
zs#uY^y>CIQFzwra`PGXY{iQE3C%SiIhs`7cGi+VM@_o8$+g<bhvQ((sP-do^S~xDt
zB;9=pHe+nf(ji0Wr00BrxS6xdeYVxvE+a6IFAlg9po^ANe;_sz&mF3nuVRjbs9Nlu
zA;Kx%<}oonx5v@pH><Q+S2*HkqEYU_e*dsgX7Cj#wDH$nRYlXY;;dvDLv3`~iF*Am
zY3lPYOtMDBibxOVtI|Rp4!z(HMXty1KnOn;8$728XRAGHG|R3rbi}vW-UYoVv|_L9
z89TgJDv~lLc;C?($&i2Gd^Bn>)!agy$jV<dK1g)d)MR+h?b_t2Ry8-qb3<6IckB-K
zrdFB^Q?Q7!<+4heBy1}?Pa4gBRIOqtOXBg`GZ}d4Y=dpt^vu>NPo?Bd?sKWi=bU*?
zXAd@LdCMP7X)<rHKPtV!R^b`TE7JHeGeEl-?B;_EWmBL9M2sA^Pr~98mfrN>i&NQD
zAk6}Z`2QbMZygn7`+o6CgS1F@2nf>BDIwC*-QCjNNT;B5qjX8<&>-D4G|~)1#|&{E
z-|zXYbNmk%3th~5?&rGq{_K5qpn8q}SXXBC$`C1n^<VC77C`6S9J37C{AGSy1b!U(
z!E#zR!#&eYV_EQxkRc$mf!k|Ox~8h2j_u|*VTES9Xx<TdXL0>k<}RIOZHDHR-#$NH
z&43N(_2PHIQjv4P=W5sbzE=sk<{Yv22_XX)nnx@PZ@(u!vw9hWS<;7CY<pI)5ltON
z@D57msa*EPHhkgdF?QD{aOiCVn+dOA2Y;QK-t&6177gb6JYoFF|GgA+0RdFzPnya4
z)sAtMu2R)2uRJ?-h$>&Kp<QHd>QTmh;f@<o*~j^P35p6wq{+|#`3E$8iDKWb?$aL%
z%K_OARszKABw(y<G;?RJ8(#CQU=ylIb^)FbzwLHkUfh|#y{ablM%&f)tj`wAU395@
zPJ$B6FRT@5tt$Ks=a-plwDjNGlMi3;-n(19$7Jd9<);)VhQz)3{sOUG{NH`iBq)nJ
zFg1Ea<)1i&&WfmdtvWs+fU!5;f(6^u<!0>xFy3nQ$@ROD^;{+|b{|#9!QNj)h`27?
z%o`-lOJzRJy0qUxO1@mUUUI%Olme7rmvVhCv^$~6<<-T7i>)IO{8C)pvQqrzG5YJ9
z$TCtJ=*BhUn-JFGma`%%l)GanrF`Dwd_wYhC=K)1#y%@H>_3&$f$6L#lHOvqxQzRB
zHgOL5$!+Fw?Y6jHkGIQXlrceOsQrZ6@{&~0A-}=9D8=`ORm$@0pr2@84)Wzktmi2y
z+>sxRv7HWYhQC}iWXwRr3iNbvLRwvv=^zJDIZD1alRuo@Q^_=0V}0^W_66HbsG#ZV
zk7#mhdh^A`z+L%UOEr;QsZLeGx-NdGb5Yve;l8<AwY=l}vm8h4{`lF^MrQ?4@x5C7
z^vb~1bX`@3AtvVE09D5L$9~76bLLW*TFoE(HfMed6Y8>GF!vszlD67k2ui4@MSxr>
z*WA2vlrM2q?mlp2_bP(ya=k$<F>zD6q(f0p2N~tRCGgm+pc@_U-c+<EzIQR7nS;by
zJs~kvDqeb~V(D_kPso>y#%|OlayjzgAM|u|il4jlrVoi_Ey?*F{bqk${0!(WCRt)j
zEQQ~?S`=G+%F}|xeb%G$`MVW7>Kt$5K&?{YE}!;}y<(v<MM>ZD6U^PVSbiXF?T|{<
z10(CP29z@wn`5GFVUE=JE7H6ohl6D;S&&~SGhG7Q`g)9fq$fa)lbV8K@E_0?;`a~D
z4$<cQCu6ncq+4yaCuZJbt6pAc9*caFVsh9{PwYfSvRN{lBBdm#=yNzMv&$b9!X)3a
z(J<TX+>(L;qLHvYLaHDKpiW;Lo_%mK6?&NNzHWYL@I4dzx^nALc%dDwKSx@7xL&>4
z=(mOk;z_m6bgwU;dnhu-T<|laZ5bAVr?#de=w=Jful?zIo^z09Co5<D$Edubvj-=O
zBB`)^En%k1UK@)xa|sHy&d>QHnu%OaSc*;b-gNT8Tw~fhgSOSo;uSIWlB4X@G_MVK
zw*n_Fy$fa|_YRTft=6r{#ovnwa88HN0^UvMbY1(ayS#-I>?9_Gy|~F?>pZL<?zXc!
zDanZ+6Mjq%Dr%&>aq_-PV>L90z&?T!Et9i<H)5|C@K6V3SM8*|z5gbED;03kFP;v!
z+e}iic=&5ewcDK*0`075`c_f-=mKi+e`M<{ujVx?l#aHL*q|~J8551v3=syc$vTfl
zToO&(_u3z~OI$=Alt6=NU9VR(al1Bo-9L*57@Hior^#z;WmA1ql4rK1b{KLd0Oe??
zh?Qw`Mk$x9`9ee(L)ztNlC0fmK;#BeU&}qd7eJVF%e9UoNM=vZ+IyhZ*WUz<B<1}K
z0+~W2&<(T*$|?yEfd?z)*F@4&*qm_xQ2s#O4pXuF0GUz6_77%l&8N@cYO2-xKce>>
zN!<4_VIfB&yvL)?phsGTy`Z-nWg))Cq4y$R<ww7>YVUSeUmGDYeWHd`qr|4kY3QHR
zRr@5a?A&NM{@_S8d9rN$2^pg9f>Jp|%g33-oozT6(#xfY1;0BmOMk&g&FApcMueMH
zJgrQ2)8l7Hc$Vxdd2$PH&ZP08&i6`WpJ`I}g5-(laxd3kTY)JcnK*WshKfYtQtc>^
z(a1T5lmZqdMThq|V2D|Msn0B`+RpcwLGa^p`v%Ru*&c;1Xxm=ydM?E&$nETcwQ)X1
z^;w;OWsj8O(TBh0PZ7-z4jXdNbV2(mRHx&*U=~@YA(|^`3gpE<uN9<!+dk%lCl)B^
z)6kxi(8Rd1(mBsSQ6gutHuqwQf)~$fWf*UBUrX5ZwHA_U%Fsr(fy2xo)5<-tjNp45
z>C9+vt8q(M_7Uq+M>0wH(GsxfP+&Pn_s`g3<I)Zo6z0~+SamILxWK8XNXcDWGsIwA
zFQm%3?Y}ze?KF^>C&5>9zIu;n>J$58USG(ZJJ`kRh$1ELvEF>q%Mz$1HX=}oTidMi
zbev;IkU{`shnhNY#Dbt*C-?_Lf$v-LG9NUj0@`%vD^pnD$5okakLI%>DFW+%fKODN
zGbr{OM^A@sP~5Xa%hkanKoSS61gM4Hom<YG;dU^VpsnoJuJE~v<Y}VfJW7KW6;Tt#
zZ_>vy`Lx(@HU;mQb--9Nm<#J_4PQR=uw!;P5PWj$TB+OdX*7?#9|wEgN>H4<fA6&Y
zzO|ZYfD=c5k-ywn-`5?oInS3<&RB5`7$AvvI*(sIKYRU@tKff|&X0Ew1UK-0AQv7L
zWyZR`8q2bV2(JnKIcg-IlN4!JbbquZ{FxDK0#oT(8drkdVciHq?H!OMdjYA@PtmG*
z<<^wvPi}KMul=n{wAt7BR_a6Og4-(oTn_*T&-br+bq-n>sRazvBKi8Tp}uwiO=c1&
z{)aRepm%>%FV?V()(BmqBu`__8nLuY^VVGsR~x<f%0FZXSq$|e)xv)^ede=WXbUr9
zMuGlf#6I?x2J|p`M9*h^kV`$$0kJmb`Lf|SZ2X@#*6A?t6h7M%l>@oYfO>*EQcSuw
zx(m4PV>7q`v41GqF0cF?Vw&gAm=_?TGm^?uonlnh4|1FfrR;LR(lNk|oq1pVT;2h{
z(T8OptSpRZ2WTcdcx&uUr2jQ7;$E~7t4jjM@E*SbYVs~zm$L{a6m@9wfIF8cwA(AP
zc%>r#y1D`Hw2w5o9n{8sI|!(^3a8o2*FMTV84bW(#Rx3QniW>+eVQBWiQw6;ceyw(
z<yvtPbej+fa9+dc5qW7`WTX!4s}!zTdvpC&=A2_G&?Udg)cDcQd{L%uO6z#qFF2pl
z)+3tW&5vn%@hhE%NwQPu(vsLn+S@m8snl2U51Vs2NLafW2;M1ARcxTynf38{soBmJ
zf8$^btoE|>^eaa)_7pR2qhC@9oA0LqnXI&St>iDbMuN{dm;x^aO=%gcQ8HPt5!+6-
zsY%bMHbuMrf^UN#sXptwM?O3Ti%3FptHf6cXM^awR*qIY&xnb|l0EwZ>(|mk%y+Eg
z31%(7SbO7AmVOXl<XOIG(<qw!spaW9o-VralT3l#@{2pK)A=u)<C*$Iv}Dkv@t5ya
z2BY84@BOQ9(SlA^+Mo5)^biJk{r}o%{~&&O=stI2Lbd;z&2afUn-_i>H%@z7*X&|r
zz>w3Tifm%rpkn&T$kVn$HN|~QYuEFZ?5!Xu`%ZIztyojIIqy2(H6B&S0E2mT-MMp3
z77khS>V_;nhncR__^vSuO<oeSx6Hllt!89%Hp+UncF-b!x2v`tq<su5nL4))yl#97
zyn$W<8V2^{F3a{)0@A$P-0q})ai#rge_3^2B9&X&Jci+~cP6FMOQ&vQ9)zryF%>}b
zIeX(p`<^Idw8p@aWns#Pbt_vqkP}Tx{C+H;DmJa!y=>yE{Zr_hYFACW!;a6Bd%j9-
z<>uv+hffoJ?DH<uma05uhOIAC-9@vCf)zY|D`}*0HypTshRR#)s8O;~1}#NRdXSme
zc^Hq~$-}kFjW(|5A7rY<=R`x=R4b(If;hP+zWh-yP3@9R5?i7Y^<9;A5j@A;>ylh6
zN^o&BaXGo;fVFc|9EyAih(J3H<2~j(60lonnSd{6qj;>fVHV>kiWaR3cvT7QZ*Eb~
zxjiie*lx>y7eA#;WqnrIbzg63?#WkbpICXmtRqlTt0r=Gp9{3JY6VYH_zU@l;;5q{
z?F^{ALf1!B70n8}UyI8VP<rN@lgBg?NyS%>d^?@3O(F{D=IEP(3Hu_aGCOm{c#z1Z
z<P>m&WjhXsW<jQ~P8H*RuW;FyKQZiYTD&yNwI+X}W*FM3MJYt98jiexCXgQ>te`Q2
z!{v+*)PGbN6oGKbgnC({?L0CMI2(Af4ImM0?sto^KLk<y?lNvm8zH|?S+4HA7j?m(
z1yrm0i~6$H>%EP4$mY5eWT_rrxgje*Jw@7K{_wJ#FzWv5IamNqY?&KrWp6Na!7UU`
z<gAd=XS1*FttP%m`%*C8V!mj!=FI7$2tHmDgSH34?n^Nru^No?Ce`P@-dqpFrYUM@
zuYF|mpwup#o`P75c0-HZzaD9E+;YJfTf}{DNH=f#de*ua6MG+SQEof$a|)<YC+-X@
z2*V73>TIDYr)Hrqs6h`O85N%-n+xVg#Hv4zub-LSRM{ERVP7Sl;6T^1?_-W(?;qbi
zh~Ym&j2=&>*ESS73^W%>S7rwV=e28nvKq3*o;4>W8!N(D0pE@4@l#2Qa-dCCkxJ}-
zS?1=k8rbUCv*S>`AjpAa)BiGCqy5|Alk+7XrF%Q&ZFXj5K@g_${S_&v&Sl@DGlf6_
zHFmX~$*6a`ICM_%6zf^|^S0S|J<uS}&YL_!zqEus6^T9Pg!j%o5$n<4<+to+bDS7M
zE@iD;_ku}wnQ+JKiswl+yurIG|2am?*x^g98!4P9VJrIq@ohz28Et3F(Pz-zqej*I
zF!W9N_c3=7_~k@{_?cpWY-i9EG{Ue#7W%X@@%47W*m|O67U$QbsRQ|44h`ki<hlQH
zrxz$tD}U9dUN?_pc(?->scxJm(EWsMu*=GUfHA&_vdtche)8rQ#4_*_u)e}iRwuI6
zOH?rzN9OGtb7a{*Z-uU*Ek@j=&zBi?xPxCz;=IB8%vWq|X!E>H8pDS&VY_tVar{=~
zzcIa*?w`omiPs={HrDQYT@D6|*q@6@f=M5PI@~x13mGeq?nsL2gf6?#i=SV|t*!pW
zKXF?Z<3rRJtNs8v{W)6WnePVDPeL297}TC(9BfAmilAT5xC`7H(^Y3kbc<tx5t69)
z!ijbSYE?=NM-9A7LN3WE+cHaGJVK9RiO6?f{~40K;V%YD&M7ofw$|S8ng2ex6cD_`
z(u(apv=)GI)n0D-ICxkYPzI1!s0-uz?%MVi@Jsk)pLjqvj>`HfA1@@}zKoA1VlIZY
zIl7dvPt19SvnJc!AEUq6gV2Z0)P?&pZK(3R_i0wIKzJmSU@`~lPiW@X3pZi1R$NyD
zW$cx5Swg3?LA7Avq_*BW6o&yVc(u9_V-=vPwWi|f-;SDQ{aztW=ISb13vWVp_^D~n
zzYzB&!G*D^^aO=bOiT%m)+7{!b0a>7aT3+jVgeuNS&C44UQfG0aAXMIdK&7i@C5$3
z1VLkt1&VY1A!l(NYX@qZ<DR`jM#iJzre}ly>jJQjxDV)9?}}~WO3dMudG5M75#6*q
z_eC3@EXV!OrR>>N>MlDN7~6p~-=FS_GnZ@X*o->L)HDbp(35$&CumCZH&mw`J#FLd
z*q$gJ)opi<H^$crlXa|@g$N-CV!(|ya8MTwXFT6b(LeJF`cuU`T_)0U|Fn}Tjmqc#
z_i2COxihv@BzmB7uhV;f{D=^n3aO%3PfGgDw?~^2#fhBgLUBCUj`oo=;afbPdqm=p
z@Qjwx=xJ|0=HfNz=ioCrEcqV?@@y$%n`61tQMR9x?VG&7GbMTbe!_tGfy>+8V=yTM
z$EbFKgp!l?1H@v>MMx-;lZIY}_i}|Y;)Bwi$I&_%VvR#n`ypLZ<mI`@L-vuy2r&;~
z81`wK4Cxn@0s<@k^3sfc_Qu|liog`UQ|0t6#GX+VacbUyvpe@~>XU%4$VxdGAtou&
z_-K;(7Q|8c^pVF1#uYqB5X!a=^XnVG6V{-p*FB4N-XA1eyl8(*ThF!-RxBK~P`2N2
z8=a~EaC<RoMMyX0Fw!e@b;PdR@ty}K8s89RoJs8Vf~rM7>Vu8BRg~DiRJ>S99AqGQ
z!by~M8=GQEg-F*yPV>ZbTZRABOO5K*p>F!(qtIDjFc(%{h!B=d-!RtJTjbI&dpQRT
z>Dpk}k-yl(9Z$_Wnu7sh^xa^IcP!THMISj6G1vr%9kEM7Uho7XxxC25ygPn!5*M|7
z5l6$Vu8%JJovp7(?!~s_T;go8NK_eqL{s*BMiUvM#R}!AE&AcPb&Yd_3>ULym5SnP
z=^z9|(RQhJw0rZ--an=njJ;gC^GByQyt<=i3AB1c`B?#lti9tez6Y2LerdW9#-pAj
zdFWE*Sa`x?TnR>FOw!BIBQ%2VG+R)t$44D&P!SA?R8&F&jjst6*BJv!CRLx6UR^W&
z^%9!A%MfEj=JSjUWUpTKt&!5e6c+)Xbqw@}>S1TLU%Y0odZe9eQn8R|OaB{wBbuvv
zpfKmSI&y8c#SIgNP3$c@vGwH$4P`PVfIW^1YEbwP+uJGIKjg<jd|)uAqlrIMAsfC0
zuLuoE?sz6d@;(RQRTQj$CcaAm(e{b+szO&v<_9eu%#{N}UMB&neQM#WF=3_OeUBk<
z#FVXg%>RzqPkrmnvc7o0X5>lEozTW{>BV)k=H2w@EFGKP(=q3DU+fa)=Q40^t)R}v
zqyRD0G)kCj$thq%Vl3DTPdZL3(#!B(`^bg}JF}?{^*sH*gDWQZut-ShsL3cw95DCH
z>hcnw_|}OR{(SGb$x{S2s+^}Ei0sGbfNdR+F_AWPaeGo+m{ah_$i@9LG5T(9F?+Ko
zKC}T_y#Jb2gmqH)zO4-l=xsT;f{(R6F#OX|zR;OCRMl3HMv4jM#&$Va?HO80kJo;s
z5$mtg+E?IAY!Y?w^JWKcSPxP;QD*Vk!U&Yn=so!kWv&ky(j%G4Z^)KRvnhz4USL+_
zU=5u~rKj-3uF*K|6q@VvJTAv*9%ooc-W+NWGx97s6cBdva_DrddLMs%xw&6aJr&{d
z(raWiYIR&RQjBh5t-~WySezn#;45bc-b9`Wl_xb%pviMMWcVm9Nr<JV<DN~I2}fu4
z+=IdaBp}peI?GsZPn{pxv&~}1FITe-EGWo^q?mNj33-!%(O_^qh<;8Tf!C>v{g!mN
zImOF+UE;`4khpMO$|*CTDjhVq<*ej0I}5abwkI^jEi}mu^#Stlxc>(EO>f+A*qiWZ
zf-RQx=9hn`r#QpHZ_NFhab66De_k&RX@K%tqxSe$9axY(6O<@=6@}!#L}V)=Ejd6p
z`|2=8)+A(}e?1=(-hvrsKbR5G6d*Afj>eMCe-6nbF$w?jid9dSQb@_B5{)iB5`nmo
z6RT86a5kecCUe}wbg*jeLow<(vJm8BtySXAv2edQ^DR?ef=8TL9D`O-IDY67_9!F5
z94)GFd=yf=0f~r7e{<~PxZobawomGioMNPa=T6vGsPFY|wh&{_y7niqc8N>(=2qKS
zdductP7LHl3qm5&YOS4=*;Xxa<NJT+NJ%2$*UE}z-AUe|gR{bVXMTwcIqa^$$vywT
zZ$K*O?Aifm&nwKHPnb^!ZT!p+_%HPGE50tG5BZGGiG;jBxR;!kQ5*6-;asdIhD?VI
zn*ch+*xeZ|zBBdoS--j6<XwLZ@1UtBA&)LDD;mlXX9)JT%5gO}AStFVMKrxwj|LWL
z%s3*F7;z!I3ZwrRZlhIktBrF>^%Z!x3~o}Q7S*QkAPEeEpCSoEYkdWn;sldpNyQZ>
zx@o?xoh8gE=}*XULM;UN--LRTctn3UaT?0NXaNW#4@Fc&nN%bYM@8)Tq6J%tAYTgO
zcz4n{zoS`6G`|%Zo4vThb}9$2R|O4)EwJ@sE|Qns6FH1p3wpD=esb58V4kyi$m+!D
z1D8j-#e|uXnADx3@3D5Jh<mbh*N<I!RJu&95Ao^`G*}Tb{Ef9vv*pP*4in>jIH&k6
zmX^#2*i?QZlgW&*{JZ{Jz~ye^G%@!ABog~BopAyX{t1yuo=BYcbR9YJC<&AnOHb%g
zH>myT1Yh|&Iwzb{0A2NWBXx}C3C)t^nl99bHBH##gdxG}0<%~|%TJf)ypJn^RPmOV
z)4BT3l7)X2Clr9y9E|Vc^_VbFX7@RvQpTQ?igwa4Z$5J3N=L@F8>03AHk}@k{v>AM
z+#O|{CXR6PTT+2aoH(eBy^!FgL4nD7G|uC{iRmkF@T{PO-dw;5fRpaU0M0M(h!w|<
zo-5$k>CqM*5~CtGaT6=A!?$lAJ^S(-O8<_eM+6u;Ks|%|f5*IuU|fSTB^%ZgyG;Kj
zP%sge-g5qmt@C_mU`3IebpSWR>OXSs9d92)-@`9)_?Zb4wP;)f;!5<CJgRG5JIwv-
z-d06<7G8izp?ZCNVvBM?8Sozd@>1skKn;v>gwMAEu(H}+Y6*LAO}ny5LA+alBL1O2
z&Oa_{wfL*blGqtl!}ERSYg5t1!=*VCqRAdJyt_Uf!9i-f1?OL*A$(Dq#AdKvW_ltM
z&Y&o3&yk)`)F^8YMvjskl(9z1)p&QvjY|D&0{+a7*awkg@8CuQbT^n3X(jvTo{mE)
z@Yl_ShLa(#HI5rg@|&NcwP{1JwG;He4O8*FxwCb30r}Y0UOEoQt2r~glSIdNq2j{S
zD=D69s_yT(dYar^l)6@`ZjP}_palyoW}!;R$g%&6zXAvbAEJCQD^SBQw?|%YoGiQY
zzRZkIRo_mR%-`WMI-|z1VmGac_vM|E!{2O2Zr62BkV_%Cx3?brAeXFZ|839r(uB(Q
zmD&ovw+GuEly><Fc5{v_H5%14QfN2$^Qu39`@aIrz07iXvA$!wPb#{>;_`;_x6inl
z-2I)oP{PWLQL49ur<2heAosd@++pP?G#nAHZ!td8di12kR_;a*pa_gIn8c~kMV-)Q
z7G6M@@7oxCqCDPxf~Oo@{r`E=35v<~%NF13%t~;J?oE)_rvysTUo%gJ2@hBGrGqUZ
zS5slX?Puk^R=c3M$z`+Fqy1cYpQa^qZ|SPH#xmS4)^g*8y7Xuj$Qr$+jzD@+urBa;
zPK01f;7$bdhx%e)?w^$gBC>vHzJ?p8>&!qP*5O;sh1>8@-pD~+ipAX72eoQ<jG8-h
zMn(Kay9#$3cxHp+nnC2E{i?j@$$G^$ahmt}wqH&WGRlhcV@%DPd3BYe9fUCPSG)q{
ziI;nS-l71Yqa@0OT&{s2107v&&Y&#4>}cua&}dWv(og?ZHK!nBG*y=#AJ3;jj&%6T
zeT_;jl`ip%B8v5P82~VU!2vnqb9yW61x<mF|M*js2&9VF^70ZgnES-;6~)L_jR9+*
z;xS;&?KFh~$A7m*NJFj4li>bliWbO-0qIaRiHpv3efbUz>6sFh<L@(YDKVlq4@stB
zFuCtByY4Mz)D?M)(N{DfoD7@C%M>TjkEC10n&9TY^O-fn!D6Dk(STyX44R+{G>wXq
z!9hYS8d7@I7*ln1uxgaaTLxw4I^C&;b}(Ib8J*npefS2D>IGrzDO8;>g_zfgcMe{<
zDw0_x2D>X4$A3~-o)rJwDWclfF4ozi@!1;~`?|Nz;}~_>Rdq}kWHs0=d}{NwJNC$Z
z#Vg;p=Nv`$<s6+g9V+v-eBIc_4S5EY6AGlmjZ^;t9}WJUk@%&ILN8%LSy~+5804Iq
zo}COpw6cK@azq@4w8mqS!rb4-vW3|H2Cye$g3!835%7IzjWGgL*mC*Tj$>S?_lNZr
ztINB3apBFaeK{-6rxG6djMh;rWwNOf+PPYgoV1wNYLHP8z;*v1mo1RYTfSk=%S_Lz
zRrB4jye9cQ5c73W<y#e25jzhb%M$!UNd&F|3h?WH`$8B60fOB1q2JkcyB|Z)_aS`K
z*N9zR65vyZ1K6Gfa7l_+pz5Ghm%Km*fQqf06!bdnc>Qm)+PV5j`GDJ6Ac{h2+WWFx
z_gh1}T89BLTX0!>gYCTHy4|AQP$MAiN9|^HqFD?@>|PAh<ATFPyU<dahoYYYmfHf-
zN<-w=&>oIrG0KfI2j6BIi_ew}1Za0vN*T-OUZ+(XROyJku}_;^v~7eeDXrDmzft(5
zcyX<*&JgH7`IMq3s4%FK%ZRk$r){TMQ#sk{dR;zOIje|6El3xCG`|pV3Rp%_ul^p3
z&8OAx%Qd~zwOAnDS-ph=voX%WxUw@QEGP{1>IYekMgv-`k1?`6KYB!6rURRuYlimv
znGOK?S^UZ7qVWqiM-&s8-^{r>;{UXPMjwHFh0l7m4#v$%8boq>B4WC&WWTTfh0g?%
zkT+}07|<kNoE%D!Tb6Hp19#K4T(A5iR>zDG_WyCnPHXzV9!;AmX=!<*SZX?#W%T$Q
z8P?X@mQj1%_@}zs>Ky+eMt6S3y+n;J^OA-)CXPH@md?7(ru7Zpoki~*b+mmwj}LmL
zANJba{iTfT*L5Px<g^NjOp}<@#MoP1t!|?dIR+!%-#v<{b;_ftB4XOY^xByr@ist}
z$61-S@6~^)tuHhtuu?S7YOh<>oRO+<H`kk0LBSU5lqNV`!fgFQc7=58g=EO9Z}fhA
z8SvdIFCETDrYro=x-2w!cA}j_zd`KvtTyOp8(Gjw&0xWelm791UVUEJlSJQM&9Oz!
z$^{9Jni)-*YSlNaqeX>6Ftq+h*3f@!Bn~psJ3Ypnwp%s6XqFMa^90%Cc}cXDiSy;5
zu%C)$+f=4|hE2|JA)n0<xChCg{4uZX&p~<WAG?^=qhWti<Yu)X7CS#2M<Te4T){9T
zAiGku4PxXVWMd!@Bd?zQKQsAHig3wTHunO(iofc%wQhsM*EmXEMfumPg?&hnW1lxf
z!9#AXv7dUwfjQ9@SPoe;0$hI6pmXW|z+c5T!wD8+kDWf3{JQcfskqUuFdc0mHU3k~
zMW6b}4HB*v48D2cW9iS>`7TEs*lPx)A{3WjC}>yGmgV`%FI2VIW^wy4_jFiHY?YZx
zkTj4FPFQcFUf3S>zI6iXyox_}bzB@Wg{}Ew_49b_y5l^kiNK=9v~J}y=gLG1(>t<{
zI;HD+j{@&L9rLFy8L`WJ9NBABXs8At$DrcR=P$o;TfY2<eJ?O*RIKUXP>3)br$X2p
ze{c0<xLQu!#my-CZzeb2yFNeOwqLWJ@iZ0e#gh+%4OcR3jPiCEmA~UgBqR|jk;&gq
zIQ#x%1C>DnB;Z;ONXXmSNqOpeV9E6Thxnpw0T;DEAzuUK=lc?z(`!#_TMbZCG}%;1
zU4X!$x0tr?ciitz152ot7+U38#$Y+zfO_5My|{QjlK*@Et6KSy&-qer`BrM};~ut<
zy7Rvti#%TIas7`&i29ed;x!2>^f~S}o_mWzO<#?}2%|T}s)uaYym4-_-6GT+$NT<m
zw?d)d!N+psPF3C^Pz__bA_jy|rM%`l8akjL8h&h}kt_CC;$K46eXhAbayrKnaB<!H
z=3@769U^TLD1vVSTZ1zZL87s+_`&VG@YUBL_3djW2E)wv-&nOhGdL~VoZ@7)IiKe{
zWd30gBGLyp$7-yN!y7?)#ORw_h@I6YD3^x5H}jJ1hXmqj{yuKtSX#SX_QUCRkgRSj
zkQ)gUzHdKzEp|${am3|0_t}U2xZbG-K#hnSS27)z+oY;DTB;v;m<vWezge9C0#vZ}
zc9E2itkYiXx2;_`h1;Q*|L+ZENV^1IL^(%@4Q*aD#&6&hOX@hd4iw@Ezu#-GdBDe^
zA1eIGYB|>Owyn=*qUUcsEfU-YDePRmVps0I++!7$S#gTF{FJ|urN+Uqd5*1(>l|?M
zwiLU8WccFiG3dvtk2K!wQW_nOk7}ZyFp_t_5muz0JB7Xq6rr9-*SXPA{`Z{&5qQVJ
znM=(+qn?%x54yP%Ny@lR3|fWv9bXj`k`eDMXIk(P3~ASIy{)mSXN+0Cg9Lj<52Z;A
zXscCV5^B0_CJ{sjS>CD`d-%A8i{s#?Q9%D=Fbxe?tCcVkwS{(uP#^t?#H%uw%n=8a
zngs#CzGv+dKXJZxrOra2Fg6Q+qQ(NAbE~LpLx@-gTC+^|6#{3g>58<qYL=dd%$(iw
z2aG*c=3-Ib2L|0*o7U3#T6e*J#Zu6Y#~(#s76WO$asT?2Wm|j>g#+LUIBfR}S6m)Q
zOB4f`%uH(lxtF&?7bE&Bu6qrL(9aD`TQ%{YOs|VoA4wF`I}Ce7XwrLT1m%NM)G=H*
zmm)ua*eQ+D7WLk{xN$#}YxwIb&G}D4oJE-pUO^XFeS1UaHx^y;eZZ5?T1pFL8x4&H
z&$n%gWWs7j8e!GbF27D)szF_!3#BnEA-{cuVsXVNXm=Qut`AgnFZp_N$~9R=BB8en
zA5u!jQv<27z6&*$%RjG+R!(2n9rBw`5r)-#0q#*b%R$ea87*qpFyG$k7#U;1o5dn~
zehH!wZmo*d(Mh}Ri9dwwsVZj%oF4m=R9o&{93XLxXIw`q#igFc4YvLNU8elC+I0;Y
zT_{C84MsG|-{|Izzr);Dyo??Y0U3RE^jECq0_1f>!m*tW2{^@I6aGB>qK3!1kr}Be
z@_(-(3@uLQ3l!WS&@mqyxk6Z5WB<}v;cx!IIVkCF;lCJkh_F)r=jfO64p(XZ^^WmQ
z6?Y@zDg`sHPrWEy+cf<=5Z02X3ZUO$0<+=yb>*5!+oaDiq9}8o_`b!4?1KsN<=$iH
z<wIxU#r}8^j3ZzTGE}-ge$(}CrsTh$4yZWD5N5Y+>1ffIK!D45>~ttIyEq(@66uZW
zoM%awMQ&uxRn#VUv|lWxgWd+nDn&TfFb+6*ydLXo!e$Fu;Zgxw<A0${*vY#07=w(~
zemX&psC>3#|55ZQMV+rOyZhugpMBx%b_faA@)lx4E+0@E?W0R6m3DKSa*E~pgoM)M
z)PeEqjUvZz_}7e+3G}t9N~MkWB;d@9v#&1RB?IVn5+N>j)?{TyCD9^zycJ`45I?on
zXy@nm9?AO47YgMvtDCPFqBwLl^57_q5(NP+ufoYqg^<tPtk*}}>N72Z2UKT%DzS|c
zk6q}r;Ou8~JOEG9<U2C!{?$RJd#!dpJJrNrQH6|6aH26ZH(V5!bm&}F+6?HOI_76j
zErLEIg7hp;h1$n$6UV-;1~i@YqJXsA-@fCh<5*3N4Q1*IgNiDnpv5Pq*tDA0eLBEq
zoV>b#)oK$lJmI{$JTmeG+j`WZXs-Rui-$()cu}Nt|3-a$qH1;^XxD*>%sO_Nh~@pC
zderUL9f%w5n?>+9^8Y;G5pf4vN3R9PpHknOMJN5X+LsY^J&Y(g79BW#B7YJxz<za9
z)leJ%gG0N~(_DM+1Vuxid4_Vp0m1j`zy+{pU+D9h>hn2Zqm__3__i~`n~L_bX9&xW
z&lJ*}b_=9$SDc|;NJ3;6lNXY-+D)r62D4ocBVQdQtJqZv)T)Uw)9QR%VOS)UvrDzh
zaH<C9PIn+RD^&gJuV1lg7fp~siU-`eUgmoMtAm^JE*Z9aW;wk>2O><PKJ(fKpo5P|
zj4?#qTaHXx`}CV2#gC~7eGuX?gr%B|mI2F|GPR-txVwW-BBaS`EEjrn>4ir~oNd4F
z{E(!Qe@i%V-pHoQ+W4kT`FM#VYHxS0JXwfh(INXWm*?q8EMV7JTo${jWshCwq+Fva
zcY+w)0HzG&pWI{4Zx$LNa%To{n=Kce3uA<fA_PrZ9S@*fv~x{LIT%Lmzi*;v({KI3
zOG=d@@d>?D)9u>L_o3ewp~Sh#h!;{Tq5S^#4v5Ua;uH7~*2$L=h`~F0&zsIqn>AXS
zXIVdZYh7ab4JY^B9SHf|I9D|9)cGWO9xlr^&yHwR7F_0V9%2sNS;d;zlh2Y(H;n6b
zOiv$;?~u?0i%CrQ4;Z4vYJX82Z}8)>oP^?^&IMjZncNqm`Wo1Iv8KIpJhtXpIS*Nt
zwfi02<?O#!@++sq1Fo###NW)35Wg7CmUs?lHM${OTNu<@8l-&Mio&r67qp+x<UI-O
z+=pCE)zk~kPWIijfAJt|oC;_WcL+ebQkW`nSurEtFHkXoUUqNfVZL{^C$oFQpuJ9K
zd3|XKX^UUT&rfs_2PJ{RD=hBq5b|Q57zE7pO_{877wx!%g>|qIkKD3hKcX63uk|RM
zAS&x+ZmVB4(CmVB(vSjhjoF1f!%RrwBj6)oAzCk)c)9s1$lD3UjYImom3wb9<->rZ
zc^_AHiZP9?zN2+WKkkqKuqEDa-K@H@^=129xJzDIes~mYJ+NdFPUWHq?^{Z!3;}q*
z+5LRc-O>AFHxlqi4XDCWU>pzMcZvTdc&<sa63<`v<3VCh-`@Vhgz$)<71^0*5{$tG
zS^UhyemRc4{hv}@OFvb-n+01g)zZJ!_2iidd8(cl6t!0p800z|yPijt?I?w*9MIFm
zOF;H|#P*e*!7D#_cW<u`D>g!prF9`Y{GWyb6IRZZhctl)Xk@TYye&XCQTl%dp_w28
z@1ZQ%{p?-UVsT@IYCXTmlgZ_W^pvXcCH;8|w#15lZ&4U;?fuEJU-$g>HI5MWl6W@7
ziR-Xb^q9vNK(;>+%gW^3d%ZUQRFx~#wL-W=`7}FSv{GYN_0b8GE+p~HCEI02^{32G
z%_Gn=D<j%s@aw#V`OZ&Aj}~R)fR9U+cw#mORbrOzj`mZZXxOgQA6o%M<j~vM{osfr
zbCR>9?Tqvu^diW^a{bs&6}`qH`-0nci;Cy8B+q#rllO>s-bmR~VU=mKs2{xdK244_
z-R~fll;1HBiu<&blkh0PcCoF7Xjk)aa(=Q=G|Q2Y;JB1_1N^Q^N8<u-|9SXR?A*#q
zPgADqU1!xy1VfAeO|yn#<Zf;h4ik&(o*(0Q3nt<^g@NPH(96Q%vB$<N)Ny~i4dVFO
z_+9TG@i{%2MxC74P#<NI&2Wr$qz*K1T!D3@f<TM`LZGzlTx+_+qkEG5hx3wilb^{n
z717D<7rUu`4c&NCBBXxK-z$_t?lvtG#<l&F$h5B?vg4|Pas+pL#Z*+;+FbMUapFR5
zD(+(|*I^`*=_edrf7MtQ+xs|Q#7wY0Ok>muxmQnrkR=7)3A8aED57vqa3t}<KQLH%
zJV|HVL~wa;>CsxX`p)|$5#{**o%ZU+^CEf@!i#zh%r$Wr!=q^-ZJvEugLoAtfvK<j
zHYpmvSG4;tAho+7n{p-zV1ELsU0RiBRQXn?aE9U=BNbIFI!&PxHLlbrP!keM|Gwl8
zY>AM7vS#m8%-RTjQKo$7zNCoue6q2h9OwCjx}rn@F98Ns+>dPSeNd#2?;1U7WMzrY
z6`80&=5A0)n~$=HF7d&wpd4iDo+qcc0&I}6$nzN%DUYeEfz;q}^w<A<K(+Gkj)voU
z8{DY+vFi;UegTQwUA#CD@&+&}F12Nch?uGLU;yR!1G}rcKkSOZ?y$c5J=`r43QnAD
z&s5R~{r0|1jPOXieN?}s9WS`wYX~~}CMT%_IKj|pAIMPwxFoRK@4&V1Oquu+`H0W1
z?4HUa-Jr#G)RU5^(u8X895m^Nn~hB(Vo(x^kXM?0?+97#T;yVrerHopF4e)S=Fq{&
z(_N~?|C>mY8gP0H-0E<H1shYw|8yZ=+FkoT!iP+7VP8sxjVBA$2+I%sbHXKnZleWL
zJ1@)>%hWtza_|2Kmz-ke$KB-&h4*c8!BVX!vajWF9E0F)sE!UI#K-(DM4si8E$%HI
zNo8K34=a;tEw3MOifthrz+pBfQ=vKh9!>F+Z0DWpf3o_L_PS?K&<*+=lLK)}Nxc1R
zbv@>7t)9}lcdPik=Uf{OBB4R6O57F_lS>D1t}W|9{+(-!0^{J-*Y>4`F8)T6$Ipxd
z9J);-^a-7hrr1|+(s3L9BPtyA(I84xczQII@b+fuz@8N=vyt^zz%L4_n@SnL!(`n|
zyVV&hms*=4*clcX=xV>Y{#F$BU;mB(9*MANjJDr|(P^~$uVaDEb$B=Za6?UHN{S*f
z@HzZr2or{o|I-wJJWCyE;fLd1i7pu1;3-v<3Dvz>2*c7+4#h=%vwhJl)J;C?zepFJ
zK88sMAo2GYX(=*%q-g(lctIdO*@;g?6Cs_XvHY7$X(mrg=f>^=MBH3Mp78IDivNQE
zt88Jyp0CD&I&Cu8-GCix9m)ebUrs}RHjE>CzTNqP<@c($a%X^XwZko`X<lZiDdH=3
zH-*RFIgm80*7(EcIPb0#l?7J;O5yph>LL|+;-+oW?@YEZ;Q_m;X>y~$0BU4{v5@`_
zEh|4DIUDE_mTm7<Bnio(B_YlUba8k1H;=V6yEvQBzG_!*XFA|4iN?NZxq%MexU`4*
z6dzAc>=z4j-)eJarkj9UnbT@KS$liu*D$K+P%dAO2)(p~uqs^&Yg6xweu1tbd2PQ5
z2L`WD!b0Hz{!s6rP_OWNOnzG(v{yM7FXuSsR?W;|gPgI0+^7|mI3Ja;oIW%>9Xm6v
zeX#Nnt;}{JUe3Y^3-~H)o-eaMEH)K|!*elY_f5-M$QvN3AvY1;2!MAnln3~+BXI)h
zO3ogiir~V~L(X=<t6KUH<=_R-3Fy5^XwsruXj{1b76;v?yUsfg9yEANZJ|Ey0<@(c
zbx&B?$y9lJD}k>$Y5ODaCf29<Je(ofbd(0T(iB>e7+5-G)Z2XK6v3rkIvLvTJ~Ro<
zLQzkgvD7C@k1_)&`@-jm69JZtxcNv<9(b|Avek%h41v0aHL}0l_1_`4-+;?;6h}n-
z-Ktb&h;+biVglun&Eds7l@D~u!|n4*8)8m$Fa{P0P503qp0Mcvs?aNRYs9WVegH?9
zzF!Mg0Vq*}CCg#}-hwTE)ucQ8L^FpRSGw5ME8;28eMw!BPZrq}W9z)^1@778Sh3P+
z1sY1w#^1sSQpA%MMr-D7&Tg;47f}}Xp<ehib=BeKp~S%c!akGmMjR{i(6m;fj&?*B
zWvFV3*b1-bG>Ejj4pTRom{BUzP&Ye#FeEk7<$)kL3F#IE^-m=ta>G7nG?J+et6q*e
zd_3H|(f#B?wahnwm~m8(GQ8>2WLxN~m82FXuIc`xGx87MnRSj26pD6Vb*NHQ0N%NS
zv9c@7zWKIf3e=sTj9!l`0NXhMNP8-&h@kS>K9<W*UWYFyJxfikw8|w7GbnrTZh+nv
z5B=9++NCNLmzu_m%K1L}d2Au4MwS<6x3<+7w~2<sf-WOzZN|YEjat@PAx&`eP~4Tj
z2g3Sj`L#TREumS4mGMs>TUq$?p3}dWtpf7uUu)!n1&j;EF&HTT9=Ma}UtW1QtS2hp
zpqsOH3oi=P7s>Ba1&HJlloDK?{J!n+@8svQ#jbE$J|+l7P_(FDQBr&g@z-<I6NqrT
zz+|ZMli_sMN|enS2BZK8^QFNo9qRnYI-!!ANDQx6V`zZ=*M$9W!^P=HgdqW|1(OIz
zU;B^)Cg86Vww{-J)2IV*)JdV^m$5B;4HzztctiS3bf#w%?@lT>wheK5UiP;1ilG0i
z!wP3bXz-aX>AA#8nStP>h??@qivL;JlM<Qjda1!l?eP3or`^Xr_p)p7<CN_C9g1`v
z=j@t51y10(op0Jvn*J3ag6a6;>buEC^F@L(Xfib;@Bh_1O}x6>httw27i$CdsVLDV
z4JvqUwAyQz`?)-kD*322sT#@NFW%srqcyKwEBfxu=6!)FW9*so1G(|SF81SIhgvQ(
zGtuhBu2K3C=XI&t4?2+KPe}VTN^nWP!H=)v9I>IiaSHTGOK?aNf83v}FSX74wmP!c
z0FI!VV=jH#bu@B?0)g87i@<0pAznmQy<Bv<qN`Y}zGc<|dY5d-9XIOqIdH;VP5d{y
zhKpoF{QbG!Awq~{hxkqu{HCsRx-ts__BBslhu^%aK6b*~dtAQHc9)%=?w2mfIj&d(
zF!8=#;W@p5(X^TtI+{?z|10aN#lO3(;knR>k#+3if)n}_E2Xel5j6h%@v~=$FK-h>
zmAhb+_uh4ak5tgv?+l}qhw*=U`t<&wMMj}!I;W@{Hh0X?m0a|;jK$6`$8Yp-w+pqc
zP}e&+wZ-FLl`GJqM9S-*l**>Ly7STxbQ|K&WnV3FFD?Jp@ZybJI%jfeLQN^#$DcqK
z$;J5;!Yd9Vky}CeG1eA-OyV&nI4(u1+MAe>qC~Os30+q4CwE2Hy<tXUWiqztS8rVN
zc)WUE9WK<@loI{20JPq}<2eecA(~IOAp4`$f4En`@1P;y*5@Y%SoVY{Y~%qY)^g$s
zgQau7(YSFXez&_vO0C!g;a=R&3t>ZgMgrlX@owu&3-QR7ZwrxEiA2Hc#ciB{&V#K}
z;Lpz%@Yd<d_M=q<*k3NQSW-Q}4^;H$^yK6uXqHhJ?y2_M+cYW|tsi~B`+l2OdWt-m
zPPVs<zTE@-nzGDhraTNLTJ^d5^>54Z(3N@Cid|P~qfXzjQEQyz5kEh_zCS<XS3d56
zxC>L4I9$90`@hO|1i*0~{k*~yihSEH=+bc_U-GIdl1%0u!f#9UD6I`zJt@<asXt!X
zOuHZ7@An+m6Hk@u>T5Q9>3JAVVHH-+6+ub_c*#~ZA7DWyc8;NbU!#(np@+WLNdyTB
z6~^|EY+d2kq-zep)z0S^_WTa2LxC49$)!474J^-l<HD(xpAFYZV!pkJ$(LAP^}f1$
zi$fuX+G;${qTPKrE#>YJTZ>LX-q<~)VpQlr^_o2!S0zs@vW4Dgp383OMNXA5`)@V%
zrw|{*_^kIxv)1E%#y6yMF3gb66!#Z<8W194E*ka-`aSBPe2Y4|+IoesFxiB%MTeES
zw{>=ZMEVn{wVM-v8M(O@ps#I03wQeieG5F?h_4Q2jG7Z#A=F}?h)Vh%(v|64svjS^
zEXOSp0kvc+X{ihSlj%~oSgCRIuWBmDheac#TH9ls>jvY*37ezsVzzCSm*H;_6hQoY
zPkd-Mw;%o4nEMYfMr5DXa(R6W(tn$o_x<V~6U3xJEIa^r5@hn)mVz<x6T%NHA`cqE
z3|HocZ@ru-1U=O{hQw6!4v8mnLp9!Fi-TivJh3QwsZ{A?KP1!LC)3%g4NoFm@JP=v
zMAuoYyB8~69`pSExxr>gA4hev)QDSc=vSm!KX|Y_KW|co&R66yL?ytmLdj<LK9xoF
zb)J~t&eC}b9x?h<SpciM4Y=2Y(oJQoGZDut?*+b&W*)BgyX-e&)*n?h0mDx<AoraC
zP2OEL>7jPxw%hioc8v>sUG(}%zn~InFrF;NX8P$lV`lY6P}~G@n+|)${U{^=j!Ul@
z^OsqF5MiU=I(H3@6Eisx6f-HB_ho+_X|?5xq;_4|q;uQX?U0uAu=?%G0MGLb@CW~{
z2ihhVX@5qcpsnA&kIoylYF_WM8V-W#nMCG}%^<(;%gKDI>3Wlx)da+?R7h)#8-4v(
zcV1^_HD6x)l@MaZ!x@~mC6`$|XoS*LORNY17Z1Y=x<0gy6p63k|FP3|hw<;R|48`s
zic|VSb|o8ynBIdJn^A(`EMwGV0o{tjwfchoM+XJv^PPddx<`Evkh9%h(DU#HWUoqi
zr*ufpBSB5eUyCs06NR{sd`?B9{Th~`aKp4Q%CCg9K!j%}@SmTAz@qOGG5Y;Kz-Q7P
zD0<;ScFyl=0-_qMfAnW}LLQv?Zl5e>Nam8O_u}n0rh(;4;yUx&zz2MKR6v|$e|lnE
zoTmpHRD4kPP|o0z@^!&U#^itQteQ{_2!xqzr<=C9F|~d}A1S;IHq`;SR9vtnaWs1y
zmh^VQZ(Ss_Oa5G{4z0{{x|<kF!=S5zEepvI0$M{2FNex?zb0qBpY~w}RwA~KsG0*l
zKha?@&<0KL;2@aycC|&E&URaRiFKl9GU~Q>j1*Gm`iH_$Jme(OX5}}1^;$<+f=7?P
z&-u|fImN9&RYJ)5eP-*e()}%6(D}uY2uSr&h~)2r`l85vv+@nnT&WhRxh&S)_$?GE
zu>yCK+dqeeO5@Ssp66#bU9&N0<H=E0hm{{VV&f=;<#_dP!uCdzk(@U`eS+s*bnrln
z=i|`jl=)WBQ&$H3fp#<s^UP+g01fa<<BZk<15jTM3q~$9CyOdrb@)H(J&eb(z{V)f
z4tLN_)`LC;B)Hh>;6B3LXPsXm&hXP~W5qlX;rq(QdKym6wIaZ-kIbg1AYMi{mctwP
zj%r{JCk*GB$s?YFjaIjp$0|qA)%yKO(}(tR*fseaQ4l}1h;OA|4JZIkbwe#iXCPl5
zST1@0Jh<&M+n{vDgu*Nl!pTJAl=~V=xkf9wU7jfFb$Sv-^@eOB8}!13K!8p*Ar9Eu
zTwwRp6%}rE>Rk1XAyi^mbLxZt-bjqcXiyG(_#Qzp=%pgaN8)*c+?YIhG5W9I+OKip
zv$J#axhh>k`pBC!CGC{fOR0NOc<;cdfR~xL*+5JgA%A<qic?BcA@m{UXptjbJWnWb
znSR~gQuN|-Gh#j#@9j)YU|4tdE$RDE6=n&9m*Hk1<owSvKQpnDxP4qHmKu8;6m}bL
zzU|tVitQWfYejbjH<VW{Z1}G4yf7Pl=v#zM=8DSR+g<lJuB+HBm;ZE2X0rA)-u;Vp
zuH<{bae?Ie?NM<E*FhZ`W*0Fnz75{0vm9a{%M~)Z!XVOAaNg*Qb=9QMr2bq@@vAwR
z*+nvrl<MsA^qo&k%x%nY61+@2ntX41q%rGgv1u|1$7eur;<PjJOg?+^ja;^l0dX!H
zEcV-BO(E8C^d+4OkLZ(Py2LJna*klh1<pl4(B9uVX4T5t9-)v!{S?AsG3<LmsV>l;
zw=RX!!&$6o{rth(uqyp><Lcmp{d68j5wobS%5KG9315w`ZHDA?;nl{CQ`+Z%%8{>U
zXg#0UVtq`;fWP?euZ5kyp5bq2@0&S{wze++`<Pyw?;0ENtI$3_e)20rThb&XVSbvQ
z2Nge3w9+~joKATeMz0T-RTs5sP&ayBOb5MT%3w;K^>e}Dkla1;pv|)$PsLCmQj|K;
zsrx(oLJ2{X14nVAw)Lb(Y&!3qvH0&b<w6ctxx(-k_iHjwh#1Y26@&WY7!u4~b|)eM
zVTGv*+NZH@Ie3CX0-t=}5<3ZMEZ5{NZI&O8C=WV4S}sBjm>PWa58O>aOo_%g*f(&?
z)5rE?juTB5WVg2>+=XKyU7DWA^z5kxBfdswN4PIo$aI!;75~del8(EIKQH+ZqA%=F
z{d0pWtB0M<_nP__`wQ^WQYr4U^0j?M?A@Rrldu?*V(wdZMyhV0jA3rO!B(wMdYW##
z&<rhXv)!OHpj5=io2l)Vlm?MnmPVLmXCS^vSqye_^iKKW>HRv^U%8mO6*a=H<bu=f
zZRC3U$b|z4-|Ha}kw>gCkl*tMl-@+D+t1(>^5GwXJcIF6af56InzbXB!|Y*@5ds)5
zIbTJRyDxtFdY#L6y=q8UpotNC5^dG=4%1F4db4QIxny>wjO0RP#^)k=8Dl1rAIdZq
zh9H9Uv}5SH-wQV)c0%GPj_8R)YC489G}z4ngYpqUfhD~9fG+eML?&M*Xr;jtO{;pX
zw3n8ff`*Bd?2tn_DTatW-&i9%cq6REoT_BP;4{;fYk>%RJlUM;2mi+`hQGh-_c=^g
zPJ9FoeLfn#Pr9^NTN7&LZ^7u}Aa2cl8{}vtVWiESBw)EG;y}!gIZO}+G?bWsc{Xw-
zu=~buS7}gBwJ!r6I4HAwj)@}21Hhsk)>@lGNk0Poku#A1B4B+y0e@8LRJnG@CpU0f
zf!w(g=8@U&rcf-o8~mZEyI+Kktt3h+9Y2ClE<|x461~V64KfdMz-eT1di(J-sueUI
za^IOu%;iSJT;^}3=&EgseI5S%xjP1N5Ao79g_y&5ASu~g#{0Yt=0GRRdAUCsR`BST
z_2AF2xa_rw$EcK3Aw*&s+3qjSp2UIM=3!TYIXdd<`unQ=x*~iF^aJtocku(oftXVa
zx)(%^81?V|M;|wH^Aca1O`XwNZp=wws2J%kt#85j9AS~uKW-+~uVn5z!@hZ-{Z`zs
z7@xLPaeGk4=Yy2zDOnKJG{@u+h>6BIn?lHr!eUrC*K6c0sO8U2ULE~ZxuLep>>#!Q
z=!-!!KIH!)?JWbc?6$R0X{5Uw6{HdAmQoQZ>29UF8w6<(rKP)(?(UXu>F(|`AKrI;
zXYFt8wfAuy{|V1?bI&oy9C3|nj9D6YxNcO?<R3=PYI@>`83Sqxk0^b5(AtA^H<IVS
zVDnZe;*1#fcM8fIrihJ**TiF@ljCxdRP1eRKT|NvU`@4g&)i5~sBw?oqxw?u?wWA=
z>`le?bcospt+{G7Ba{0l`R_=pL#Zm%qZm*|PCiE~kEzSWo(a;JATz?P8N|XfF^+|F
zNfC|ttL+y~8#lQ3$n-c`EpPt(zJ0K|jbE;=iSun8Z{U3cb8ZZeX2<s{qnRb*o`bbr
zwPgj=#9rcP&LRz6mO(-3mCFsm5yQNAp*C8LtsC*g-tL37-%$J!&rXYo!%nup;s+w2
zICM6PbdH*Eh@WgMy)t;u#hz_;c3eY{^JXsGb$PtenA8b-NQ>}Aav@?bC(imzX6A2Y
ziQt&9+od|!n~jvEwe_RSxRm&;Q(_d%b*VR4_nZ5`B@k?L7%zI|+#znNrWuQ!?2Ka`
ziV6DMJ@FVs2(eW1f$eJ4IN~zuzQNB8_#Kx+9NJ%RQDeWEarI)hz1`_{NDbX8?H<HL
ztdj-!TVpwejh{UDIq+lde?UD`H^K8X+10{#z8(9*qWXINq``0wFQL)#@e#k+`=iW4
zFq9jFosyA_oofOfU3OA%YpbsJi8dSOW+(e2aD_jvh3@ux-&EwO$I30SZy8%gXffj4
z!=_t^7arH%GI~Ak>)j2s;PNJ5#Ue{IQm_;rh}0o)YE9oEesM?gtRVz;4?F93TYx-9
z+9BmnL}s4xTt9OSb;^cQ<RkGeF`KL&V=h^U5iEs{ZVUOsX2gs`c^MSWiP8P$&aCe{
z8+`&XS85eOc8B9H0WHFXgeSeR$bDeE*c)Da<kyYWv-W>`XuGx`e0)ZAqEv<B4)}d!
z)%f5+bQq$T=$Y`vQdaEDFD9Z{A1q}DB4IGPo5NPtg_nnnga)tm-4Y(WFdWqRp*)Mp
zJe8J@L#%P_xb%3YfxPYhiOD05g2pj*ZO!pg+jdnHk~4Z4)8{PA7V1pOsi|8F91XGK
zRs2!jBOL~(NxjFpw^S6QL*0;%Qx}znk{qKK1~$W%zd<W|g7BPejPptF7YqE>16FK>
zq^~FeJ#XfV$JEpZzxyD>#X(P3W{y$%EF(u3%5(~&{iLSh4wo9(iIo*P(J41yOr3`*
zKZ3gbw55EZ;E(r?6Cc>oUZ^b&i<unjXVmbuIdoEHl6k#cEX+y-Jk|-5=ii4s`f~%@
z1c60RCA1NY9!O#;%vezfI)yn_b#hwv=~GO{o7l+v(oC&S9?s#Jrud9P5XM=PWT-($
zatdL};)P{)?cR+Bn&woYg1lX+|IF_Qg2~F-?gkCX>#T)y9X=s_ZRq37t4oH}Q2iN*
zlk0kLa*Wl!X9g&J{%6!UXwx*z@Usmz(z^ja5I++-V8u;~Ieop}nL-u~AQDsGk@}R2
zxDK{{QOMKl@}6Au*0QFKiy-C=v4&=0FXkEyH6npSUr%IB?fG6%1fTBZ^%@!>(Zw@w
z)#<s~OjX^R6gfZKRYdtS!ku@Tv@Z)q;1~3QhQ)4<6OHQ%U70E!B!lm0_O+v^i>{2m
zI)rt8A)^+e5jxr%6>O(9yjmo?H|_lp`-ZBH^8Vc9h_7x&d(=in)0yAn4tld)3geDF
zl4f?vL_b0<ICVqmdi70xoeRIP_r=}Ox8}-istasEcRmG8_-$|9tGS8q_UDa!hwO<f
zCgP#cPf%fIG@ZQZL|(2v13rTEF08#`<csVsj7?=t^{$lwT#L7-)<Z&ieEy7qM5AJu
z8H(HaI!!`X-|6stp>cn~+Slw-g`s>yqWHvpbz(nC%Z#m3y&<|A4P;>2tV&VGtzn*g
zM&YEl9)ZM~AwD@?Q<9e|hlK<`<~#6S$Mcj=O*9^EJFdjMiK(@GY;T4~t(PIWZ8CDy
z(k+jv%<ZmSTV&9|_NrH4vr;mY_Cz#T^~d`Y#;emybq{_Mfhf)mKGzEZ+4k)2qnVCZ
zOZ%bKw<eQi1&Ef39F@xb(bTOLGsUw?gqLQjN9DR;VDFw9sw?iVcuLZhc1kC-d^cpj
zdEH3#)&6el^!^Xe<$P=G-f>K}^fjFj!;Vh2tfAs{pEq$X5m&GD%ij@7?WSz_f5GQ0
zEE<+XrNfmDzMuct3&W$OHuy{0#>=TXRDI29H6mjSHEOl@Xj|>m$#pLZlJ5x3^l1#2
zm2Q0f6br5WT#*f$Jbp-0Km(zL)rh$2q13CpSV)$!U8?92q-FMf?MRJdsXZW#m~rSA
z&ymeu!HmQ0t;4vShPpTuk_^R5<SvUJmsA5IBLRco$K!5n?oMiN*Pw2Bna>q8iA!*4
z?2fLybMEX-oVv~z$QL{=@|d4y4_@b&OXo*J<0L<VV?fsLGUWMI*cfHwQv-D+{%XpC
zvPiJog5pH_-g`ExPLruIL<7xmZQ<_F^Q2&NKg^Y(=)UpB;^3Xlt!(3npkW=q04F2H
z<b;;cU=Yj*rzxEah2Z@xw%h*Ev$GTX&39*R@b*dXkm1}5J**|J$`PJnW5*0uU(KN8
zg%yy-L^F}-2;?{LcxTVev?-08VNv%^W=MvF<lS(#MBHRBYe@xnJ%QGrY5yFr|0WV%
z)<hW<jus;hmLTT-et76UZu5Q+bvA8*&`#1L=!(+)_HyyE#7cW!_1bt=*rZ_BH_MsR
zV&=1y+AZ4oJ6rNSleTXME83s5E^2<Jw;Dj!53!&!6t2jiGgt=JU}3Rqp0UCH1N=v1
z9D08`+}<F}GK6c@0m4OTq0n#kBEdKopWa3=5W-iVmVNN;rN!8R21crRp1}N|680V3
znn&KN!gt_-5TB6#=(-=~ap%}yf8iZsndw6NpnZ=;u`SlZ3$o#7XJIP$U;H~Kv>az?
zwi~fp#_?KAweQCACb-<r_y#npd|Tj-b1+?3Xa%g6+i<D5p2%rMYwyW)$ui8shu~=4
z<Kk2Mogk0bI`@}9PhU&ovxCQ`8T7qD`VPpLDj9^KsPW6WRYD`Bd3jg4?8_kuJT~v=
zG?>=$nPRj!i6TuV1eUh>!%}7Ic{axC(+-VY--Cn>1`2)+6<t@xRjlmpvsmji%w4dT
zQ?zH=r46e6&=q!IJM@#L2?ft8<(LQMd2m1UUN8t@6b%<0X$e!MSJTXdF@g?z-UNMA
zAyY-tXXRK%57K~wx^*u|CQ+w?wSU@T@zv`R@g9o;B7QF!>L&MN85`P3j0d^>y(hj^
zLNTa)`}p`?Jofu0crxx8rf!{a*=nV6MKAIuELy@b^~P>8jx(wK1CZY|C?aLCIiC`H
zo7J9W7s+r_Hhi6G)Uw&rLJNz`8cKCjI{dyOTVgb$dWu^#U1QOntpwv2(s2hPQKrJ>
z;+nJv?<XP=3aCw*xn{MTMdGtnR<^4bkUb=a2JT>QxvPl}<~ZdVw`ZIXxp;X&*>~_c
zL~Xz){*MObKh`%skxq^$!SRuWbzW8<29CiA22CL4VT~9#+Ko<#OEx3_=L?Xh8$gev
z_4NubnAO$Qxp_M`0{<3!-}B|;aN1JmdD6xC8L6X_%QnYEgA{Vvr+MXbb%Ai<T@Vih
zV6H7En{-wPlVNdAD${ycuTD$##Z_WF4Z;-<$^GtKS1uwE(w<u$FZ0t8^BozdoKoZZ
zX6Xi-Ho?lr`xo!-SGSeQ-wCqZAFoT}Fv`P`3%IszEW*g<sDGNfa)spe=s*ob&aHyK
zcwJ@<CN58(#v8A+kLJj!?mqf~!THVY`i!(a5T|UKL)oeg`}a285~<A|>t9FdA2RVe
zc*bI|`}m#8KIX<;;Fnt!ua2Kffk}<7&5y(6U&pXO{WR(~ZD%Yo{!5IW22f}5YG;db
z|14F}Cr~B`Ypb5Cis*eVWOF_nRJM#Xgg+bXm$d*DmNZByU-sD9VcXO1bUU~6hQ<+&
zZo>G{CDry+27khjt(*{#`#Vx6<mhJUq@-;128KXfM&J2c|7?RRFDLFakxBtB%MDs%
z#iC$J^ZE~jcOqcn<PQrkS%K>qa&w*J`RAAU$8KYg!SNLec&>k!fSNCNRgp^;TKfQ{
z8Akt)-~V5V0YU_=rfIKBZ9*MQL6#zqF7YbqrlYZKN@57sy3!RT#_0Y`JZ!GUCd_#@
zUDnM9bIr}w)$+s_p-}5yDcJpv<T2JW(Zd$Fh^IE<x4Ecf3s`B><os)1=ekc$z=2Dx
zLiE(CawN<eNR$BgwV{ZMYZdE%Mmp^so&{O64@fDOHmszdT(LnNt@rwzZ2lq|Ex2Df
zjLhO<5?`ruxQ9Ag8StvBwxP1mSH2QMA?xLUp!Mhbf}%fH-b6ed(K05zeYMV{-V$qr
zAAT_?nk|=;e@9j4bd8qPE})K^Hgtb+2t&B@E5$O!^)-fIqA<6Ow7yHPlFf%8C8k9B
z3X38#kLxp3vA0UXNqeNSrK$!bJk}(;wKqtu#0YEn%xaI%AInGZsmOt;@jbJdTuI<u
zq&=KEn9e5G4FLgD(*LSh|MlGcL*4$%PcIlT3So||%PzM<2dZ55p%O?;Ql!HM-ipGv
zX{grZc3wf55sL1Qcn~mYR&Plb%2mH0;2!O#P-m8SYcW$o^WHJ>1+7+z>8G3TtT4~s
zN1!IL{$m!vj{s<o^^Szi`;Dk|x{c(P_0r7X)`Q_?E9u~dLa7Rl3If(P)bI4)h7EI)
zk_0`3YX|s$J6$C--@MknxZ@~@OOXNr{&9VMJ;*d+O{Z&GwHsWiBy7o7#<7RfB;<Py
z`_+QGM~tYALi3ehIMfu@`L7e6SQC3I6=`j+bt8aENGI*0Otz4K&t+yJxXKT|{t8tb
z6c(&(7ZiW|;A1)`=Mx3ZZ)3*5D@C`JeEj`O_4`bz9pl$0@AZx46C{9&%RZ>Mm!7tO
zEjf8b=>KcN{##N0t5)CO729iTRy1|=_Re(fXTs*U-T6oimAGh?f33z`TYW|7x$sjD
ze}^r-wPqDr!ATyRHSd~8Nn-VCchcwbPy9)o1PlW8tDJA2W%kFRbJICbgqjVHR(s`&
z+%0qH<8YYI`+by6OEt~;+7(Yjqu=DxS?Kl!n}#Ei&&`m7#Uh%CJyjya>&Srg;ADzz
zxMS{uLOeT+g!=_YkxJ?`MI~kHDrxO`YjdlFf^xm?lw5J8beNtl&P_c+X!gOar@)*{
zrJ|jRy3~l_V5jY{A>jv$xfZyopZWj?Rburxw61eH#?w%rNsbMQq%)yoVTQSC?@?@D
zA54<Xe@!`>t4a7Gp;4#TeuvkR;IJL>cxIeg>GZzxO{5@R;P6T39h+2eToOF7A|r>2
z_&^y>jK}R2>f3Mk<rckoeWGXivHjz%a5%}H23~3od&_Hc2!_ZCwzRtTvE_IyEEbGY
z$vM$pm&sQ8jQ{K>{^4W(#|^@;hBy-dv-z58Ya*L<1`*@?pPMTF%7i`!xM}N^)Qsg`
z%Ttt{5z@z4Z4;#51LO^Lzz=9uiyvi5lclZoKB|$A)S^xzMi@We6Z9S6pZmaVL*3Vl
zaTzFPV@qAXfK6SflygeoCZJnPoU2HeHLg|a&ITVwkmh|Nx!x}n)kkQz8^`K^nK=-X
z*0NLEzOfx}_bxk%o5PsW`;K!cHx`+v%&d^!<D?29H1R-m(c2^KV~V$NLr&8T6z0JG
zP<hx#HQSwq5>5QzXinT<LP5Caa!<sbvdX!ECK_A2cxM*FmJbZ76~88=U^)x{a01L^
zc&*HHJH4irLu%Qd$_EI}Av3+}IEX>eGw0;(q4g3B9Q7i{@Ld$<YmWy4ye@x_qFqz~
zh_Z@s;{TIK|Jjmz4L#M~ZK~_z_1^%SZoexAkZ{bWZ*da1E0i|lk^0nl7~~E6TKlSz
z!?|RscIGM+aWzVuN&RZ2MQh4(N<N)pY31><f1($+Yuuq{NX$$2LGn1?8;3&Oo?url
zDwMZTuXVy6INeS*sth$&X%wa|`Lu06ij!7{ZnbS7qZulom1%9()wG#jLj7ANHCuIl
z#*DUNZ#INvs#JI9i`Q!~FS*(IN*aWqr>)l_SLd%z>2P)E#beMn(#z8z29Dp=b7~Ao
zZS`#i-S~%Vu4D@bPz&fc<yQyGjKL32>y=KdoppsONq@DOinu4cMi^7+`1+MACCo9U
zJL2S{|IQWuvw;4K0ftzO3n_^6HaLFul10$zN*xlPyuqSrA!9|VO<;gqBNuQEzC}P^
zzAE5#JUE~v<8w@JnYOO?eT?<HX#n+z@(P_a1U0@Q^_2=jFd?gQ|H!@3kflTZTyeXp
zwmU%Tb<@vpuJVMCW48U5O}KcL7kJNyDkY3wTIK_B34Gd}Mg?&2aB2V>Pq{@-luM#O
z(3%;q$b13D8`wFUwJtw(?w@I|Q(P~2rI~yVYIB<E^3$DW-g7x^<>yMz(}sieh*!z}
z8=cBK&ad^V9~YA__ppmyPo25GF$BKR6OUosRMKvEozvrZzX;P2M&$i7Lo%+w9~lJ1
zz0gtOvFHKCb*79k$5CM_ubB<B1=7PFRZ9Phi2gS%Y@~<i97znHD9mx8#`W*ti)mfo
z*@*E5V>9c(P8(FYuEYc=ml*mW#r1ky>2~`4&>(6Hz(w#6C1XSEbJ!S1KtLlE+l^CT
z&9*?->eSh3%Tcbf&6sMs$$!55;6+ZsV~}x}(U~nQN_7q!VEpus&wgafrI3iD*^P`j
zyz<>xXH@ly%o@zb+%1Q*-;~o!y+&kz(U4%o#BzT)Lem#li#TJy*9^jpvN456jn#<j
z4j*UKIR|HbGUyfcMytBJ64~ja7-P%}3BaZ|y5IWMiM`FUn_!9$3qITY+ZrxFXTCb7
z#EptBFwmag*Tehz6r9pGZszfS?3}z`fmq8aRs_AI=?0XRW%C-4=j+`3nMkLTRrF{K
z4Cz=J%_cNK115oNny4&wc{H<{YRFq=rO5^ta_2KreT<kS4i|yU!8i+ywh2LsU7pjn
zMLimKUY7k|zZ62gER<+SmYHtlH$Fa{%y~nsUgrwO&r>O~?04$Mcz@E33}$XCaH8hV
zl%Xco)yd?j69$tB2z_VAkC`ainD_DLa$DmY&tJ%|cp7b{Sqcm0=8ZG2Z68J~(+pMU
zNq1pxots~?*EANr()G(|s++a{uKK>Xq@=l9q!xqU`K7#qB^k(lA3@y?xxV&WHHajP
zL2vRx_DTgQ$|D}mH-D^N!gLVzGBy1IyS9qB*{^EXHb%^eDX6KQugN2g@5zZ9L%t{g
z1;i-v$$v=~_Dl!93upo+bqVte#6A;B3&LWp2Fs}CuJy1aJ~6W_!wYa%s|CVZdBoQ7
zN{<&@>9f4wRpV9Q8nLvuKg2I?F4^z~5}{SZ-$U{Z_L2oBn{{83C9U{zv)MqeR`I-e
z=uooB&<)wNI1(Mr`BlsFd6*JL0^cQ%yPJSO_AQY;t@tRZ;RXfy0^>+Qaz0nzx9r5(
z25J+G5?ddhzl$1SSZyioJg2l?>8i2*J41|k`9^nV{--!+5;{mU4=9@;5oPE@O4m9L
z0dD`d6Zl^~;JE;Cu?W40#|RE)uU=x_-JRVM7iu*Il;Sh#4L0~xxgX<!I_l@@k$d5&
zcV|4P@?MvpB^9-I1V_TV=gE5U283`heWOPTJoZ74*MQ^gT8OaroeyH`gvBftmJEFJ
zOu2FBEO+T*+~nO$)}tE$^&EgZxfjs-0LOx?f5x^29aC|Cwt+p4!#w%b!3&&)3?&ao
z$3*c!{Wm2#W4i2DSG5lNvYBs5aZ~rF#&8EvN$jrqKeiF%;{t;F1F900eVHj9lf-3!
zx5lKN`f6)ikwM5*hc-(hEGgMp!^rjW3Rh1YMf~$mG~<S95B;VF{mU(5-}?rBo-{8#
z#z-;XKx$9-!ZcjaTT=98-x0C3tXw4k&GXgpI>3slEZPozJ=`+EseN;C1jng#j#A6a
zRFUw9Vg?B_1#CWPOeJR8H#Ik3CmV?u;=u$l+)nw3KaDtPb?I0<09}fe&Q;zOBo>>$
zGR61Qrw%WM*%E3UAAge1Xep29L<O~^7XL7^)@mo-I@i<b<U5f0B)?AaRxUGL1v+Zb
zKHYV2WK~yXrDGHgkI$spe7?Uhws9G>{$2$1&93OOSBE79gOD(<lkiuT2z+fB7jqAA
zWA8#__Q&(+NlcWKdO@uriQmI3S9itP!os30kPzGHc*Q$<f+hi<lgbrW;8PnaG(G;H
zSYM3C&2;i-4;ra>AHdH@`Pd8{Bj6O={S{QrlEhdVKYS)KZgX`a0W2~LYqx>)M{q5L
zLXMC7jB?pYE|w?y#dOX;5|qzMx~g^8xQnx0e*1HIVpKo`iXMfz#%>)uAdMj?@b$@C
z-&8TARQr&g*G%GCoQV*BLdYHGk_6TIp;%oYOy4Bv%FZ~|GUevuLPm5^Qys%Gh_`nH
zEnz#QfB2ne4R%Gbv&B`v#L&4Mi(z$f4+loXe%xX@5LK;Wc_|~0Zj_w!J;};FFTN_c
z+>jxbt%s`SO)9fmH9XrIL(7cA{-~=Ov0Azmn2gC=of=a-{0w9YpoHBjLBOZW@cxHD
zo_J;Sv2JJR=dbO7sTPCp>0UFhU$S=}xP9I_Jvi=^HeIM{Svh3Ek6EZPpqYh7SMs_)
zrN_T4f6kNzB$y15U?piCY%MdNsJ>O2qGL=$5OHSD+UtN#7~;?VbBhB1n%X=db^qQf
z2*E;99|7x?*W-jb^KqT;{OYs-FAfy17sCXh@!d)I?XjZ13^}hJ8L%2F-&2?rlAPX_
z5Ih&qh#M`&^>S}~Mkwxfsk#$HfU6l=MLx8-Jz=qAf=EV(AkRsDk<~D7E>dE*ZvN6_
z7DI!l>}-%OH#kz#M7_=$7v{=dVlHm%rk)HL)ZBF>DC%I>!nCSFrhgdy4!d~V;`&k3
zZ?%5Du46jDOorB9W73JWB;&u>uD^lKf4{hg4`4$KoSK=h6ZSP$eyKY!ygyvfwf7r*
z02gOOyX|x^sWI8SHM7d)p3)C(!-q(L9^Pc;)l3Idz>rJU-YtfpCSShli%u=!`x%El
zP!MOL%Wib;<`WGgV=UXnn*j(5tQTZsBm+J0cH6tS)iBu=O+|wUu_IDH7c{B~Hn=uN
zOD7$iE+d?Lk|q2>6piLh-ADJoY|DSQG|ImsC)hbimP(`Vz_w9&w>Rg)#Z%d|Od}mZ
z<@ADUJU3LoJ9261vm}@03KtphCzB<5I?K83uTP9xk}V#YfP+Yjfd<<mudPWI+8!UK
z*OtHQc)X_<!^d;D-0^Bb5qD9&Tqed;kXY)ET`vyHLl$k$tPa1n8hY!p&IB?k0M;<|
zWWmd?1)mY@3*dlcnKNdP=3yHTJiHF@VxnEnZm-dIc%0!l_xU>~$OZ2jOH(dnM_)&1
zCp}~B!R`0%T4JU7<47Hx70kaByK9k?rKlc}Nxd!@oX|zU(*%jd^BuNHN<BZ@aNfay
z2h-Ds?AzH?cUixR_2+-;5uCRgBt)wgT(tMS{4Jn73t}4Jnx6sJ?8uusOaAAN6xzT7
zZ$IDJ>F;$pWY;xC1bIY?1gOgm*)UB02k$84hyxLa+!HnUwbo^1|7%gOzZA5f=75eQ
zHZJ_<o1N^*4atS5B|`g}>bPA8fPtdL7=|N=3EL=ov?ut-_?Apl4dkF+Ut9ptU{0iK
z8iGdqY5-uTb+1IP_y5MG|Cd7#5toiI1fzT%LB+~Kj;D!eN)6eRa13p2fhVKYQvbo8
zv_UjV^X;^wlhd^*iQL}vheci}0Z{z@Z3)SrFWD2?3-ZYMjt)Ps%O(<nLSRf}D5wxw
zSjaI$Uz|t$2Tt(;F?kRoxwU_^S|(&yYQV0b&vp72r2Thh<$pG*zIKouxWd%Ge%KEk
z$o~$S^+x`a{Sbm2k~iARtE;=%@C=ip4_km}2p;J}m=OOTyqqWt_%8J%)cW27YfB0O
zv1X<<SNyRT1kN?-5zO)8evEY(#4`I5di_S~^C!gM_zwaTAukGih`psKlFu9J=z!<Y
z)SMTXM!AF7UhwRX;4MwCZvH&A0T5d`Y(9W6%F97YsfrMK`mpM4=w{p)=^u1r%2~P(
zoAjrvNAzvFMF`XGZ{m}PL2naYq=RS#RUnWD=IU!3!T(^VDXD?w>#DNJd(bTkU}V;N
z|34hqf7L`2BxPO}<{5K{%INj~(4Kqv2nGj4q2oJ43LxtJKLR%YnhW{jLd=$#sVR5_
zJu`eoBsgS3mdN19%`QFI?LRby6uOVWJMJ$pw>G)9Ilr;8fXM4Y3t|)0N}l}j>w(RK
z!iSidimnGY|66LA=&wc3Ll(U+5pxXy??2vRm4`)}nSu0rN~Etq9_$8UJ><B|>$OJx
zancBmi;rhH%&~xg0C<EyKGL}tkfJ9$*yu_>y6wLe{f}N!2ph6!^G?X3C1xl*AgT>E
z?<F|k?2rF(bpGgxO+*lXV&m&%Lc%@{Ic*dP5X1T&?TLfWe_&YO!a>rvl9ENl<CK%h
zQkBN%6dq0u?ze$Y-e6IJI+OeO87MtM*frlvC8OahDk|IyTY;4KAyPi4?z{aD?3-^s
zM9P3npdZFuY5vp;)GbqVL*NfEDKCD+D^b5$61|(28{<K>0<c0b5ziw~q&b}6VG#8?
zV1R@k0yVRof2=CWLS4u}p~<<e(|;4{+?5h+UXO0FIi4ImcE7ptTIr6YwAf3yBf8{W
zLHD^=rPvoBVCf@8ClhGHsGNWOgYNUaB1(sx(V&)ZbaZrMrE<1V0}J=Bn(K>h<vLgP
zw^6j--FgyN(+g_%^8jEQ9J>Ko6s3Dz)z%@H+{0qH^iuz4W#^WG4Y+=o5a$cTR!Wpn
z58P(_`9X&*f(TEMT<0!}V9{l-B?H_Bk2~MsVw8L?5loORUrNMNTk+}}tt?8^=XM%U
z9}xOJjjAxhTWJxpCgskLCUq^B=Y?!OU$eab%n4Gcl})><b^S<tad(UGtw0VzbACRC
zV;E919%YwoAj|4k^_)7!Tg)1iX7?EXW);o}-?a&D7onBU!E128hQGZuro2xPg2e&x
z2Q-=O-itps4HN_qI#^y_K96`T=zb%#o@frrz1dWyB_+a{!DnBH7?GGXYUsq{?s1g|
z0H|ts!-mJIcZV5VHa<1_jqvzjV_462Z-@wB);|Zt-P6W}TjvfBhOsqJ7d%`$H`&(5
zY`AlsXC19<dslom@2mW);|VMF=l#L0nw0N%Cb{a2O3i(5Xrz-;vt}?7cs(8uw@E$H
zYO5sc>gFQYpDss7BNGU$DbLjvN+Qce0jm|oMGW)0EJrBP?k+5?a^5$H;mMC3xd{+o
zwNA4SV9?2(GiCU5IW&ER?5y?7gJX>%!kjb!>37>`tj*Zg>Gr5lJf2iIiw^XudMI>*
z{wmSCBz7%+BQEaZp2o^~z=xHcO!=BC>bD$(cX$7Br%}nKtAO9~;$!|yG49hK{N@!a
zYCF_Vvp@L<5^KNoEoFuX-@2qF+Sru$aj`TyPQ9&?jtTtmTwZ(TYPII{(i0j}mVys%
zZC}vEzZv;#aijfO=Sl{zJCO(`{@bgqCswT|?!|}y>e&9*WBDAwn64{b5e3+w+_uK}
zRw?)M{z7Bk?;}AyzisiWaltYX@zCZiyZEvEkUYFrCJmy~i&>EN+3a~EF-9|~pd@Au
zEFF|!gCqGAAUhKZhntc3?-O}^MvMj@8jm#dF}^;P3IvV*zpuj}R00$*elee(nOwcz
zN-{Xt9S@zHPrOf=HG<7W5fg{`cb=Pd`VozEVygC?YuDFqGKanS&N~qa3W<TiNHzpe
zaEIbHZn!Jc?nb)7p<Y*_RYU5Id^)D(i;T~_+*7_?<#A8>^{F)7)(tYiNMF*X?K;%F
z%vqF4r49YT6+kT^O`-DhNw#_l2^jrT)FX(uJ6(SMXm7qYtZ|3!%TKZJmv69qYHp6(
zikfbI;pVl!-dPCeHL^c#wEDqmeiuaD$^T75k4EBD-sW0uM-5HKMY&9CPbp!tL`Ia$
zs94fSJ!G#sEDXI+vo-*mMtbqqKde~VBI|57Oi*{D=i)T^6}to<mH>ZknSZG~zs8|>
z{|uExRNuz062=C%>rm*YJ$VKlUYGQ`*Qzn@>zN7-p=pJ$1d@edF%YG_F4xi~{4a~^
z&b~&bTvpc`8%tk8f{H)1SQv(o!yV0{NT}n!x^+shCIA&-YG&m)h}VXv^GQAuB`KO#
ziFALyQ6kSUWH`kPS;2I?u04j&jUy2Md2r(k!=|0fpwXLOXzi@SZZXcTA7IOQZMW%L
z1{Z7<Is-_FBRj)HO(x7QZdQ@;`VxZcoZLVE67;z9h7u9i=}dGBZ#KPsE^=iX!)unx
z6wVY~ZaRTW!zZ0$q@)B$R%F*`B;#6er=pe%1rD4(PSr>}*+TX1h%+-Y#I54eO_>F}
zC_Ozi-+QCmDJm1cknzW<X6{ysbf*?qN`|Q%<86(Deo>@x#-uQSU#3YkQeM!C`%h#F
zws+kg8@+#}idlx<wE~Jy5({3FB`$(TtNovy*q&YH))*}`gE9s)(n@a-=s?R}jZ?#)
z;HYxi=BU`2G$__=cJ<J^dg9Pk%YH&bcxN$R!Is$Qm?Nk*`zQj|=jv2w(fbm0E#8@`
zwLXLH4k?03iwk>7R7f-auHFWJb0kASy1kMPFtU1y$yTzjL3xA4xa-k}LS^whZ^7pn
zi?A({+U~o}^c$Qm4pltvt!hzXyI3kMV**x2e;RelP%J^hL}r_1#m9Xn!X~x0IVDzO
zSV0nnVzo>M2YexX)z;dJJI{0T@kpd&D4^yW+=8e+BT<=*H@49pJ(nq$<Hl{XH=lq1
zInH3RUbp(i7d&<(`#{U{Qhervtud1ujAo<TrkiZmd+p8K@(XHll$T~ZzNV=SMuVEV
zS38%EXE$(xxJ+L@-B)c-=fX9v3IOIiV}+U~+zhAbydQwdv#nbZPDRRl8pY|N*#K~w
z6>ya`7#F6@s+VeqjE}iA;0qc&b?=r|9jV2aqMMHlncn9Lm^F@MNQFoz)eSe5WD=FT
z-DVc(zPv=pesXr)cZsa~&7Sw0HEm$LuJ3vOjQ!$rmNa~dokFbO-61`oY`^_DQi5P=
zW?Ev>Yy9L*!fT~GlDS6x&qR=_ia6R{7~S`tT!T2Zz?JUNI|W)Tq^VN<=A4oBVwVLd
zS6oi6(Lz}<-`_4<Th7lzmC_8&zMFV8+N1$ad~r#6bKxAqs1!2m{e?(fDBk5&#Ul;4
zd;TidRi3TdvJZo3d$S)cVSL?HB)yze3jNa9fIgsWw0}I2`a!%=)YFMm9M@F9dv0~S
z2UB{g^f#BmH@eC7vJlyF|B}~)_4DicPgtGp1AyA9KQl}F=RS-g8-iYk;dGDl05W1!
zA;fSK3A>FJ-{J9hyiW-HEU83gmy0u5V_r>{2iLh8nF8aSCO-BS-mYwW6x%=ShY(T8
zKu^03Cfgdh@g)HIhqFKNsyEn6@lQY>9}Rfg5mzpyuM>_Is=!^|52WSoPX<JS_CQ|U
zFBG={Ff$558em@8g7vqXev@b_g&rJZQf_FcOXE<-s~zsY>0`Ebu}FQq9L8Rt@bm@q
zM57Jys^8AQfZ%rHu{5jo)dDS@IbwL^oqLg5!y~}?9(5%gDpF2sAR-iWDBRf+f220d
z#4Q!eiq5vqB*O_!GGWrFy3r}<4$AcnQ3Y~J!B=<S&WOJZZb*E^o@k?RD<-`n!_Gp3
zCg<CRwP(no<m|8plF_3DrLJQ<!31ow{L!6^lFwXDt14$?Oy{cAxZnNYdh39)!in+H
zWahEaz}0@a?ZE+SmHloAfPEHs4&6Yhao9}l-b>5t5>GcCbSMSh+TmR9<~Gui%Qw;e
zA5O*iT#6HnJ_hFj>^hDn^l>cFEp~!wb47uPBoEw7MHS`$>aPFg10WfK>@NxTPdn)2
za^jcmA!_%jD$9Nwzf#J@;{UEAe<2qnL))EB?=fz+;%>PCv$Ngck|e+7g-%$^Yo8o=
z>5iWMf<HBZa^#jr?jy!wabBW)b;3Apr)XoKtp$I+nhw_}`JKVfqXR|hxXfd=Q>tYN
z*920Q%Zu(GGmHl%M`WM%u0&kWW-9tK{f*sf2>Hir#@5T3@%tJlA$s|V9B$CH8gOQ&
znhZEx)26dEZV2q#)!FO3oCU9r^w+j03QiVa8bRG@vh8^(i^C$8es99#Ui|)F3d0p5
z=p@{WP@t0*TtMhB=i1Nc64j?%VVP;(a3%zQ51~SMxw$02@6R>1hqHodNu!Z2`8e=l
zWgu3AKG%H@P>p^#pZJiJxOaAZhwlwe%2#P5^pOY_P8Gz~O+q}3kH10cJKy4j1-z8Q
z2~_g6isnlk#4nyC8tzBxtqV@er}W>L0)LYkBzie5r(x72vayiYgd(Ux5VSvo8vaVR
z(dx{pTUrI6EaFz#%Z6+Nbj4T<Ze9m{_75iU8QbQd_R&zy*Q$Q~eaw5A+eW|rYxM}~
zxX0B_EYYd@z-*cG<6jx<BvzN86h<pwU7^~^#c~hQgq<l5#EG^q`yjb!OY01?+Ha=T
zxV<|4bUieifeEsYU*99p%d{)3iswcVj}x;7Q$YpQ*w&F-)op-eDx6-z9_RTtbdUA!
z3}Pvbag$GtKh#y1m%it1j1|BTjTO-c<!zQA#`R+Eua>#BBBj5JQ0G4z6uf)fw@`ck
zNWqx%!`LTIoI2-Iq73@67IaqV+h3P#;nZq)b89a-mxs^Gp-Ej%+5ur$rpVr|>U7U<
zqG%ym6x2qo3KOO<_>FA~vac>LHnF?3U_n*Okz_iDxO+Z%$V1wGpZ7~){S~$Sjxtw;
zMSKpGaiW%&6X8&_@GZQZ38-r^8E!8^Bf(~PX2`CIP%$u{hX4W?UyHC7KFqPOMGw&*
zLrN5mkl-i`=lNG~n#@7Ovb<*Y`YRXanW=_}tQ4|0KBMxZ5t=YrK%wd^Qm+kg9_Ux7
zuAdpFv`Q63-I_ob*+y97G@A>c)IB+5)@sZ>0>ng#xDU?{mBd{DV^O1@4L8POxQ+0~
zbmhxQaUsz8*N#n=7*qKX4z#NKkPEtRZ2gpsCc>VR*m!jxb*5&6v<FBA`8GlJTn=|%
z&26s@=qI#SCf~qwa)0E_fLrT#t8HppOe-;ORs6;v3me%P+V<26TL{LA%`;(zwWPdc
zIQQt(=C<cEp2Se2)v?y7y>agNF<*^@?|#}<uE@ZUM@V1X3$)KjD{Qpuqv?!HnhnA8
zOKZM<&YUy^I7`?_%EC<_J_@9_99f?O%%w#bt%VLiJFng;iv6+vQ&K?~6SL3rf>|1s
zf|us2v*KSxQm&(bHV0?{k3+2Q#-mD<XMb1A6$a!iZ)PejXk}8NR|co3cGQPxcU%vT
z6u8(gaht}0;6^X46}FZ@7Cf3OOUU&8RN?iUxNoUe;P5X}x>1>#az$;;nM)8cSiULS
z2iza!%1^`sPEIL*)47taNxynI?ZSJ#J3CXZH)T>+tyu#6vyI_uQX<a$qTR%+9Jn>o
zw|MPf(lkm`H_dcSL0omR$jllD8jz8q@{`S<Ox77b{*}pk)A2|PS2<>Jceg;3_$Uv%
zZ1_M5_Z-9>5`)o2{hN`qvSl*D5A>7#XUXJo=-tJ2v%>Ie1@<vM>AC=s_Ko=dhlT{;
zh=>n(<?#{-@*pJ1)!gy+yosU+Is+sy2O9>AOkhv`CcOEKk@xpexyctW(7@hQ*$ejZ
zQr-)|ZT%_awytQ*e_LFwc=?g_=n{(+x+bBl>1NLjVYpn$W6Te9RJV+eE7Jd?0pN6&
z$m<fFTwrNBB)%)2H>=rx;xF0>wedGvE@$mpBGkEG?*97PcOddw%Jhz-n!O|3j$#&?
z^Xu29MmaZC@$r3(y}_^w!^m=<71QXnD+en6@|EiI2{IW`ku|c~sn;yu>}d-jghxme
zpk1uS4CtaNN}2)}2Zw1$V>DN6Db21n(mfvvQJs9+ni}|JvJ4d>+W{?VpWiWinpSC+
zNiz~s^ix4FlKZQ&Q4{t8(syuCZ1=}G((lTL#Gk@E4;1DLcLi;6NNZ1JU1HhgpS?7d
zLHLY(6GBTxvA5_%L_d-5-<eZtT&-4An60!vLA!75m+`wwy#ZV#kK&L-OP-pdXZ9gS
z9c?&Oymf#dfyJm<mtD15Jriz?S*tqqiir`E+gcyDPx|YV5_J?pLyM6d1W-ZDPeicO
zzMHE(r<KnLMT$G$*+N=}4>jgJN)o2-(B8f3F9ueEScy^gm~q$PHT;^v@)a6EC_sTy
zwHq3(T8?r0LMVzr0L1f8nG#Y1#La<-PKMH%Ff%&Enfuc<DX%>PxQyU&><(M@<xxk_
z{4Ijsd4ou{%s3RFvM3%i-j0+=XhDbzt8b&5s$@l^@XB#wv>J>_#e-wNfIi!$-%PFX
z^zRfqVsQ{VAqeE2Pw)Q^=6NQ7Th5~bBIf5hrJKW&1jpukD0j`;@273JOU1B_Y>gM>
z7$@$Ap-2DrjpbADf}PTFp_f6?#C?&c=vx!=A+t>QAH6P<bgzLy=>*XLCTQ5h0d_m7
z(Q$cn3i<Vs5f$Kz%8y}>f}lL-FTk)oR}kc+UE0xj>&%+XfT%?=LvMj+nXjS2SXs6}
zNg8v0z~_Uv%ado{<MAwn__6<znC)OWf~t0d@}l=v2ja}@i11+nevtNiSu8XJEL#LU
z#}-dfj_{tQ3wJO-A%2M!U%4yOdylmm`BXX(+!M6CS-QR@?hi-xI*Cn!V~%HyEaBil
zRC2;ReDNBFmxIc9l(r#I6{)XscL+w}y<>8<B(<%**{X@gK(df17J&9_$;}{bCWkuP
zf1DyVSv-(Sk@GoP>MC5;nblkPFiiy=FJjDB90+luslRht75anzDHAa}LEz`?KDYU_
zN=W~%LVT@N<Ba<J>obwnw+1r6s_73ZspF1-G@u($7>DZjg%TPqRp822>ssKBbikYy
zTCLrQuKjVuzFwB9IxFpt1Tn|!y&tprNT0L*qOK6Zc0%+Qw5hm%$k&vfv!#&mTL6rE
zssNU{!*rm(AsAqYkS}OK4Np-c{5BZ(6q|@^{MFdo)nFz0qLA*9^`#9~^x3LYX7{Tb
z(I;wZD;S(oC;MZlAWd*B&@&hBcMh@IKGQ%UA4MOdi#}KAQ`f!&g9?^90^y58^i2+=
zU>oRuqacZ50Qg_z+{^Gk=k+7vdpVhLHhSC_iX-12E+YWU%h-CwqF`tL#`S!UKQJmM
zHFxr-IpMGLx1VI@{L#rlkOuQaItt}++sET(?(T!l-U*9v4h5t(V6M41NuSJEn~p*&
z6)gxwik}V_$n!?pZ2@|q1zNbUEf~de8r69Kl>YU1o~MA(Z*0vQWmx!kV0)IYQex`0
zX+g_U-f&g`2eAOzI=51|i+o6;v=8fC{GZk-iUS3i663Tg>uEnxes<sZnL~*FC(FOf
zJTdlQTNJbfXu}2oH>5-;ST%{!1W$|lOVLafE{uQ31HDdfBsY21)VEO5U0x_{ZFltb
zA+ZwkE6{2o<s5_57tipqJr?wPc%|9cxL&OQ1|UtGS)M!gN(jl3-=j;$N7$Vx_&V2p
zS3#FC(3o-%YJ%G&2txjCp&3(HyJs3Z=I1=MOl?gu=vnVdpp)6Qe){hMc8VKB0GU|m
z>A?^)Gg~ATi&y*wzamw`DA0fJTyU~p>WyaRvK@t?d7s!)X|XVrZzW>8ImDB{tD0@H
zUnkaUd4318Gvh%3LCsEczq6PMS(NUgpn5r#hAcyaf{+lfj0j)oCy_z&u(L8t@!ty5
zGeRg+{GOoy@P6bbR!%!Yjr6{#>FdAqT|!k5p2ht5IEN`<!3-ysYCkp{R6_w=WFH@L
zK>i2TBIH@f7IEKtq$hHh>_kv>f!{f~K=$__Ji0HkB6Ap=<|L)xSy?Qi{E%re)*$?h
zNy<oS-R^FKiyF@Yg05fSm9awe{`;C8Y=CFy7(z`$v1c$|ksuxab(QyuO!2>?i}-$m
z7@XD}#N%mMHxRBcsW*7LoRbNmMOq{YkiM8U5(3GXvDn2iC#=5q{P8HE>&3-md;3p1
zpvjnMY(efjWI6_5XNH6LCjCu+kzBccy8#a3E|BW=J>q7V-<abhQ9|8W*F8PL&nL{!
z;IWu+3eQwrB?sONvb_$c5cp}(jf14t_3R&u!AOLgufO*MmrP$)2fc}Wg6GDxsZbqV
zq`BNPwrw~O0Mcbhhn;=(p*JW(G#{UE*EwGzJ(qtbG28-&0YI;1UHC!4z=lAZ)Vcfl
z2IOlL`>t4iddQfb<lqeO75>hU_<JfaMJyM+RZgXP2h6i@yu0}<%u1|AoGuwj^fx^z
zMeX-WPU%)WT@dbb0$tSaW|qdki0W&qQw>Hs8m3tdI@I4KyugO=OhZjoTp2kNF^SH)
ztE4C|XFEF)I{Du(jyF00cC)SiU=(5O{ZI6$XWeEC)h_5@K#CB<A?I_8J(AZ{ckZet
zN86Kv*dE&h8g(dBoz(a5-}-k&P^;x}=gt>tH3nLE@rQWU;qzg8XcYxDmI7+^E5Hi2
z+eO~F4&gyN-&?$Cr@y${^}q0&CRy5dBhsk9bFy6gg`0r4FXhz6+80Y5@1a<tymo!Q
z51=n1{d#M1o7KM1Dl1(zbqTV@prxx$;8GQce;VE)TQ?;Sy##7^_tDYgj-jw9L2PHT
zB!V~Vaw5Ev0Ozec+SelgWXFP73)v0LqpedD6k>KL?lz;YOs4nnA>WgfK%VTsOvAUh
zy84-eQGF=W0Q->FoseyvLFl%oT&C_LrH`HW)*J1+Ot`TM6?AaWypplFtd4L%1=Wvg
zNuBpAf$Z??6G0KsS10u&vNr;sdh4a}j($X#W0>%*Gu7K~wD2f^f7foxS`21MCWW&I
zLz}AB5?Hml)MwbC&|QSkxVxR*hvZh%L7t6)3F1>~P{GNr_#vo8CK`s<Z^~PC{$kl3
zW*L_$;MhF&Y2Q<DLCC^-r*vZOT?(k-E;2{Zl)e14ZYY~3F5G<Mk(a8PR9xrBT(sKT
z-MH?YYx(G|8gQW#`CU>5u7hxTEUf#RPSSdBd93?jKnyPaDk7^dniC)R7u}!kW^4N=
z1>hb_Vx^+FCdsLZBs#bknUx}{!wC1ak@gHH+YxT+pevU4DtT#ZaGZZU^t*Y72fBXY
z2hDAkiOy8B-chS)g(q)MvKp_53<QVh51qfsd$~GcGOB(!om8(KeO2$VQu3=XvP;in
zqw8_k@~7xMCGzN-x+vwcr%pf9zu?km&c_K~hp)E_Z$CF-o4_X;V(d;Bp12oiM6jJ3
zQcVQL+F5^+31WINAx*va<ofVyw-)VR8{hzI5Ee4)5VVH%B@tc}v7T!j7jYl0Z1%@j
zZi!cT`gZk=bzVN$KW$A<51alO%QqXi;iSgzrDiUsnux~e^g#1Y?raY`@vy~^W$88!
z7CsK%V7#Gy^_@4kwM4HY;q%hct<s#S)3DP;@;t44Zn}Bm9fU@#)93r?;_^7l-2TbT
z>y4RGHg%%0k^a&X?bDim(CJI-Z2Ku}ykCO>SD}~3!J##ZwDw(;Bq08R+tXkw1?Cw1
z(BBpI#Wpj^)W|Vfd2Ku{)Z!xBnHlHc682rp3Y59Y91DsNgVhen0@G>QQAr(sJL%)!
zV1IawdaYlFPI;>CH^ytb8Dzp~LG&`kHTEk3uXXVrRb+Dug)`OQZd}ElXYDx|(ddRu
zD&n&+a)ZN`qGlv0N8P<ikIN(6xoecRGYuD1;~;!yrc5bYiMvJ{;y&~qnj^pT)Qr4j
zOD|V&YgTS!?mQTyRC7k=3F+T(+cvBLh=#k35=!Ang}lRTot=bIm}@wto2u0S|I}bm
z%g>!wi7?rpuBewXurZ~O0e@Ro+V>Ir<z~F6ZMEn7b_!th-rkRy6a}^g&VIm5OEYQ|
z1~rt%!a7$BUPXp?*PW!Fk#1@%Es9xU61zO>K##9w!R>Y?HT+tC>q3JI{%S546$H9#
zG)|fFK3Ype8rz2JHtF9HZ)x&Ajjv3RND|(%Smh48h37o~P%wuGVjm1n+&0V<Kij2J
zHSBK;ny_wH=<Qpl@v`Yc?hFaM?Q|}LF^!)TKOxdX%Jv7u(4XHbe&CeRJmLFzcx-v6
zyLx!lPpr;u11p<$hh%%(Vc5Eo8%8E59AG`BFr&l}$7o*HmopPK=YpO+XlpG#{w_A0
zPT|G7SQetF@!<jzSoA)(Gj#7<6}Z2SdJMg}5D~Zi*Xc7z!*{K-LFw+$eDAN!Hvt9P
ziW}aY9rQ2F#xOyG)dU&NCNZ1M<TI#X%pI`3^1Q@hhG%&Reo(1k&bI-^KSg)yR}7y{
zx@zX><H1B8GPI|GxlVWd6KvVDE!b0?j0l4<JbGk+2ay8*nS0-=X@baWQv!f($&*<T
zRAslSN=dF^(VUbHrW10U()YsJ*W>y!?!SwN!#N!Zr9tn5LuF{H#j_uWR33s8p`UYb
ze+57h^hDXq+%jCb<xH2nC=aa@rj~!^a<Vo3W>)mz{@g`HaV9EfnJKzA{A!Uuz8`+i
zfY7Nvtytt~o!faH^9JZDtMPJRD3>hEld7%A$MPZ0Qjm@=P!EC<kuV8Daqn@9Qi-%L
zh|6u}MZtq_j!foZZg5*?5&(6-zStL6+}bu6FL^&G=@c@*Ob%hvtRVV(CMtsMn2g#y
zgwndqk$OBvGm2EK^KjxZbRo_?34pGE-IV^2upj`EZ+owz-d+A1T1BoE@!^yD^@Il^
z<IUp(3-b%!OiZ0HeWP`>G@*<;cXFJxC=vl@k^$5$U66_xN8p{=<!hi4vfU8bX?pz7
z*A<OCG9WoIigji1*$1~2dZ8pt;CS7DOQp1D25u*-UC2R7(bh60@A{diJfc$miFD>G
zzs=oW*|OgH8=8BP`{txWsX3+HyPJb3plNikwEoAB+_#!d2YfDM5@F6l?k3@P?Krn)
zhgKU{h^Ul4)9<AYe>dv^baQcg$rGh#?YTOU0ZCxa!Do+?SKxNWtRLe{$6y@m2M1fl
zH2-d5hpqA4Oz~3Ha`&_gUMu|eAl#0+P3(eS!3etF3Y`ZS#V|IXsuPX-kUZX5reW@S
zw2{)<Ir_QM0NL=8XTEWUz@~G)T7{PcpE{stIB#pLuuxo>*Jckob5JvRy4dpU1As_9
zDjBD*ysEz#?or7KEm*94uH<>&-~J_;eDQ<QY>ei~1ouIq8v+DdOn;Y1vJFD^n<}fa
zwYZz9Ix~C{KGzS7*K<vvRcoQ6+#m6Wm~i#ar;9TAv|!ZY7seU;C6JzM3{}8^7Qze@
z|C@0oLbL{}Z7m$e4>EOvilW}Whhy0;NA&~ZH<gwHI6ena=BwI{;W@)a#JBiod7q(U
z<-NR|jyI;^EP(+b-ekUfa%cD+JFVRaHw{J+i<8QD1i&MZew}oD>J2lM%0BIMEy5M$
z8eK-?4|)3K7G@}Y3oi?HANY?HWr!asMS$aR5XECwdnzF9E~oSAc1R;S@wP<8)z5~U
z6|ua{CG1Y$oD|$DcRe|4biYs#z5T#md+wE6PPCMPXzhXJro-LN$)HN)Ddxf)X=XO}
z^Rct7vC+?|4ge&)u7z>{_e$Y4j`e0#(}y}IwDooC$xNsC<}S!tP8ZqmN20!rd)}y0
zXtM7Gsl$S)o?==}W};!3sG#5vJUr;K4C`Q=ZXWNzTkYjZmb;W&n(1fK_Swk$3U!sJ
zq2V^yMn2iVUR@Bi%M;X4ENxtNyp$^V%%L#Bk+MP7vbSQ+SR0wUIH``1v3LPGhZJ<6
zm{9o475%O!QMukKkMEH_E9q)z!t}Y`yjmzbw&qTCx2d;y;c~ZxTc}<gsz<{=CN)!<
z89L&Y=L!1YEBYWkEw>W^uI7AZGbIS1FMO<@12-mm*LZDKNU7sOxFAl!ZsC14$kLmH
zkBGh`)U~q*036_V-&BxsxSwEK<rx!(oA{AoL~?@nR$Y~~6i&2>=s#uw&~#bIRoU;w
zG)o-`PmLGLMOQZrc~&HOU3vzB?$3}74bb=b+fp4upc4`WRO<PAiP(SG0{AtzcuO>h
zO)jPb^fP6CYtu?@FTh$!GhO9ze9};3-<gS9GyJaRoHQ78!3JVFFly<uC>13z^RANi
zO!$((IUP?w-J+K%Kay0;Z%)?P1AUgr<3;Mp{fdGH2){woUWvyw&yzP_l`G$cZYTnk
zN`D(mQd?O#*3WrPQS9Y(``)_1obcc)HD;sJwPNsxGDWx2u!>+oktCtl{wVt4=ld-N
zvL))D-jVS3;ST|W59VqT`<?8=WjU9-F><m~r=NF!h<~M<SO+DcDU|=A5an42d5Vem
z4X=Emu?G9mG6^e{a`(MB><BKRHv*ejmrY;Wr-p{|SD{$XS|^S=(f}2QGVcOuKRMwY
z>Gd@_S?ae77g~vW^;+He`$=A8NBThKQ1VxAh2fww)Lzxp{_{T^jPMUQI5+fk6ic^B
z3w%aXAhB{g*K|A}OE{!<aIm*GJgdF7HyXHE3m$ni>eoM$BQi1X+uSbfriC_LKfrUz
z_GQgHylY~=zpEtj6DawQX1UPh%9jR?7<`f*O>@fd`k4{LOUkxyI$sevZNK&AGxAEx
z4;Qq$pA-97tGOem#GIctZwTLOHn4nDOI1e=B%p*QovIYOO(g>jw;AyL)42|9zQZEH
z!kQ!_WL2z>_-uukMeB#PX+kT5jx*&V70J`yn1tn}E8&%&u6@IZ7Dw+xc$SKRew=8r
z3q+kG8+7&|vN7QHa^@n_M{vK4Q$ympG$JAtB?bW$;|rW-SM78@@*<gf0gbAQkhqKB
z?}ziY#U|H{n>??bUI`&0dQFHuN>%w{WTKFlo`9Zwk1A}%VBe;Tf57PDM&o?)(e`@a
zyeyHX)g$(0fTSF6^Uds~<i~?9tM_O+`82PHBlCow2Vy;aLAom7JXx%xfF<3s*>vSR
z{$l6MWXwXi^L?V+?T<u_8TlGhILEJ+$~4V&jrO*;b6XR6K}-3)jn2Eg>;V+67nWrX
z*Qzf(Ms7+9nmIxhMv9?r+K)0mUNi~R(4KBva(!%z>FzPaXA?)6E_cf4#I;Cx&#^l>
zhwMhM49C93kwVP3IL)Asp0Cwl*owFHD~<f=`){5V7Ro85$Fwn>ZjFwcFIESmgACsj
z=_TmRWlvP0lIjV&zi@xgtZ}KxzW_R-<+`EsqS={uOqyL=Ys#}-);Zq4X>uGH|1lb&
zWYM<eE4e0JdV6ij)9wFbVvHHD`9^YM&oqTu-m&tjx6?jXto-7>80@hj)lWuPUr!7S
zXm}{hK4MzvIgDo4<S&{g(1?A~2?7#Ij?dQyQ^hhqJpU?RNTOoaTQyi3Rq}4l3=hTk
zF=>>X$M*z;`r{e~n!xv$?q^rg^e&2T<DOtLYSnA5CjE#G=gb1oB>^eFd*I#5)G#4i
z`ZAQMt*RhPkKcvCW*|FX9yb(jSG4~?>EQ{1%jxxYxBTiHzgx|ydf1S-vnlMenET!H
zPTQ4@$7e$S4^d~q7FGLpeUWYi=@L;uI;2}9q*J;@x};<1PL*zu?(U(H?uMa}o}q@$
zckBIsj`tIAFtg{{=egGJTFcGfr1r-vVz2P4ugx{U5;z6S+0BS#Rc~By+7tEoZ*KAF
zITNEKZU(4b?o-WGLUAY~emWJFi?uKJsk)vxG+U6m>3QIFxMG`kA&g0P`aLF;&d+e0
zptGR=d#<jc{Th##JKK%V#z1SC>Fd62!<yxVnGYyxDL;Q(jGQ1y1zXSASAZKRR%=sC
z`oipb?`jb2v$cNJ3wS-F0y6lfi`le{bZWf0w_lKjSdo;yIOp62Zdm3JVwxB8!9}+j
z=kqJs40pt%%U?d!TI@)$LNbxyURTt=tk+i9mz?<)<HV`@fiX(XiI_RxSm>2<I4a5;
zFzC6~<>hrTmoxO*(ue9-iJ9do^I|yGiO}OP6H0cQ*UgZ|((ooYYmw=Pfd+ymV&%AW
zOh%quQsqRhp|9pc$ntXg<%PWw>XnjC9jtpb#`DEz=Bf|?_nLfuY0(r)AKV*B-oNkQ
z&_;Kj-`?&l>EVQm>pnR*jGV^yES(bU`H{t-dh@D3b|0^D%wgkjIG$6IbLa<4?ZMjq
z`S9lo4NFE%X7fXAis#e9cesqPJxhn04dCC`>7p~wi0Q_YdjKY^NPpLW)x^_@tPQ5L
zxP-arpFysN;&$<K)itx#ImQ3s_S^A=ks+K8yT~-{tD?3k9+&N$cLd}znkgg37<K&V
zhbjG@S7y*lz=|0fyaF1Iu@ryV!asGK)l5mpoPogZ+HIwnCq^`My4#Fe5fiBT>|Qne
z%}Y{VXh5tg^|2b+<txqanraIzAYL!^LkXBJZ*HOjImzzzZCls3Bhlr%aDkdaes@+b
z)Q3jYaX2FL8f6B~xY-ZYgl2n+)I_%QPdAYXzHhsPZkOs8Aik77jpzH5pNLKGH+7v;
zP!+6e#Ke3LtMqO+a_Mh$Ra2jM+TTx^AU<40fuAD-Z|4=!!d~$z)Bg@gix(pud4Cky
zJ7OWUn$5zh^{O5bFFBq!wv92Q%@7;*{&D+C2f1SYhFv!9|Ne2I(jgN^O9PR>->zEu
ztz$QmdXbnN{f}V9Lf=y;m9WoGMfi}=q`O%T1sDVM@o`jq{+%6kK^<%%ZdTfIa`866
z=&`rBmhs(cE*jtvWs^*bs%7q<hzt%L7uQ*~tM-pPU0bQacQd}SDm4WEJp{TEI!n=Z
zE*Ab)oHKZE5_#)??IP~*>N(N+(1*3ZQsKE}`!u*r+;e62ltX*|a3%VU{5^}YH{EM5
zSr=k&(0Hx_=wQS{pxac)xI3ueeeqAY)+f8!ORgk;0b#G(c(R$&;-v;BB4(A)3oW_Y
zzKeIVe{eN?%e6M1A0*#UI2kNRHD4zh+w9ZY<!+`0KgPDM%R$!ksqoqUo>6E=NFmXw
zGPOG_dD?1yHBRw{#k$7`GvRk<qh#~7<pS+yv5PxgmLtkmGc|z+rImW`A={L8^vUxk
z*GeKc$uZECku^VdR<jYqx^xsA^75c<yyQb8bAn50Xc@frk;iT^lQEG=;nwRXrvxi;
zmry%L`_g1bt79Z!4|JynAk}%mIEg_Yjvpl~-$7Q(Ogw#UtUV<cY*M%;!6^h$gD7*>
z<tmlMw^T6{OR+;vS!44?ZfqkSWjd{&gr%bo=W{A35pQEwmrFmqWjc9-HJ3%PWV!GP
zHZ<kYg^uz0Lyy(7zfIHM4ss6z9kCYTzkM0)hWQoBLQHmzSCc*w1E)oc-UCH{G=c77
z;>IV){JK&HA3KB{YPz>}*zgkSn@sXENfVJ<$-66$q%6ccI%|#I_dyb!pm!_b1x9fK
z7pM&<Z{9WJW4cn#^Bar#Opr668p+~`R*=CX$S%|pVBGCVRpdTTJ;K{iq*D4;a>IZH
zvdd`+8{CK8EMlvK$x79HhZ}M=(x<CfwgzQTW+P1R#fY^@`$L4$DzCv$oxiW~lT|#t
zF7Q>O4ibE|)^j!<kL;XU=x64`gFN;^u6P7sOo@;QduQu#$|Z3`C#6cG!rrk-n&D^#
zfc69SgWgs+PXxSUHmrBqr2@JQ$U!nLZyFt>YmPfNO13O0*0Dz@GC5tFXi}w3i8HcP
ze@C2j8e)(Mcs|Gc@cbYQZt^i!k%?&Zjj$Jq<83;SH!!`tk06&uONFp{`gK(QBTzz?
zi<r0=Pza{dUuq^~dBqZB5WQ$*guOi!pQj>mTe1fyZZAlLwZ8a@oZFLkn9BUgBvrsT
zXoHfF>a>dDe$Hh$o_!#dzJinz&0W1d!n4fM%<$iT&5D1rlW_>+m0xW>-Xy^1tV9p!
z4|vNsr6ek>yt++57iO;~<8xW?NT4JScHa5ke;MW&FxuCdlWPgElvbp3@}yHOdC8on
ztkEg#2?a6K;=!0ZYW<U+yVij~Iph74Oa;Z=b*-IcNiAifAK0_x=`oA2y-UO0OO|5G
zo)#&5cf+HZHnz86#Gyo^83nysd=}<!cojFX<(WH?0!ibf2<WI~-CL22{3=(fkd>St
zhKppH95yUQst};a-aqk;yuCJx9I-;ScfmpSYg8G<8liTKA{ddu;}k394Zw;oXz+oU
z!0m-I<R&gQcfw+f0BDx0T4uea0aAW`MVQGQSZonLL;$G*(*VBq&b5p!%Dqjc%!cqX
z`63;tJul6jIfj7g3L}zTCz31|E7Hz>eu?;;_IZQrbr&fjdf=_=wvUY4Z@nzkjjgGh
z>1YwOTM!Vr`^Rf)&~?*JlS)Q^6wz1$^?YYLQI5$G6aqzlN00k)G>ekmQfoKb(A`rh
zfrA%lvhm}o(6*tdX*Fz5j2<~Ddl-&GSpPjpR!7g}HgBR}zjAf4YJF<Ek1uHnh?9zo
z`puphvKmEQRC96@7F5|Y2;;t?6(9>HTv=_2)n)z!H&&Rw0=3})fglPt`QeOVaADO(
zpr=|JUAaCI++E3SZz`0>Zl$7Dxg&+EU|YOobH=Naow)1%@OpKx8+hPk04h4K>%p_;
zS#w#8>+S6E*(cLbl{w}V2B)zPm2Z-dC*AOJu$w&h^<>io64bOGp?dc_oC%dW^JcHp
zL_Kbt04jc!bu0}m$^P{7=VO{e8XaNfD%U(;wx(9HunWb-o?y_CsJjsb=J4~_!L5+f
zpg6D;1rHeJWT6|+cFFVy7r_v)^t3J9@mr;?`D9-n%(exV?-@h$_TMK!T-<Tf5N$k6
zLvT4Mc=iM=?-nM05LjH^OYW#e!Cb&5{hDBt(AG-|{9E89agp&=U5e-5q)6lU?<LXN
zpgE6I2V~F*3<c0Tu}4lhgV`SFSBS}Zzu|G)&W1l4nM(?EYEQ;H_GC~z+c#}*-{n9k
zbqPH>4+=inc}BA_GPpHk<sz`kEaVB~hUbq#@7regflA}S-58D59j9~0dlSwttz&Ka
zL!&*Qfggc)P4ay3dYC<{+<z}Cn&4-*D9sp&1sz&=UYqN#4aGvnY4#iq=)WBW`6<>o
z-CuNgZje+C%_%CZ|86WcfLSRf+0rLVKQDW1d|EetJ29R_UpURbP^?~ykRkX~KO9lw
z%45uuekloss;>LKxE@QU4_!pxd8p3q$uV+rU6{;KaI%`rYnMAs7W-VTXj-CM%Xo3L
zszMn`fB?J;eh+KpThH51rJBL@=%msxA44*1p$oNHs&C|Ee=oetsq8v3NQO`F#OW>8
zzS|Iq@o=g<udOyYwHf-(Q$I9S!JMJ_Bfuje8kI@G^-KGx?X_aMKxCg%W)3tFSb8<a
z=hE;-a?c2@XEb$^wxJFTw1QM;Z?BiwF6Vfl6~2|QmLl3EE8$xlx;olX8t<l)_n;|;
zMx6JfmgSJ8F=eoW_${-ix=z!dd^lbdVW&1hI>9+9pZucW`OWEOU%_u7o-cC*8zkrK
z4oCjzFLwMi$cSpDzkm5ekd~Wp*{7+?z<H9Naae(Up#B4|!D;sh*N&bU93$tS`x2OG
zaDM&_1?Gnj>y&R^1$bQX)@$69#q*ol2zczH)_d1w7*RR0Fn#5oY8oHypglhLHk)Yy
zsN887wS~Oy3H?)B+Fa&;6vu2+IYB(**UL&7koxR`=!0TrqaXmxtHm$6f-Wg~^m^T%
zr<^^Cn2tS9^7pbmSHKgEk%i=m>zj3^bK7&2uQde^)lQg=uLeRn>WI5?-v#aTNGYtJ
z9rJmF%tYJ0&!iT)P0-=B9;nrTPnq(Z*)23B2-jDt)_&3a7RscW_iUWumO}Vd5$T?G
zHy-Z$GTk`ULfKE|&C7$+I}>J?750t2U=iYuWdF#wODMoLocJRYbr?w7Qtp-cF$1*-
zBm8zY^-c5%f1RIz%dE>{wk2Ax&t{v&=O_xDahQL^c%bN1Rvtwqg+E=y%fDpKF7K#+
zvsrC4^o#EQ-kfOAjKkr7?~qYb0w|k$qh#4HSuBfAhgcr%t=oFb*;H)jG|5^=5B|xr
z6fR}2%da-{B=rUk4+XZfoqahgX?yTwj<V2Z?1lt^8iy4|i(}Cs$vT?_n?YFFC7}Pp
zCo23kUx$^D&6X;x2-Ld{j+5m;e0S~}PkRR&D7{pn3t7`YJ*G1b%*@}+dzkp;I7VJt
zIhaC1%%GO6H6m|1?EU?89veMDo&&4JIy}~5l1&+y{%d_Kkl8#GzB!NEKcw2oa1v+C
z@sKm1q5W(~ZE*o^_;IR~zTVs)@nidmyndykO9T-MSr^=%?XoXOoFxoW&uh*6glP;a
z`7>zwP=d^gv|i8f@~P1YZk1%}=>f4y7_Ke?0|kJ#hH)w{rcvl-)r(h>g(H0>2!|5#
zP+Y9eko?9I`Ufk7QENiaybg{T<O<IFwAt66F7J-5OyuHF>fiZh>YcBQrqvlu$_jYj
z2N7^#{YofT?f+aBb!;~$B&nT!lx+(Bg>?IQFIS^%Qp^J;z1GkAlEENT6USYKSn-IL
z?rvd)&2YGZNv_}ccT|MN;dH)zN4`QSaVu8(p7W8<L-W-DrW}PSayoi$C`p|As{{L~
z5?U{~KrY?YpYgO|24Dd-cx$?$`n%QoZZ2NPL$yBslAWlGO6c2&<Uq{q{HxUHzO?`%
zg@fWxv?m53B5dFo6NljgV;?|TTK3J#9kLi0$L#GYytX$xC~H2yJN7-}7Zpr^x3u#%
z$t<hMGdxjy_4a=u6l7C5xzz^Z3%NOb`g$jkVs$DRlPjmI^6`nXguszFT+;0A9&ntu
z@+7gs%4Yeg8jK5`uet1^EVo`jNKza2Kbnv0=UEDMQD#;Hx(h)+<hO?!+uxn#WwH@f
z40YA7Pa2OXUAo5+vxo8QRIj@OTX{%62pZl}ED>!-K45Uqt@R9npMSWi$)8z2rSWOt
zNXD$jM8e-mc;W2D`8#QF=8B8hYx;Mi9W-d)d2hjyQ_y9?W$Kb6jQjC=ONrZJHIzQh
z*ss+qsR4t6PTLqC$Ya7mcWz!?nz{EVERGlu{kN;*eOPxv+c_1ExRAs;GUeV}OAZ>`
z!6d3whTV}en{-FC3hW&R^FGj@znB=iIqAWDXShnCUM>IbtwjKz?`Hhs%Lw7cp1>+?
zzdwgwRHeqVMUeQ{CyXr$<Z}f9dYY(DjTZZi+&>J_-)pny(}$%7OIPt`E5s=OxJw}s
z3^t`Xe|jB+Yws?^ot4X<jjfY0{E$qq(`dJv4Dn4tf1dpo`p*4uYz3;oC#ql)Dlc#i
zxt!k}uKasEzRJVnbN<tmYGH3MTW63vR}#B!*WLV>2m;-{dH_BE^_mX~7ptocJ}J|(
zzDG!KfJ@73$nacJ6zj*J2e#1MAgIfdRb_20y7k8SA>N4YaY}~KDz)J4`666H6nji!
zD4y{vixdd*jhM0g^Pd@<hra?9CeP>Yo;<q+$g2-HC4YAkvwbhUG|h&Y(hyIl$|~8{
z&|ru3U$9nJvwbkeiEKEi#YJ85<;I&Ar9r8}&AG7e9So3H&7%&`&d(*&RfPKYA(~2%
z_A!T&BKX-h=@cw0#Kl_WYRq;d>8NhSege%b3tnduIF0@U`}=nK%~N)Fm4AIq1aas_
zOY18HA0XNs;$<gQXvy(++dyhKx*|o7em_d|7rAxhyri=s;ciB;Wit$D;L0u!C8WE(
zfOhl5E6wsDKuMAZVl}9APf0$!a}_$H6^u>gH02R25Q2WG6iacRE1j{D;k8@+?0SO#
z8$*?^9mTyMi^sa1j4cplKxl5el;!32-W{}DxTgX;!u!KFG^;M5N2$fIi(Z;1OhgZq
zKcwHy#WE2Nxf}oqQT!1kMk-F(UdBIm+VUjox*wwg3onfku)@`|gqo5&3cP|HvQpo)
z#rh)$#q<_)3Id6*yUsU4d&kK<P8ET|_9Um8m7v{q?Y0;>%?dI{&s>>e*_cYs9oKvK
zW^l~6Dpb}4w?$c(C_bALqbyq6MDGI<+-`nK-G*-&5$3UuQui6HYo&axp08EzSleb#
z0hq2SU9IvHIqlJ7U>2oe!Qc*qPC-pzQWDo@br-f5>iCgsl_mjdg>cn`{Rx`Jj(-nZ
zmRx#IpAMlttLARK(djo-@;pjrWo4BPA@99wPFq)0xAbVfjD~SPW5z6?Ht3MyhVVJ?
z>jF0-Ew?#=ZbAkHui8M~0kgriO<JI<xcsr5CJ%Un+KT%#P0-!ss<>Bho3Y@KM#Ywx
zPH(mUV%KYhLMN!}86nHAOeSk+V6dTUC?&mOhT4tGA$R9K-&C$}m{aW^)`KF0#&BA-
zv2H8hopfYYTf)LP1;LhwLP(;}hHAarLg${55=}uoLK<_P=7r@<O&g-`;WafZ`@n^)
zwC3==#r}G}p#E4~7_U;c)40!pK{YXTQg`bWX;I8ug^byKlBH&MpT$?Om$8&};nQZL
zm5;uc(3ELMgT7h7D<dl85o8lT?1Wc2T^SVCEr{z<ZC53EB$<Y3)!W4hw7cBd6>izz
zrKU5&*Km{?Tuyq4P`#$z_`yJXp$jEcWnn*gXJj=ZeN!86UnWH)3GwRpa{oJx_K>07
zIam_NA$`DLLj!#C;P;5Ourw=8{JB*eGa&@k*g3vu<>4&fhL$T0`}{$fO~~sJ$@fTj
zXrqfh_h~S&J!Yt$ti*?%t-QQqQHPl7rBhWuC;g*LPq&-KQ%kgtV8+iz2W^**7z)At
zm$AFQ+!w75(seG<$ot*1C4O(TjUt9f3Guj31<|?`2p#Zwt#ih-9bBP|e}eO5%(!8U
z6W!ib5iTHmUl}pU#J#PQ5T%ZNyh<xk1M<f76uT}uag47z7I{>fzDP;~SOx|3lic=i
z#QOt-b&q~0m8y>(sJBl?&)b<;ATEyCIDDb>5ex0Q%Nb8CTcbRzw&b;d@UOQpR@XL?
zc22{AooTylUKb~XylkFVD`HLAit0VS;Pq>G|2nOY-|LF<eay|&?n%GTZzkm;PT+2;
zb$l`JiSS2|)r@sP?#!CNQs{myA^T&+x%mBP4z_l!ffK6Nt;S@F;%7m^%ANc(s`oZg
zA}iPR4Z9AV)M=@e$M18W*U<dahiH%{P<p+{wkR_{?C43V3pjO1cUWs<?S6YKI#tu~
ztaEWbsej75L%T?;ciA65<RCe(bUxV?9tTJ(&tGfy*!rFqnlR1Gb4!X3855T^A!oA(
z#olG6JTm5PI7`1Rb`2gcQ`J6$TjFkywlXOM9f$aK>>+CdV*gu<g8YsSv#E0sE0>E`
ztB-8H-s+-|<3ES`xW@t&Ld%9F^G)>;qM)OIF`b8Q1B5%O)#15gn%m2PVVk%Kdh4_k
zDz&v?NPFg3Ptw}UeJ4gp&<%wzbgwF9Bh|>X5woh=6iV%JxE^b(aAhu+SejFdUSrtm
zm4hh(L4Hut<5D`9o*dc<;&XfWW?NZJ)yO2b=JqhsbrcN7r4}}h55>;J`?aa<T)8={
zQCxayOgtyPi!7KzWnJ~yt!RS-0EntLSfm`Q6tJ4|r$jBj<8LEsL6r|CzBWBA3Ly>O
z`8yx^%pXlq1;HHBrLfh9kfOteM}^imb>S1PC=1Ao;gM<>w)96cxmjvLeLW6_#<g6i
zCm-*#H!2#?qvSTUN-tNU)b6W;Z>PuVtpmvt&~nJ_Ka?^Ac%-m*MkBny`0oUE0HLh*
zN;BkP?2JD5sN*<)mE%Hww}T)ijCU>I^W*A{D27V3m@F0Vt+@Q2lAlbw{O={kEOK6Z
zQf-S|HZMBv&2y=hkaE4Ltz;q`qwlJyD|=GrbIb$t{WMe(rp?-iF#<z5;~cnX-42n?
zfXvQ4mBPE^wx1i5)o~rozvN1u!Su(Ba6}^PdG0f;mDRA;SMS9{z9O;;aFN{i=LK|R
z3RSZhzW%3_9upwA9qSo({Iv_RGE>(*$^pGXeGODvjaUD>lbsH~8_oT=KPw8;kFVAk
z?s_0pm-QSoxf3n0s<m_VvxdRIG{viI=x-_2y2c3}e`D&71t7J(NO~iOpL*pn(1<EP
zJ3Xsb?9(g{SK%~dNhYSI?1}z{G16-7^ejW5`MzE9Io`VQhv3<h7{>jEMqmgSbEsfL
zB;ayb<F#KY&b_~#4T#NXy;{nQMQ<oV_3CmJph~YCEdKQbgD%u-o=zc32t*V0tRF9s
zO-MgCg^N+$N`%!a`dBQN1j;RuI_;G5fjgFi=U}a+@4t%Iw$`=B!&q^J*xW^p{E#=T
zeFH?VsJ7EvPwEkW(LS_yBhlMzwMF_Hg=w^*<27yxW9BsC063hghxncq@%h~>b8`P1
zym(RLA^BD{3eT!#A-;!_HS+lUO6m@GJ9Z08;&ZXqX56Ds?6Hsa{Pyq$eq4FyelEX`
zL!je;RMJ$r+PtHS5%;pftXG#eCW{ZIjzjm&s58FJT|2J*2T0Hnte?)CzyTQsf1<{p
z-a~LW>}<Wzsq5?n_RhGtGUKCww+D;tO895_<2fCn?F*Ic3{mDQjJMM+5`q}xVAu9%
z(pWOM9QpcHim5X$oREHp%*p@{LtCpy@HDhSdh?&`(UsyyM5==vFel)JKLSyB7Toh1
zd`QE`iE4PO)DmlSgqjTR&hzHOo9dds5?YG4h)wBtbT+uI_ld>ZRdoLoX+*_?ACF0%
zr9WZ9b8hN<(g>>@Pco!=g%l(v^UCk^%Q^Xp9WR9LWVQFp+bF@btqbmb`xK%PT5P)Z
zEx|7h^UVY!wA3&eQ()N>(7nK{=3QOfi_;2hK<`lK0*ksj%Y#wK7Zz5K7s9d$C%UL1
zWFJQuq$3Ah46Y^D@Yci+pN{AxlgH~Jb5|zUd*L_>8>gZaVn*q|R7X)ts4N2aJ}nMN
zTn(%A^H6${Jke5Siudjg7^>!TB^3|Xv>xB;&>Z#Me7>W<d{G&EUWIP7rpO-a?)H?6
zv$I}qWN?)O>vJ8sNoh26>sZLJT>u_PJ>tVlKbqW^w1U#Sb9HkdTXQk;F*0{T`No?A
zw@43fgcv>}LvB$+0i`<njX%#_Ur_!%9+t)=wU3s{Tc~JGd5h{JCO!oR$h?2kx{=g^
ziSX~Un!xMC7oQZ3Bzm9nl*BXyloYvsPy7L%yM8s;0f-JWB_=$v9%)HQm&p^cftp0f
z%;M1gVw%gBb|We`j2C-{!%4H>3_P67a+y;&l^=zg8N>tJS?7b#={-JO0I3+$^~ZKo
zE7U&Ohk%l^CHkmr*;uA;#k{p|hi?9+?5__i;3>}np%R=Umg4seuXeWV_@xoKTjYMU
zSG3*OE}t62160=K&5{?XrH**a{!{`2b)5yI+4!SnsLJSxFpA!$O%*DXEAjd)mL@Gx
zapX~JFsOBhHA418zr115tNFPzmMqrn#3xz{T!Vc}HKJK)tX&Azu2lvYV+PaP_lk0%
zGze~J#h*%J)azBX$(Ab%1<c3W5h>;e-zidl_x<;%9>4qlhm#U@w$Zmmp#?GI2+eH6
zrt)^s7Dfa$Tg5!L*Co`RQKtn1<a<nItJ{$dG%4&|E^ls^Ou6yeP4j}ISQFRkLIR~@
zUL;PGYn0<(9L`Eo`rJZEHA?3ED)d^VT&&b{mbe*9Z>z5?XA87jzOm%XW~P5;&XnBf
z@iKVSXnX?jJISO<JzBl1nN!*#hc55Ak|Gd~^K^l&pv8SrSN!ly!R9AKz~6Nw<1!X#
z%nF0(#i79%(d|Q@k(a&GPrN@^gwIg<_Fdf_1e;2|MbvF^hKvc%R5-D9tJa1$9si)$
z#IX}J|6@+$l|7!Sf@XixiN!YElB7tvDoG7G&$+?d(DmQW@3_8q(rNY1bYyNaoCZir
zi>p-$=WR%-^W71y^VN}li^p9>OQuOMd^)eXC))b7*W<+DD2-W97U;mp_xAW!;^gyi
z!8@dqjr2Q)FwWK1z_izF+%SE!@3Gr51!^mJsa%S)QsfbbGE=R<l`9WNiTtt$ZH{!_
z>~xJ78b0>KXpgr|8lT)M45PnS&Xake;md)*b_laRxmtz)abVP}&-66#a<v>kt_NF%
zn_i}V3T(nfL*Xv{ocGw)DxiUWd;&tnoes8Von{%^Is#lb!&{Wo_3sBgnF4ic`Th8#
z7ikSD$LqlDOu=n`%FG1?!qR!*q2ZkD=2x2mLbwYj&QstPXH6U6Wk;VRr>`U0Vzhno
zzW^lgjB@~6KSq}pe6xDe$-Lo9MUl(3+g@Ot+duvEctsvf$q^=-#9;CT-9T$dSn}+P
zcjZ^Ly@{OJYD3?<49;EVkJpN22AuOUvDj1tg+M<n-|zhlfGk%TA(@=DE6@wpNO1+L
zGy-wfQ^-5@ZV;Ua^8Q(okgMlYr$L~{&-(e*1clRPkGiD>%|h5vh(7U6pHHk|yPOLu
z>OITYv9^CrL71GY<Er|A4VRaut==kY_1JS1#?K8U!?kn8(!M&4#$2MlPS*>Xidr6c
z2>_fc|DVyOTWs2X&VOHR2<-Mjis>SSiOjf^0#Rz9s$5%*JGZjkt4redu2asbLbf~#
z6vFWl#4LM1SIKe?zcj?sjQ$^}(&6fIuvp(VZP_9`-wcwoTB@oL*eO*Q&2mdsd;3ND
zAGY!wEj!Eqv?-GQN)5Oiv@(|*>~y|2Z@52|B4LGvf(~1)7eFLpQEjogd8croUiWo>
z`0^*9lLOL3rN|&CPf0Z9S1peZxkK7*XBTZ9P^?R(6tx9kK(7q@=t5RsXZu7Jti`i@
zq08t%PHfxg)PLD>zFW4NEvnpVjG5qc`nqDROHQ->EfJ#1{{WOfz)Y&@viNVAL-Kk~
z&SRU4vvRAvjbUc7=VzdJVJ3}Q2W0W;l9xXwW{9@OirlmR6gd8~4_D7MAc*MW$%K(>
zPW7w2X7b{M4ly<PW_5A)`2@HiavyN#3pG1Uq!(|gQ?0EuNlFf@=R}cCO`RcgWgG-j
z+7e{)dthykr^!)XHB|2YOd)>pj_Z$!u7_5)%fWgqWk#Fv^e?kgi`A%bn~sr^T23G1
zLvd{&getrIFtOAf5YQVJP_&A^NJbDa5y2qUV*}LWRpxKxw#pR5yaTQsu>`3v+pup9
z7V<+`=z&<C_h#K_W|7mD=WSDWb8CMgm4y2;EnChO=GMDRQG3NyAXd93sd^#v@&1ra
z0PGfN)h{OclhzPDf)viR)Mgevr5j(Vn#5|*B7fIVnafvgTFkiT`Bv^{vaMN9*{tf_
zkJpl%P`NOpF1`y=zI3v=a>*6J#%f{IAGJHIU&t3eTB%p^xE#(b*$Tk@HTQ|{OvqWa
z+fhJXFadpjx1jD2Z0m}ErI6?&z~ytkxOKBJ1%ho>z@t3XS+mt5D}pK+sTz7?r!P0g
z#{8TLsx!X5gfPL*dGd$m)lHR?#;HD=YLW=b#=Xt*bZsm*G}e71_~TbkztRLi0MCNp
z{X_?)!ia>`4dS*;#NDqK1%1C;5lWnjWuom!EJ)DI{<q7&d;U5ZH@%L266~?gc9QO`
zbXtK!ha&ZyvQ$CWZ7NC|Q=L|$Fci=G&xB8qBKC8XUUIk*8QCOS^8Je>dh@({&J?oy
zP!%o)WcVVd`7cQ)#2|!{=LNp*iS!R=CqM8*bKqa+m4Oy;(Q^F`?F>QycbZ-tOB*Gh
z&)1n{5|q}tTn^`TshKus!}EG$nlq2?d3uaVnDPBLMQ$i=-h0FRnZYpgK721H8Z?3!
z*jfqJ4&J@ZVs)h8PbUUpC5rFBY~+XMzJ~7Zx$Aj{jVR%<+kUJx1!;Rkj?|p+%gK!r
z*EO`B&OLr*a@_si?$0Ymjr;splc`FP4H?>e;H>Da(#45A#y4j6*1fB4#eiL<Ug^s1
za(gd1Yzgq#>gC_~$z~cux#bQf>e*};z#8aKn!2l(=h+?n*h^y8No)?J*HUDHw9Pkq
z1|O1B>-Rr={*lBVZG$T8-@3N8g<iJJP<6@2W`7W8M8z$=3QP~V0MSU`)uT#GaFZKb
zq<IyiUTrfd#)h-z4>WnJejr-@3njdL0LY_aARB$A%n@`j)6ncF#AirAck=;ju++Nv
z5h18MSsAzhrnhP4ysv=__sd3=)2w|)&w}a5z7Q(jF$U97o|d}6QcN}cKQamIL2Hh1
zZk}0!j=AIR23bwC6@EID(=7V>@b!E%i}=0$&YPj$zzRTfI0g;7>Ra4ZfLOa7W)L2l
z@wZFgIgVXoGch>+LMpMs%R9qBwF=<BEw1jkPTz!s<g-M$N42XyV&hnL-Ivs-75ybH
z8q5f+R=__5*6wj{x02n>h(-=Yj({u-2Du%qoj+FOYuMhRV8W5DH})O8E$moQL@fFm
z*x6ZMPDN3qU$IvV25y_X<9D?rV7~LHc_YB@fj>eX{(O;PoPe0s$0<B<ByEh~ak@2c
z?w{rRwOY(FX=@G*t@tF<ugPjU^{wJXeF1jF|E7MkG}zbUlIX*oa)^49x|wWOLs4`o
zar5tAYldG#v1Fj7MpV1*kll%fqR#fDuXh@&ug&&Dfo!SHN-sge19qn~3)z%SIZhx#
zTj)u~8mC2Zt|1<n{q<STF4Z+{|G_a8jW+*g&kxW2DQ@J7(A~{rVKnE)%fV6n7?buL
zPl`GeLC!75Hks*p<8JiH{f_o`N_aOy>yL}P%rY48wO+{#Q6G=DuXQ>cF<CN1)f5!3
zu7r=}1gA4j28g@BkL~MZLZH~1uVVubNskdpq9E-*Y~ugkEkDsZ#W9dzXd6AjZY8(1
z9a+T>uZ2#1hpvAp_Ct~2GM!8@Q~0jGRP#+p$)-Apl}_yCP;sg22}gQRo_Qfxddo;(
z*{eM_H^_)NdFm8dDe_FfP&6~?AEPV#Jyxt%kX_HT)0z%veBm140VoaNA<9!m;~{ja
z^bPGmqLwu6!}emf25#XEOftmQL3;<0Ux=0R5`-nQxs|GUM&wb)%jazaoiR@sRT7dx
zRmMHa-;SILw?6HB-hIPYaZHGGYMt1@3}+V&bcn$hHJ}IpjWDjxnE~H6?Gp`cKNEQo
zk&|_+SwGL{VzD&njdAGrBV>5Hki;s+j-WHF$Mg-P$UasP3hfs3Z?<c^HaYC6zp)~B
zrB4pc1vGK5sUu<3@8wpNeUSvAKi?>Pe7b)~=doY=lv*vjzAbtL#o}85KHP@MRNIU>
z#=Yuyuye6SZBTXafz$WK!pqzS^H&+Iu1qn(Gk7xr9^RN}R6E<g#;?Zxgb>fL2Dpqs
zC;^@+1o5Gq0RrCIPU*A^PyP5)b4CWA1&W3m5^qF~YD2mEQ?b)1wSH2_X&75tP*#EI
zHg9pM_SY3FV?K8*7pwPI7~GA8&CB&ErE!mkO_RHj*MHvcc-qK}QSErTgSinJR!f0s
z4cHFjg$>bZ$H4w?m8$b}_ao|~EI=_HgZun&qEav{afL_m{9EqY`U^%jX42z#M*BHH
zPH&OfL01K!ey|RPMyD2?b#v-85iv(=<~f@sIphCR!`uzg-S5UO&atPVe=<rx4IHPv
zIXU0wLS5p}(mA`#X!Rj1&synR;(&hAs%NVDSfmdW6bA^5y?(dFPF^D1VC{OeS{hTk
zH_g|-5@Pq1!xEV9=dwDg<EB3RTW7phH)J*)W!TPyblzDT4q@H5Q)GgOOZx=}#MEh@
z74I%oyj-DDN);%bHa1LT-S($K^_p<4ve2y$jVm19a6jMkRlHe*0kA`jr-=3|Yqy22
zRo|J@+<qkiO5BS1ptrG;_5+%EWe3tm?`$Y5^x6ty>aFG#q>Bxe(owO=bH}RN3C=mY
zwS0(kbTXu3z7*H;`_!Dn-Ti>00h+k*+hgxIo9%Osr!dr$5X=HeC-wU9?aP=(@2S}m
zG^XtiCl&Vw3_EVy75}0klIhmU?yzU^+jDWq<$!%^gI_U$CdqViN+YH}_Q^qj#WW@$
zMxGy&-0@a>$6pfonsS<FOV*ad=Ekq42(6>|;31E$Ct_**OIr;h^i{{v{Bf#;RwdRQ
z9)~dzeP=7~F_VqI@u53U)o*xXHhg;z-!_ikAU8yBw>v%-bM4y3DQ0kJQW^r?MKH%!
znZt)#IRbUZe%2KZ8=D2GDnMEFu7&-lt0o>PX7E?iO5Ud9)KxDd6TL3k&DQLoQT(L!
zs%UdOqhk+{yfcdmV>XUE^-pGi6OX|Vsu`{8qHLxEvpE{t4Oe4q^O<jwE8KF)7`f!2
zm_B~#O<yM7xI1zw^q<sGcJUqbZ^w3^SFUvIBtiAkb<@=#Dk!>g-S|nEF}2WU?ee^i
zd~(il9!0vP^Hyn(_El^eul=D-hR+Y)rBiTsY{b<Cpr<ky-?vp0>;<e`=qeM>%q|)9
zdCWPrH#<w_!&c3+$L6*wJ8XSpQ-;L<{WW&lP8{ZV1=QmyvWryy13=<G7qt=L`)Y1I
zoY<Hw&=*&qUV*WOdTxDEzCL(TavUS1nAN%-uXx<a8oC87lawT6(^a@wbni}9+&s57
zCwM&CQAm((9&$;aYLB5jr=I>Yco?4mC?rugTLLQ=q{g+~ryIG3m+v0x%V+H-K5Pg3
zloVDu3}Ph2Pzt-t?p!9Xv^k_*cOYgSB|KKt#!)5NKmkZE1tzh!g62+CXV5!l7ru*B
zrVX}@&;9Fw>40q#hRg@TPNhWVu%n!+{Fd^CtOX9+MgPgCZ-+EAT>{&BDWsyaN;Zw<
z!1plj!c)@B`<xgSEvRSKh{u9$Yc1ES@`k~3gO0^*^#ugS@wzs0*!!r5&d+<S@ujMo
zZEJPHbJV&;l`y@T-%BVinjPO?QqSl}E^EFR84f~7VW;`;;93wt6n}W(sfh%~>rIn{
z?;wblYPDZ>CiHdwx=60PqbU}L3mito)NzZY2gGo(5topSTNp{C`=KzARn93FeMFw^
ze7HPt+4@eOTPYggVO=OqjMPOO<8t^gC1W+O4AjJ=%c5=oIvE)vbZU=JX;XpZ1r)`0
z_%p^{lYXm@gn6!yOCfGx1GucDWGjjvo-s8L^A8IF(XH=i9FFpij3}-)e<iDVC_o$0
zuX>+dK4t9(c}=s!q6`L`_BIVRSQ=4CdC{|T%-$+M)LVdL)22W0J>QOZh;L8?+$~+V
z+}HejX8DhLf8d$?vXM{4V%CEAvVSr0L)ul!6zSh~2BtOs7YE@y3@G+*!1~W;58r>j
zQo%GCt>*`PS73QFqLNaVPp%K?qU|fbXJ04KO6K7bBZ+Ki*Y^wCE{$r&mH_iBIDqMd
zI|o*yM>I4b<UID8dS!@4nON6=Aq#CYxPY-Qz=wN6ah6+w>k!TH;b8$lFz7c}kk}TT
zf@c2$Q!}jD^+$VrH2jpRllxZ;5NcO7JhjW`djzVk(U_@k@xqnZi*Z{4@O2H)i9x>z
z9ga349o@PXV7)|1Tzhri;l#Z?@B9H|2TLir^AF?$6`bE=1#?srmJk9rzjlEu*U0aq
zKdc8I<I!<wBW~90yemQJ=J0=x5a6+Z1APq5Kyc}M;)@ZuC7UqpyMdOEU8)Ng*<?<{
z`fGZduY~vM)E^g|VcDpHZT%}rEdS$@NopVdo-*7DJwO7)!<4VR>%9M<r@LZ<4P@JS
zfw~La2*R<A{Ls83?xl|)ct^M-EraXzUB7Cn<dw3xr(2x0>#=Y)63gwe#{A!zwf&!8
zzo_5Qi~d)&3*hokaUv>mt0`<hTSk^sPZdE7;n$C-KeiFsQ)EAudqRhqd$WBmhkO~+
zu{DL#11=WMCD@Jvej$w8C3356(JJD#Bj69S&RoEneDyIvpy{yD!Z?FBz#~2qy%;ZK
z5jj5eF@*nm`jR(`4e}2WSXVT<T$c3riDmymvW8q*4#dV&%||^Fjrj{d8zZlRDYE+>
zUQ)V%RfaEd+HC6$Q}~w_gC1T8roqqa07&erKL&@K5b&vQy65b$Z_@(7qkkn;3W@;!
zqaXTD_%}V5IN}^r&9$(!L*qtUH#X>0%9hXylWl3h7N)iD8~}4AX|u=HbmEtBXyfpR
z3+e8h6d=JZG_&oDuml6yy0Uz#MH`IW0z9H#<g7Y;G{FXAR119Nt?o*lYdHosLg#k0
zogW6)AyBAGm3D3$dQKb8?akS5q62F|VzXxJ#sklw-nHyG#%@;T0FM_#OBiP5nFVHs
z;MifVlSkpdrvS#M01uY1t2gfb97_EzR6G734JFTZ&S|QR;Uz9oruf*~Kns_knaifS
zU(+(Qp0ZDgMD^lTlL&&8<{$s3KppnjkT$AwiJLu(Z5BPAbuw2l7^O8tAS&Nt`9qM=
zWl4m$QIw=eQy-9)LL-Ze#>9b1QEN9U9!bc4xIj@At4JPXzT-!FenN#dUgJu+2WUWi
z>&8`}BoRhzp~O!B3;}q}_DDDs0tX~qj;Z)ZDU~ZLg7ZoC$^4=oyQ!7~uF3>rcM@K2
zrS5w5#RTeV*FQaU&nKn-v^0Lzo4R9k#T)2<kdFKue3gpY$5DiZYhzKV-KJ(e&Ub=$
zKmCBZ^O^!c`zKZE<jq{DK2G{0w~G6c2s-Lp(B?2ZRdM}1+%lRfmi8mo66`8gr0=i~
zc?KTYyy<$CqV4C`j_|RFFT~3RClhP<BoXI$+Wn|()qWiv^Cm@@q1ie~f&>#+#l5c_
z!55dkWZr&m&Qk`4+HW0jMXA?1Ybx?_SgRbPzYH-ZldqLv1hI3#QBB?FgfrH=G4)pM
ztI?7g;Zee+Soqd_M{98}BMG?s;XSI`m0aOzgH4!6l?n2}ZaJ@+en_FA?@`;O&|HqL
zA+fmN$GxSk`b+nq*%@VfcQ-Cnd9mX@f+B|z=45FyG@Tdr7wRF83@C1nBT!?i2V?nf
z(%@Nm`{nmwQ{co9T_YFn{Cdd~eY>f1o`){4cuJSu5iM|2!|2a#$R1KC$X>1ZCs{;L
zOg?t-)z09fXXlI3tuC%)ela7g4Z_v8JA)Y4tvw#CS4X_`nyz8M_5Icbl};kWz;+zf
zG+Uj&gNjp0P+G>7B+#+bp9}i}LUCBT@KOjTxfV9TX~)<B?E^&W%S=amm?q$)eZ-f4
zRUPr_6;BZMFf)Z;Ac`$&PpvhM`_(3YU#leK$T`D6gFSW^qWRC>h1U->{9|X{;B|Tt
zgUG;FlPJ|F@|V5t&u%}>J=W>3X=m93zu5YxAUB=^<myzHP2yVuzL43rzvgbG=0jJI
zxl<=E+LkN>qCvQe!@T{eBzr9Q{G;>&<|u;gGd<l~8{~BNJK*rxW%|FvL#*<4M{y+P
z_Ap`nWQ-eCDZnFdn&8JIYQNWt8mU$>704R4+-)<@l@x9(m{vukc(+NpoLbom68vYy
z{Hg4aaG)}7khW?=vVqSHetBG&JJAnRKwsuyHL7nDx6h6ZY^#@dV=g;&z3NWwYoT6f
zn*xa+HZJ`=H=5TX&*p3wepTozp;aw?4FG<L4U?w?g_JFAh@rTjy?!P{uC#yMC@&wU
zhE%yGBP8xj0Bw1{@m%GcI%UNz*fthDApss`L*bsCiWZMvA3zr$k!v%S4T16D63Y$t
znXCVM10^s#ER=o_uad$4=NJG#MlH1a`(cTQNA34=(8Co;QUD6|X-m=hCTCy`e%p7o
z!W6kw5=U1qA{94BbtQ}_V(K%F5zj5D=W=vd7H61%o<mP5^eyUu*HVHSbWKCZm>jG6
zR!Nq)qxl1HbC8CLqCgzfs#ZU=Jv)m{$?yMl-0)*K!P{&MGg)QeBHlg#Fab$`DiP%L
zL?E{<B3td&cpyZhYzqF2u9`hkpwa#lKxetUR<Cp<7jQl&fvr_%n)Kgx^IbxYW5a{D
z;#pyubylYogyV=I@f}(ovKgGn4`+KXB+;m2FbD^fd>>DfU5|vt+;<M=%4FMG-QJ%~
z?gA;K89R!;H{dfYof6en4&j@_ciST=!JPR@avh?NadQ=G@<8o$w$3c0N{4}dl=lI*
zl|pC?Wg*auHhJ*YDcYUK;V%q6yXI8=8hNi&{avxi;?MKL$_|xw6EhBvpFo23CvC2R
zLh7T3-l!P71NDM09AsSHem`PY*WVt5nV*%cJil?8jtbAcp!pwtLyV-A{xRhn;l|aj
z;X#_eeJIY+YID1H58xywxK*Tt*r0OzH^Y-A)_-gj$^PbipXbXK`@4GM?}Zi#>YxX)
zdNmW@NB+io)`@(kwW(bW(}`dFYVXAF{TeC@J4lJ9)Z#u<hGR#?zyI`MXaJUx(TY1E
zVJH1N>P6sZ=G6U}$IZd8ney>hvsAa|aY_u<JLk(;VRFF5xExdZF+8PvwF~NnM$}+*
z%B3ytChMouXXxDakOYw!{FFIX!|bJ)fw16{I!g$ST_9bdlITP40J+&}yHgUxGWOl4
zO{Di;2kwOe<mhHw(J$7;$*krYxL}K3-#7bWB!e-x3wQ5<|J7WyF<f-(>MF|_eyQK$
zxsj|wPgFM56WTGwYmP(axPwhKk^{7fsan~|?d~?fF<H0pu9U_Muca<58!L1bH=1Fw
zM)RydC@X0-$<J>)10T5PqdCmW8-QpD$$IjJY^sbU)j&^f{TSfD-VCn=M5DI=e*R8_
z(J(@_Kt{3AZY5{s4rfaG$Lq=M()l8-jr;eOP=_r~Ax9t*g?UuJDgLVhsoc%kpZ8;3
zC}%9aW;E;ePXnu?=Uu4OMIgASd(wNGr5GG)(JoN+iF)!~G_z+xF1_LlTrB0t0_-A*
z!>>DPHpfZ){*7ky|MMnpOG!ENxXq1i`eO;wZZDxWP_NpJ@iz0E7u?pf;eQ2cATu%t
z>)tN<cCfHFuJ1<Q<0peU!$JSW#Dn=vu6IHUBd7wpnCy#lp=gS`b3QyCJJZT7zrgN%
zFrk<`6if9W`_~X^6<y|fWVKsvQt-m1+7xjR`7217jsFZM8cQ)r4?O-@jxsvy^VesT
zXqj;iSOZf2G75eI;TKLz^;WXwsod|!PPe@RfsK`4iDk((N4n!t_FbIsr+wAJJl{u<
z`0kjmgl46$w4=%IUny#RC%p7OR6<&@^-L3mB=v6>j;2~8%@N34pi9IHv)uG@sX;&$
zqLOBXelAdoJ_X$RU{L8s>f67DSS^DQK~CEkzi&64hT>_2L1&I%TFzh^0)z9!B6@se
z+;yTkzLkiPYvHJF?<lAR9gPG*=aZoac)%JM7!tc-Z$ctaXC7y~JH00MW~tT%yQ6<|
zuT1EXs>3_!0LLJA3d|~~nfRyLQoPcy!#*}RbRDRtWBHYnOIO6?NBLeq_5FFrns2Vt
zy}tMz!sWaN7yVSyy-l)2A=QH=keO+-mC`f5p}8Z`i+D0q=VET9*MZ{#TacxM19X9{
z3P2Yq5A4_qh70$p%_xcHFE`hym9WK4vDl%O1LWIDc^aQ510kEvL{Vvt?X1;D-}@V4
zNCu~J3`NR*VHOph*DLkQBICeY2695h3749s{)Hb%+*XsB2lEw*!mSOwXMG_)iRJ&d
zvZph?7W_Bw;)$)3G=~2T&}PQhJU%_&S5phZ?Ve776NhQishTp-hMwn6y^Y}0k8X8i
z!LP;(n=%_#vQ#bn#VuzT^XYoZ_X9P;79D@Bc@9w3@bjDX#Q$XhsEAWJg#pAiY^gS>
z!q-i%{&(V7TE!B7iwSU{BTLBR18|*L4Yu;qkZ$YJifXnHQsqeg*HPABHB1e`ftJ_O
zyFDagEI+n6oRSN;*;G!hPSG!B<PMe3r}tO0s_aBrzSB({DWR^7?2q`a1oXXHt_&f+
zq?0E}h!(Z=)o;JY__sj_A{b~#%f?q$+-~2wmO1I_FW3X9VZZ5|=v0gX6N5?s5+jSC
zr^;F+y#H!4lv?T=|KI3k^*VWtBd`17m~t(lG|oH)*iW1nVA*#URP6GUff@UI?JNg^
z7D-x=Aag~k9-b~e#=&Ua#v++w#vzn=)@Tsvr0K_8;Nr=W***uWS%}_!IhtIPqSMK2
zOpH@k6{9uw!YLMrh^6HAF+;#f5oDN?ku2i)a(gtRM=z>o`p!yM0_8d}H^cv!{6o~<
z<U7-r_q|MhQ;qYLOs#rzBczK*ydkfpqKc-jZ(~>5(3o*Sl@nL`ttRbqXTzEmswqSD
z36zfWI~p(J`g!pFN)TN<LQZE|w3X)Lj|G4f&2UFrakqXHt!PTHw9{aJClJxoV1<-H
z?96tQNt1WDnjdY<w5}miJl^?CkO}IB)=`TREV+HqZcJ@T9J!;AGe8Xr($5O`kMhc;
zm(MNc+9|UBu-0MpC{z+%7YZA6_fbA3EAtO06($3LZZKdA&9Q5wh75vESw|T~ildAo
z`f-ASh@2@rPE^rkqQO!Qcf_8roftIQ3u++xB3=uFC@V>8<dHWIr@wbOX4j@sse`t7
z4n<m=u22~bnqEay3nza_>&yQS`~bMH)XKMS>;lb|tqCRBsqwS0ifjL=2iSOGxjaRp
z9~dN%;EyZvESp!y(C=PEUbk;9>3*SXUug82O^O2maxq#YjkBMz<HBBeoyERvfD9(W
zI6S+3#ofW47w~tY8!B|aV*T{uyuGDOmPYJwySkhy(Rbr!h&`j3d#76T%w@x0zSeJ8
zO(LVM;hQOll~UB>vrEl)T!EwVG~Qo;rNz(PRCx02=K2#?k;;RP>~(CNK=xLL)rypv
zgJL>^2tZMMplktpDNf725fSPsQ)+xPnIQ0x$TPB=I0PFh143}tQU;H45Wd8o=@}E!
zUw6w8Z5`rpcCMYu?uke4d?ujZ(CSvvxW?}E^=yoL`a3N9O{akjgDCDtBmB)Vg;J~^
zO@*9SP(d*Qy7A8;5@G6-Ap@!Wh%PpeZoJ_`xbVYhRig%(z&9cNuQb^>$?@~GPJ%?9
zC}Bq~;72q2*RsjTr?f*M4wu7kJ{56BK3IP)EsFEFznFO>=k_VF3KX|#HaTTBW1pA$
zW?jG@K))NFE(1x17~?I;x!)nNzjFqBGo&Asw;5>KocV>PxgpANM3nB|`ZaDZyH#?3
z`I9D6Kb?l+XH=MrBWLml$p|&Yi7K&@EmV?AhTosHL+XcdsdffC6d=k#L{G6@d5KiB
zr|BE=-NM=*K0xe8->Wc@0^dLgcaDLkmfuQ&1TWQ}=G@Xx`4NOUQrK21&5SNHVqLw}
z649oad;o?;8+hPC4sW~?nl06c_H;Qk`eV7`$6$tq+s>@r9`g6rDP>=_ksQ(Re8q-9
zk%?PJnTMwuk5_M=;nS7qVX@*J-mZ;a+rYcAG)lu`;j<tI7d}j9Tq^#dI8Ptt2Vt!4
zeA$%rr3RZ{k5nUOrXTn|Rsqc=^yh^y+GT$PNZ}qU0T#XL!$DlAYqHV?!d%*WljS!8
zuF#j&yNnpaAF>z;hm`v-%V++aQD}2b2Q0>Aj4cA$MWd-5$-&)*wKDt2lAD8s!cC&o
zTvE<f%QcAgyXe?Wnmg;mS17yUC)`E@G6FqjM$d_!(>a;#eA;YlsR#NX2uTM-E9KZ@
zO@OH<)$@Y7&zEa{rp-@T#JT`$ro=<S^mRwG0ErDH$Jf`eMPHflFh{K8l=niGg{F5z
zLZ4`Y`T3RB`4xfE?aynuKsZ4)U)Jmm1v~qEwl;YLF}<Q6$zg}MAQswu*;+d4h-kio
zbs``7L^@{!w25G(BO);T^LDLjX#@gdTjJ(wvA%q|R{d9kjE-yWjkJJgf-0Uwcy+dm
z3k{=NfY#>W3E5?b`~ue-()b1e-st4n?BPDpP!lrB;@Ev{gL?R}`P&z4nJ>3j(3?uj
zp%H%P%|E1Xr+R7fju$HO<5<S^=xZg=eUab{J;Z5bQ+II19*_SP7Mk$R`J@Vm4pWiH
zKWvPJLPdgo<Wu<ylJ%vUIYL6DLu5i187t_(;wic>(j6WMDOS4@5kk27ZWZfu=J+yz
zq)d9=mAU0^M29774c>9`acN_@UBLSflJND7dBPffmbZNL!CW34_90(%@ScD+z4{$v
zvNVl_8h~Jj$DF*eL?eE|-b}0*-QsMs_4@X_5LU^V@E?5DmHw<UL>lO#a&Y|cMbp-n
z-g>S{#Knr7{Zxd#OXy4+Y{Pv)`SKOR<(uTE40=}cVO_lo^D>-+vWrO`V_<*eF882*
zXlrBse#s4d;I!0#ow=V$-+m(YzfO+w^F!BNSs)4=v~umzgrtrkHbenQPQ`cG9Ug#5
zSXfuAru^BpWTH+*{{nkvAM{Y)O6<R#6TA;dmwZ{8*16HT4TAjmHB5550Ov{@>n|Y<
zuV<r&b49u%DFxj4y*zr-7jk2aZT_N;J`&&oLZK7sEFg-#;LKkjMWz#xig>9){r^~d
z3#cliZe7>_0Z{<~5s~h0X%Oia5Re8Dk?z>kmXcDsyOD0`R%uYWySrh-W^>op?>pz*
z^N;V`|MOnQ9**Ha-o4&A*P3&#8P9VH8yoX1EBR{pNlYO@*#9eN3JS<DS1*#ja&uNY
z@tw)qYr*+Qb4QU}iz}}LiDD)ab#c1>)_m&3Asktj>mY3vOj`ex%$uD2csmmeOy+0c
zehU?Y*sr`bxl?4hV~!Yq;ZbH%V_xmL_;5NDwaS15$^+UMc9pz_e<Q{0$DjuoAgEm`
zc!_;{5GXskBx^zb5GXo->TSv;Arch-YC$E=x8(0yKb-)y-j{-pbmILs`}vwugz6=E
z8ZLzlTNS-g4&W>(-hKdjBTXqooc-OiDdUfdlHbsAwjbp22B1<%2CNS%zvv*~Y{-<n
zdWC^8{f-Rn&qcX~Y<^E*Y|1)LIm`mx%Ruo)hP=zZm$Mf0&x!&&11RU~t2>s_<7L8U
zlRfunB-@B|rpL>Y1wF>2S#9@dZ{9;`{drA@$s}yt`n}*zp`A@|<B<Pdg(xyTL0V-$
zKI^TcVvUx`vTz|IYIy_2{IBdbhqxsajt+C`u|}f-^L7fWuC19rLq!nc7@9XsQv?kZ
zk8-Mi5x^0bZg?R=*X>&a1r4cs&NJk%ggp-{J1iopW#qL-nH^=9_8R>SFc|65uD1hk
z-)(=}xHWy|E5#hp+lVocDw4a!V^ua*ef~oh(<>Rx3vqjw(MXNAK5)`$&F!+0Jr$GH
ztmfT4k~{u4no6r7_N)#bw%0#BkIw`!t@dTD8_ynhejMYshGhzaeReV4B`30OhIWw%
z=0Br<Sg>LqXE~GI+!g?{IXQHKt^JDdvpN>`QsIuRQvC(Oi`^dzLG6ruu1C8aJa~+{
z2H7MH`h^3_TXjz6!eH*}7y_Dbk8A&UOLQ5OUE9km!fM=yc0?>+yuplDK_}V{b>SOd
ze6I$=frAsFP;<Yv{-4u%?L7Cq<9YD+uRIP0Fi8r6aNiU4&V9X3tb0WNyK##QrGYYR
znbA$T4z@ix!gyIpkq$~k?{Ah43exODFE%<>7iX+4-)L97yH!8Hdd)XbsZITG<EkoD
zvnRsi3<d6iaNi-gG$I;hB#oPT^Zt7J-ITyndn(1KpQHWjd)&3T%X2uN0)<R2EA+U@
zN_GCUzTYn-AzyHLiMiVP9Oa07K_-m<cXT^@3xMx5`&#L}yD%<<YL_fJ_UL42ezOjV
z-Kmyqv1&Qk8I_hLKxRw<!U7pGY(S3MTH?~_rqf(qOj$d;Kck7whj%jyyzSHVmBnY3
zH5yN>_H|CZA(*XethAK!Vw<%o&9kx2MV6w&w}psyUWV=Z2O}kF)5Du(`i&2T`85AL
zS&#B&fdPX19kb@|ygf2L*+O|zZ9xjk+up|aPb;sQP|HG5uZW=psm;y@3El`9bWLg$
za71xA#o0*9Q!w(1ey{B_4nTq6+#D+tuY?%<;&Yxm6KC5KsNk{vc#pRUqg&-8@_+s3
z>!53*obHH-ryiOqnyTj7<?*5%t@Y~~3>+OyY&qz}F8wKKqqCs&Iu(s==up(?%w4|1
z0!vqN)-G22-7C?65nv$fGDn)1{J%fiB@zW>&`4?Ik<cq$L=48i-|WRhAaS(4dTMXj
zJOui-h23SAATRoV|IL4{aDNjeV(iJDGfhc5q2HWePoN^oH_sJcF{gj%f%zeJD_q-`
zRpL*F@^9sUSMxHEB>RGTWZ3=@ztx?seock=ceS&WoXi_$V9#j5NZ}39X0jGK+^8@C
z=sxsdES4c#F?z9ROp4*3I{r@y{aFk^zcLuyG~zPdv2Cuvb&Hu>*V_tw)9hNrOU?Ob
zW4NH+>QGF|SR1%b2ly9_FIepI|NC3*-SSF%)GP4x0T2i#R*;Sl@;{K#0i!BR_ob;x
z(D=i_Nm*3VpSSz(D?skQ21*<Fp)PW?d+%YQim@VLB52bz4+>ZKvxI-j?Z3ao^Bc(T
z^~b=KL^(Pv{l^9q0(zLT$6zS~7M{iV#pdtcg@5&ge~R`$55a$39^xT#q;C^{v!pqN
z7haT>MEmEY?6LgTwHqVQwFflI>A&o|fAfp5d4IpbU3^)TBd@tTGJhH^ME>kNXXJ*u
zq^!dIuN(W{`U0;O3~-cY7i@qg_NU0`e`^3Zjo%Mu`G2r_<dgcPRT{`|T_Y}8XKEnY
z(J^#}?stj#9nz>p5KCBf&})+mvS~Ct5v!!<Lvpu(LcIx)zg2Q+So9fvwMhK!Z@iQL
zuG;@uG5-|!izi6&`AB_fMz}7bn;K*_S*NrB_})D80Yns?p`cdtn{W+$z!7;9pIOx}
zwftqJ<BZD1;?Y1OztTgnU$6y{d(>qb&AAF#7Xgkxut5Koi2q~fko!Fk!0#1tKMw%y
zC97=!)<h(IS)V4I&9JTJsn|DwIn}vf^D;lGYXkh`s{&=Xwg2<zg!>yDb3-h|TFN_{
zOy1SLswVxvDoh4mS%9S3Yf4gC%j(Ua$)}`(@>Tij8O6zyulpl(ks{<oig2x7jOzb^
z4!y7$;{ez!cGbpk`{`XuUo0hhRd*TYCu5m~njC!DGO^4ejV=e?@05t8G&ziI_#Z_$
zA<lq{*y}*UW6^mn8$o9%onL3E8=A^1@mb3$ZGWNdS21%zG7aav*5$n?ieN;KqhH9)
z0n6_`k@^lPuS1m9*F9MrO3AEbWM43;6#HNo(t5When4OKIlIDXb>D9iQ4s*|`L8X;
z|M(O1r02jRE}#ew>qCWXQS|WVRO0?Loc>I|-SBzta)Y+cW6f<vf}{;5WAu?faCHv9
z6%P6X@-(hnk0HH}EA59E=H^k`hXJKQ27Uq0%O*iS)5UdgV+1_`asZM!;}XkL{mq35
z^tvb{9`y*h`BxZT1(Ap#d_H3B%25a5arMXEM{0`a&taqdf1xO(v3o$wzm9rDi?x@5
zz8$aQ4{D{#U?y|paKs#s+U_lXjX5RerdUBcMci1F_n39p-4P5dqgVjy<McT{-|iZI
zgk{{T9Ds0y%TWhE%0Z?Qt7mTyvsW09;1mfs<$9n!P=%FKn?5foX7~)J1d~MjwEM;A
ztC8v?qJ}OJqxE=tf^L#y>Q0bY7MWs+{~A5~SHt<w^ZBo}G%I#XlsOJcNwQkx4Vmr$
z(V_}0-*JRlxAyG=YNZ5m%S6<pc#f=0fG|1;V9@9<OqA(CGiVgA;jQTY-BeKjkOr`H
zX^GW)DsAVs^v?Yj+Y3TDa)XfI7@UTbSVmoMVHj_alJWHA0WH5P9M7$*Sq_Pv_i1BD
zWjR!sqx(aEdus%KrQwkJ#qO#l{#=tI=SlG4c$IL`k`X$PO-9_d*X$E;^xD>DGva<3
zz3f`_8#dHkQ~4hJQ;O76+U=A$0}#8YEQ({$NquF)1NUw7XFm{gP?6k<wf>=BxF&Qe
zSpiWT5S4B~6|k`ChHKLY`rDOdVp)@l`aAlM)&}TJT2+P{Rf!n%bEt@a9}6t(c5T!n
z%vh#e93xuQLRR729U^rX)xs<s;7=c8yMQ*FF2;K_LC1%>#P@zSx#Fk5Wi-^!Tu$7n
z(Ek3oVBfM1ZxLXOb1t<Jl-s2^juKiv-T4*I5Y1Y|X5I=f_40VX`Dwx-u`yu_oB!2&
z&=?v^PBC_%lp>h^Zo3Qtc(nLsuOtJoy#Nx*b4N3E`=Bx7-Z-v=J6NPkT0d^EWWN6J
zQaAM+^a`5&D&_=N7e%SOIks)WW=$~PQfNqAbv>pJDnqjwil)c?lg3B%%5CSrt0?<N
ztiug59%jF4nuH5I$(LDm@;OMa;{i^{+vS2SLE~xkCp@P7fSw?E2m*?End<IEqotN>
zdYd!QfJF=87*N9F%F<T?CBUy>7SpXKWM;U^1WG+D0tlzep4`}UUE4j2BJ&h<OrdRs
zkHxa6p42I*)#)Z`xZ#~oslPzZWx6n;%z|j^2od~#&2Nw1;#+{V-_jP#F)3mfUlG?o
z=d|dgt|A8huQ&St`6ms^$fMBl-S<s+^^&9h$n2H>7lqs#1JzC>tE55~(T9(i3xbln
z+D<GqISVYA?}a|%W^j8QswjcEmYcdem#Z-4G`Q3OeF<Q_-nVy4;IUeL_(_zp^DNnQ
z5aHvmSwkG#9mAkl_QoT<p``>M+7Q<Xyl?wL9wlPUvh>iAF!14zO!Nhcx+t7y7Oy93
z%y7O363ZnUu~2U2rm7sYq0*TSe%tOt@b0`*+GEvgNCSfgDq!?u<TR(K{{7M_vjcos
z(-D!@Bs5};5agqijq2obT69RLFeuC4`=J*6+0}6AJaB0Ei?LhV@`oLwSR#@`$7G|U
zs&wJ+!FY>CzoK(tMzl(Kf*()!6tZRUo*fE!tO|0Qj(DY1j9r2P1B22rvSjMmyRup&
z5XAto11PBp<R5qxD=m6WLgAS|lnnO}2c|PYeleM>&O#WgeP?c64I5GXYC*BI-7&zi
z1ht$bI<HR_)mxe34Wth3l%??_ZCa>ajVS(<LZ)=8<o$yT7=hrg?E(MhpPROQbZ!aa
zqK;eCzh^1`|3xDIUo~6%BAt+!-`x`@l%pk@zBE8YfFoE*I$Pm~9FVz{@3(;ctwfI_
zltLW6WYK!=Dg^+CrGF)V&Z^DO5_|~|gx|M>DIbG0H^z%?FpR=&)qCE>X*$~Ahv(yW
zR{yMoLWjwl<@T+8fB`-cb5rRwTMkco10c>zU-^HcLf;@5h?fMsBdQ1ICX?H!T#!j7
zM`D2qd)MQEj69<)9?M+4E3}F)LU(qiE4!sbL6u_f<%aA{JuhIN6zC&qxkJuKc#}Za
zfIOeetyYH==`^3>Bc$PDBp7)14bD4Trfoe5IF%(r;5fvyjT1Hf0G*Cb>C{sDS-Rwj
zo-271h`Q8@X9B>W8+15ViZ)-T=@ZM3Q|IOJF2Lq(*PTEw)R(|N`|Lgi&>6cexyR`(
zvlp%3*v07ecX?Rhj@q_-z<u8IDssab`a0t;IGW|yz8U39d(qH^)LyFv+<S)0Vf5YI
zGv&8;2lfWp7H&7OT1TuEM4_g`D@3ldny+2tXNaP+zB=A*l6A5x{_nSz|Fe_&52bn;
zh$3%ZKiSc0{b2xpO-1}sQ)a1~$V@JBz!MC2;m<!&V|aPizjJR~>+x)nk$JvmQ8`ZN
z=WgyNgVE+=U*1Ir4HwyKI~JNWr&k&tshbUDuyYsdPtjjlH(x2%-i=nV6?j%`pnSDv
zHkHU>rcofS%m3AuA=7;#f-6l!BbQ@-r}1T15Q=i%L}Vjvt02dhi8MX{XnY@;rsn@@
znSKbr+*|A3LXbk?qLd$xRa3Sd4eR<(%r$Z!SSD<}Kf%O;`^lk}PBy&DJ8Xi2Ir1;>
z;~DV0P}4h3tyNQCeYE#UxxF4S>q`J)+%!>-x_GQw3+FBFFk}Nf^?1S6eyfL0$QC-X
zZG|3mRxU1omeyaRZ+<cFL4ITJ5Z8qD#HIH8-PH`99b<&<!`|DwZJ(t~J3kd2Z&^cK
z-V*Czd0rey4QI;O=Iipi*%W0A%l&=q;QK)dc>@paMyWNJox#`0d;QVXap%2@xD-G0
zy;NkqtTX2O#w+IOXTc2sn?M1~NELzNWKtKskW)yqVD@5;!ebdwm{gmZjWT@HvBlw9
zTH4Hy2`@@FEeLT~K9@ON)Jp_8`oafjG;w1o2Mb<EGTETk;zqPD9<h4JIBT-rlGqRP
z%u6|{xMJd{5p-7C;n9hPl3t5~vS==H?lVN!Ee~+(F$B`G<f&%A8Gx(yY1Ud`5wgd`
z6zj;rj#e@-DE(`mj^TJ=tlB@KlW7+5lsEc#KMfGEZ451IfZP5xy2~NQ^|Nn>Uq<U`
z;ySpmjs`F%ZO<R-)&n#U&x2dat-`*TxE~{ago;YoWoMN(F#n$M_{*rdrTztSi>HhE
zKX7do^c}@%mw0)$9I2G?GNGg?!@*QldHc0~%``2LFuN(2@j$}FMoqGTuz5<x@mM4+
zgKky;PV!))v#Zn2b7R>@YRX8__HJ=ZV>G%Q6Uq}+Tjc_9&7VKL8eb8DHzuthfZh7u
zJp_&qa(pj}-9yW);|*+vDWL=mZl0_U&gys=QM3+YP||6fS}1mus+PZSY-=CP7GuoU
zZM@s3U-=0%KW7X=79VoHbC@i(3zzd;4FGfzgQdT4>Dg?NXQW}xq*wE$alLDoj%*B9
zSuOg+Baq_~x#g4rtEP^Tik_8dZ4k8hH>|*aT=o9rcb@N)BZocw+i{M)VUhmM%Dy%W
z4H=uC<7T!Eo18KqIqbs6hU>MZ@>R;V%^BO7;*d0H$$ZXUla=q0bEQu7nUam~91arY
zhHG^(0jhceKM8=v3Oq*nFbP_O%=-nL(+7{Y_nJ*%-kM0D<Xk(h*kWRB)grU#<Pae!
zB8g*-<pt}w>S1A*5xsfLCx=f$vpnwx&Qc|U^BYD4lINHD(=$81KoVK-C|w=EjAGSP
z1u(b&^frPUsl25=zya+&BL&uW*7?@EU+^iso+V+B5BGpRS-JQPP4OS^`|tTe6lUb@
zJo7Xiaj_K$BAXw7A{!EhsWiOa(8mISk61KCvx5n;$#1*z>)v^Hdm4s73nJwSQEhmX
z>UQ|X`cZG_6Q1~0Ry{?+!EEK(dEiWqmz}Q>w;9y(9tn9|M6C`aWev`!@p!|QXcd(+
zV~A@!%kqq-VuCcvsRB(;25Th|u3}?+&i&h5#?v;$MV?qB!jgdK8e@F6DqI+LZsZC-
z$LiKBrSfV8NUU^<+piVZrlI?s9_NNs7whd<$%{KqyBzIcrma9Maf~V3MMu9LWICJe
zcJ4f3dyD5m!ui{M?m7g591YoHkhXJYYoJ%5{=bRE_ppDbgj}$W0I^s$pokc1X1YiE
zvz{@UQMaw;>WF|jQ+X+uuI&8DqjafHkClms7VWK3k8%f6azFM>4hBQ7vz?d|Rj&9)
z=pEL7%0|sLnOpOF9&&w0EZS>Tze!)<^O$RGAFdN~zT3WWYN0Kq47#em#LnJ;zcDTt
zY$SzdAn}LGB6B<YeFO)$_>JnN)|>z`0G}FKl6J1Loc9f3$8NmJw+II+WdP^*fMH-+
zCUP)oV~O5wIrNnvO6f^LWd^C|d3cYx*hs;v^SyhQsZdzm5k9kAGh&ZN?Q8up03HSe
zt2uyULKWd&`@XG{{1jED5Sao9L8bs^n8WY>Gh6&OxfqvRbYud#e^9K_A2PiIXttG`
zTPcS>hZ1jL$|8(a>fFxI>Rhh`@W=jf=q7)NXu0nefx$k&79M}`;O_qR1FYS^hu?ES
z>&h>YYq(gd=OH_Dl91nGM{sZ!gP{AlG{pFNs|$DKyO34VIG2L~t85aR=yUIDL^7A<
z1BFx}r5%s`R<ug<BQtH=#$tOf_gd3|CLcUNRuY7B#aRd6QFCNDjqOjB)OSa~pnSMj
zh)bjVu}XX}^AOqQk0}L6*%s&a9RPOf#nONX{ku==l}<4CAh_~}uvy+;?~K}_G`Rr3
zOLsIgqe3$8APs6bU?v!9zRm$wH4o#?5N$}t(~0u&6xMKXcu_=<Q@fsL;$~ETn^FOK
znAfEM#tw$PXQ(%~?MPJp^JCvsRKOJ>W+e`p%HDVmAAWDD6s>AA5G8;np)H;%jUTm~
z1pS&#^2mZvXr_2NQ~aQErmG{JanM^uV*|8XhhFWHLrQ0)UySxY=r_sB<T}h<+k^(i
zVqycXzA*nE_ehr=boSQy#cVuRHXRfA?MaZQ9$@7uf!sjuBZVzhKwRfww{+Gz(EJlb
z#~a7-700*TGNoGh01ZWEKd}~lS#!|6Wm1<?e;zngA1<do#+vzhTY2uuG{)+f^`v6s
z1y&AK;KS1AP_GlN2~ZIsdyI=b#Z7!F-2Ydn_)lv3J`v4(!QN)(Q|R?olGSvRLfOQS
z>vE@;o8nn+iqg0_yfJlGwe9?X4jfglcQ>t%t{Ys^1?#kNuR$AXRJAlAm~U<dwhO&G
znKO|)aB>WE;2&Pc4$akhXkd&{ilbY*g>WB|V6LWCNWp8$t_Nl{TV!l24B--Hc(QrQ
zH)Z`E(Z76e>kR(T?e4OCpP8A-u2H=!aX0&U9#rjp`tWH_r1{5*nTf`kl}Eelk#l=i
zCY&-fN2wF>%YBhNtan~n55RR@k7Ms^f0enK<j%4zph>Cs@GQ~G4Fs5@il9S+EV?`T
zG(JQ?`U6S^>CL;VnRDERpTR%=<})u!fo;|5J}%fRB27S^w8mj{dW(?LFsNbQ{mn$f
zyFexK`dkCyB*#Ow(+=6=SzyCfq7gEh{Ls3Ay2&G`6D*(0?3eoDcQ^T%zEpazpvxU&
zn?w}pc?3?H0RmCB7B2Ib>uP>ZHth}Jl@4`0T4f%C-hAi4-=TN=WA`2pG}f}-sYkzi
z>+-|wOtyR%g>b=RVw59c#tvet=eMw!fJ8{g<$7=_Z$2dZi;vfPQRFu#QK254ovWk@
zIg92GTYU+A!l=%ar%_N>X*%(`bcgXJ+g|X!CGc`>G9SEQHiO0!;Jg3sv+$_5<1<mL
zH_Xi=QMcJsEF@Jh8|9E9Z&sQ-5Lbl26d$C-m{?-v2D22Y15@N5o4V2<-^=R@+4ENS
zS1;cZ{@vGt-)chl)n*G_8f<T1z4%0neC9PTklytY&kd#2zuHbf9`e8S#te2%FG2YC
z$Qu}8&*iDXO642v3VATXz`y_f&$oNGkWvc7P4tGv*)o>KAYa*L4`Z6K72YVqNfQ2-
zi<Ks;!*)51&uv$auCZNGVIzH3#}tQr)*D_gH|jX0nB(lnia{et(frj1-S2sgP;b2s
z%iUG6TDD#><PNz;y@l6%O;F4+@VBepCH1nwTwVGWDAo$Us&5eFK#Ek{8a!5NZ>xPW
z{NI-^QYFvjX@MmWJpWb)If`M-@p*Ig=jdjn+(1229*Clj_`B!cz?ddSnwY}ZWpr`P
zK8f0YwyP6Z?vyFgR{WiTAj`)9n|IHymM$)IGx*0L@-g$G<j-5-K6ca)l0RSaZ~u)g
zgz=J%RHy{gT;jK`Fp#>UW#Lqc_{(+f5+QYE`=-olwqd2t+NAR~@<af2X(QD&CD$JG
zm+ES{EeZ?|+9Jmx74p@|-aSk+5Pqk}Gn(+1D}8ep9DSqi=r=-0z0cpI0;0U_q70G!
zw}tq}5MqBuS{G7aHUp6+T!V|>MBVTA+Q<^H!CDh^(A9nZa;+pUf7^o)Vqg!@j%OE4
zkwR?I#RWd67^nQkU!GR7n<6M}%yGH?5Rv`bVC2#eTPSpK*Clf|1)+cWOmtQt)%Kp)
z>_2Kh2OG43ly~~~?)n?S+KeHWD1~Y?(*Wsl9OE_ydP440tfxq~S0mSrOYv8hip=Z1
z1TfsN*JW>%*+`3uc^Q8jt6u>vK6G*VWtWA$a~J7J^%ovo6vPlUl}7ldVWuQehGiLI
z$eWzMGmd0lk6$2tMQo2mtNXoLg4YU28P}|#kWjV4*X9ru9wvKHSGgk1Yfm!|KkyCG
zM9w-M$(4V@$Si*y^S1&#0~Q(eh&S&wkM*qGOl-xH=s&C+w-=fW+nm9A{$th{9v)2b
zBToKUPJNinUpjU6807bq8Fl0s2>+NRF62cXdf)gKABx}7bV&Wm+*`S8d2pKuKjJP#
zWp2vn@crNH2cUfH@5n9TT&n{N$^o~LE%Gt@E!ZwEQH~@g`(g^_t`1vt2$DK`2B@Q$
zGdG1_u6>In|Eo=MzK4TeZ9pRad-I*liS=;O{C-ZrC**r6X&zm5DsoHiiik8jek$Z)
zRQOBTeME}xn9W-HDDt;`XbA=$NKZOL4F&b+*QQ-5$KMHx92+cNSiSJ|F&k-{qv4~6
z=m9Ox*Oz+5`px7@g5l3o+)m>^9O^Wl`oUoxsS&&f6%k~f@DGP<I2gXj6)aE?aj$?F
zf%~cE-M<N9!dk8<ksem4cdpsIhf-u7Wq*l5J3GeR31(0D>`N#fW0Xi5=Pr*+4U=}Q
zB104-H30FxM~8(Q{=5bqcqNu{WmOj7ird4pk^cJM|4fVgwwj-bXaz}Dq2~)ye9(mq
zf?8jU)G!{^1{N%#<FGMdNfgQXOjXjJlIAO#E`3EB*2Z)1IeCp@PZoX8ld3tc@p$f|
z`iHcNNzy~0f+|jiq7=!WEf~*cn6)7$Q~JK^E<mmi=CW2%vRmtYB#U#n<9r=S;&DeV
zgBG_t&2xqt%r22f+w;Ub?M$%lRqZhZJ`|!CcviSyx2D{o#OjfQ6;9P9cW5_A<$AeY
zi>Z?BBnEkXB?$l-83u%pj%Qx^KxF2NfjFQV=WQwR-mp^2)ti48Li~<YVWp6`xhl8R
zhOu<OF%+;e=YGX)I`}1Ixi7k%T|qt=4vW=aE+}b^^d}8rENQ-weO;j6sEEtwahe2L
zq+e~0<?WumZkG&+h6Kl6D)=O$Iax-b94u`)#IopzPgP$>5$L=0%i&!+jk+J6%|UxU
z$rw=`)e}-O^F*NlFnHVm2m5z@6p=sfV`Zajel;sPCgOUrrpsm@ktLTXX$`&V<2f7}
z;2DNczg#<Wmo`RA$OB2v!-cLPmFjnDrgL?*+FvaNoaIt)wl80NCgN{0oY5Mrlb~c&
z7}5H?(hECUB($cUzk@MN3Brvz%Ae#UA3;8$m7VBs_D|UJ%HNS3;FE7(GMr_J8%WsD
z4I~zb`FOG8Jl6#fv6lCsh+iaq{>OXN5|}H&&sxNa&;>Kj)&*XsD8Z8~v`K593k@%k
z>C<_`&O=3t8{01VcWc6ZmdiRwhU$Z3@-i9+&vt%kcE{2$#H{F{uku(=Q73-28hdec
zZ)2#ASmY;bTnn4~vG|H10>ku7kJIt``>3YdF%gCNsAUw$cE2Au@`@p_;1Bpj4wrh(
zVf`^nG5&=$=oPUf<S;8Nd|jpZ=6et|7X82(7}?5=W%Jzi{?6gvD_#}!Tt&0m-K)O`
zN@XL0++8AH&^+buuHH8J9`$$D=2zrzN3-?Y(MX(ZOrahDB&S$V&l~6e_L-<zw%~#8
z%6VYu@-HdUXrJzShz|ABkS_8%%+;YB8D>lqr3dH-SC4wpUUgyP&VXyq#pkIk^F73&
zxHn3<^CiDrsfg8}Lp;BIF(8-Ey0<x`@IxtKV_gOTI`dVs)o**mOpUUt;<7*VclpsP
zdCOS}1dH`c1iRCCz5a=8J%4wjLFYjRv+1hMYu=FOmy10mS+6JZ6Xv|*BdK&JxvZEL
z$l;y8aP1C{2_XxxH7cWv<8HBwL@U#M<Dsv~hbLomo%Mu+TO6mmB2=_W9)-T$2h>uh
zOotZ*B`z!MIN*xguirrBANn*hvD!)|#+gI*!ojrR+vS|+WwOP1xh{z-UGZ?fx+aU~
zMf~<;g}x_ZgVuDcuC`aV<`tOpr2<E8M55Yq<P|iASxqNJrR_bgO@qBGx`#CJUR?rL
z*kY9iwSLOehpc+OCeD%l?ue_ixx)pi+?AGeqX@Frr3eYgrho3?OTk_=iZ~IwZC`iy
z(}qtZ1muNEDNKP;jH)Vn5We_)6GdI-dViQRXH(G@AR$tQfD0s*ea@%DNyaXPlM~wF
z?}3rIg&a-S3sMt}XCHJf7a6<45X@c2ig!wm{QY4iO$e>Q#%L{@djtE?b+Z8ND^f02
zIC5>IF<ijJX(do7UYo<d4_gx)@EvyORR7FqEjh{9#xE(7m`yc??)Zw-&IO|m>X1Wm
z{Q_5Gx%m(W8YaE3Dl@drau?NuodSeIiSIiGc0KO&Ox{nVvfh2lVYO_)*cW%8ioayf
z@x|I1vO8gtWmfbf#2W@3zI%@kGX_tdWn-=&cwX-fnb#%qUU4ZZv~L7_9WP@J)nA1Q
z0V&9!q(gHKknlZ7qBkLjU7cEPj1>92V$gV^%zuxFPyG>-CjE5{f?fF`xFgW(md82l
zjcbv(ZHKfpC?7f5t*^72PL=09DleI980q%;Tqyfi*mRqX6$d_It}lH>Q?ycleKo-B
zA*gm5w{V+EJ4Rkz5M>Sw^Wbe02^BVTxs^l~Yq!y+gaK$u88E(DSb6#xp!{}jl}MnU
zmgrpRJmE6W3^{8Q3QV{c_WHtMk8Yykom24jMWS`qyQ@{J4f569+3e&(twvEr#$Vk1
zwVuhFRxrWl4=WAdd#FLXZ~!~*TTp^ek&sS@*BTH1yvaX{zKS$`kvaWg1!GN>gB>CG
z+8C{F(t&SKi)sK;R9B76kOSeyU=wv_hoVz`G3b+y$itPAfp?HrAI6zamRd2J&SZq+
zUtjK3XG0Q0?2gZ67#|SvT15vLXUX}G#{8Vo;oQF7pI7AGnEz7weu_|krY#Z!*9>bv
zHLvS|F~iv4<vT@BeN5O6hV7NCT47!$=pm%t`-1TV@ggsXd%1hWd{9r}%Ljuw-yRL&
z*w_(q-|<Z?it~rPM*5(q&3F&tqmphR;~47j0`E4)v^~;k*e{C`hk3)&Y}ncVh0}N*
zhyGO9Ss^5)ky8)5(@;yj^NBP^&i@c%o?{_HF%rdry<h`GPf1fuhH?J79Iy2cafrZ-
zwyWD{g9L}!Hq{EbuvZkLuFfFi04TO3MdBBXF_vueMERe|4(91HZVeLIp2)E_k%?R#
zSKu*6=nv*7GIvCMah>YNS`HPtK7RPLy$1pYqN`#r$MhhYL62DI4wgD1iv)zju#{3_
zI+ngi#z%I@ZoaZ!UwVAtn8a&axpon&=OPMGg-Ve?1yi_QdY=GT-k!SqMA80-SdJGr
z8|$|Q+-oa(aFwXApOye@#>pN?j5DY7f;Ws>efxE};}n|KcIZ-(Ccnl*T2IBb%aiK4
zEXDR1yM-aS!`>k!nX(tK72_3AkGb@AyZIIzkLgrT1a&v+(SA8%!$c!XYR;>U1W@co
z9%jpR1+xm8V03;qKy2iuM0^_%W|X+Q5^3FZr9Nsso70%?^9yutQELvyIuJ^-UCSQ6
zJsi=Pqf^@WUTNTdbc(ecr6qJD-D2b6VDlO=dwp$=Q>&n0ar0Pu{h?yBK4eEJD?Ur@
z>_-P_YV>zT^&Wlb6*Z`j#;Er_+2rWsZYMxrg}xk{|M?3mTcf!(#(;EeV?l~!(3o8J
zq^@tc(Mb|Ct5G-BIf+N%|4>LE2W_<Bu_KTo{o2l;v#M}vXPic}*3MRsk(2&4#(4c!
zI6zQ+dvG`s0oaA(&k<~?#x@;3V)H{isXgBr$J|q1mbvq}?_!QU0Jmj{XJ*~m2Et~%
z<#_+%*6sBZ<CDIv^p6t$rz$t?>tbV>@*+M)#m4^+fgs7#f20sEXE9fyui8$XbX~g-
za7nu|Lj@_2QJX)Bt8}rar-IwT$931u^Y9pHqFDRu*7m^$N8c~5RS#puK72O#HZo4a
zot28m5Jr&5&!knSa_2s2W_4_DB00cf{5kcHynUA(s~~F+L0@@8qS5K|$Qa_~`S48O
z=DLhWB5L^?b=`GyUfDA5e(Z2_dkv!HM+qV&;(NefSMNQvZ%CRb@AhREW7=B;6^!a(
z>rpL5cNbY%JbEgzJIBMY-YhSF{74D=oNgj|y^8Lwe_R)!SU=j`;pYb{mMaT0^k98b
zAc!*DX%oLA|9*WcvqD?&;p0|8lmo^`{V`Ic9^z|09f*h(%7z)S0KJ^IzGEI>nl|HC
z`yJ_4_gY6+IHyho4MgTyaUJCgp0Qz;IQ=HG<YQtkof5oKgVnd@9JjkQzuJ91CK6O(
zGktRvgv$T<DnXQu6d;~bMUz~CaaKp7>{n$J9AEUmeY?{rcBNhS=JPQrhswO8Cm4oS
zC)sAzD^38OQEug+sf??TXu))L`3Mf*sZNaGwpJz<atk_?O#M~O;|e8N1w~m(+??L9
zSJqABa%)Owg7=z53{al!OtL0AZy&j-7d?3uIi?@zatc#;>?c4U7y2U3kS@p@#`fGe
z{9naxqBzpvwwg9Lg=?Y+i|E}^{zdZL@?UH=;Qzd?$$m#Zln?6tA?Ti@kYhs+7~*W^
z>~Mr<?(Vk@-g8ij$P)kM?K%hG&a!e3Z=^8W)5P-|W{s^Bziw=Dw>wacUJD_c3Md%L
zQKZIPlRxNIEwoVEk!f<S4pAx7p>J${ztMfT0zxFv*O&F`pv?-xqT57a%sBQ4eeujv
zzeMQU)b}y-nEptOXbsnac_lXM5FY0Xl&&!0BJI&+((UL`;(GJ4vsG@n<ED@q*Pd0&
z`Yi8!Yf?39x0=dlL1+KO0yx+ziJ*jH^szo}ZD_nVuv5ofAbUC5SF{eMnRF+sBc7-+
zYC=kt^IUK9K@T#9zvzg9@yMbx!d7>rFKwI}GcBeWDxSHF8aubT*aAGz)S}+!u2VXy
z^#)CDsjcNs?KJeczE@XKVRIyG2lGJ*76)dBu|<bFV@xkw;mE)j@n&WDY^vILG0rf8
zQR<sr>AtVN7#KOCb+VW!cgm}J_@VK^sU`fqTvSO;CfPicFW!2O7lGtCZ?PW`rUYGE
zm89NNSY$U{Vo7<H`oH1isxoPj<xZQk9^v&0=wi&-?g#k2G?{ON^{KG!U2552{VTt9
zjsg5uU%4OZ67%eCbjq{heSKOIuYZ}7%n<m!3AC~54Q2`6*3%K10tP|q;MkJUu8McA
zV~kUv@xwvqA2mBypzCDcVQGL4XH~xC<DruMf^g$kb|V~6ghk{^6DB*4M1UD(IHT(n
z{BkW7N@ZW%W_KAXQW<+`p~(@*dQjEnqonT*xjdLvyp9pP*v~w*Fgt7+^A3J0pl-p}
zU=n;fuBQ@MRFYp~MLZ>4)s3?#=a$o!&CoSwHYm#G4O?cVjRrWw6TxL)BO8u0sGzWr
zu}z?4)gPb3wlz7mjSbpeKKT<MZZ_7fdq}dSvRFRR1ouvD*ZNZT`or$j*N`<SHssl7
z)vk@vsdFEp#jW-pA<!S|P4$OF8TO~Y{nf@%1I5zaHmH(qeNm-#Qyo2y%PB78=xi@H
z6&gP6M?qu4q|K|UlH)RCVh8nxp$5lxg@rFos|)OFVmk|Bqrf5Y&7^N2&w;Vu*Y4T9
zUvT<i#cmlM>t*tQof-{S429r+g<<(<cqZ*~Uhcy#?L1Y<_9x~4nUKC#yY<@3s(sZm
z;_x$G1gG00^ASNM5-0+en{>IHk%Tx;61;MtfY6G$B4c!+$XXAn6wu!OMbL!$z<vPS
zF03(VKBGNh^YXlIr4){AC-ja7W7Yuq9U2*#D;y)2svC}1(#)_CJ+pYwu>_$xf?c(J
zmpkmMo|E}lJtTXpDqsKY0^Cn&rG5{w7Q+MrfWx5jjuw`78*7ZGe5dKt>XtV8XB~}S
z?r*+qw8Gt(Zp!A$*O=N0TcRBZV_(Yc?EYRsJ)@o1c<Lr8?r(osICKSnka^bH-myF+
z7aQGpqAYW%&QKL(^ldY9p_m}V1J<p^=d>85HNlnQN|IBtowC5|^mYtU(u|1UG#Tij
zKPgm*;R<XhdRj;2PT@6>Z!uXemeZHQN-$!-iwq(FSa26E#`KVpU*8g`CzVFAUL;pO
zR^l@SS;+YUx<8*HDiIB>q9>Efsqrf(yYWmR4cn@<5lFFKbf{u#bTb03J=+(jSj4}z
z)A=I>ZK`#&k5i=SI{gPY2Yf6blatra9IYDhVM$o^follKwe(^~D6MtD*;93y6N25-
ztL2hyo1IKRG(Dl+e9a;?awP0^ao_mmS!0RK78r0%O&V@isPsn^EclZ`qX56X9REpu
zfd=gx38VJK*e#x8*>*H6;%I<YDm(PiG0QZwZj;bfGDkj@S&cC|7L3ZpFDqXVMi2PX
z6+Om8R)4+7(4X?#$yeDTqMqjKW6|0+-J1NlUU0c}ec63U_8qhaDq6u^bwTV;g-m`;
z<-yEYFMF2MTXfw63wNLd5}b@k(=knO%jU@?$hlmM$8#D-Ns&UnnSiR^y$hak9(TXc
z==&&ILhp|a2F_*qhW$L~Y!^*d6htnVqf9Q|VTr)Q-u69B*XDB4{j^}jq@RmfT9S*4
zc7Ubm+kABj1&Oq$UEzJYktRW2de~PTq)peN5mXT6<_c1`ZT5<(1KhQ$y%s~*VsOc_
zsd2@?asSj|+fg9#P(o*YS&=UMn3FGe8!?v|BBLL{qvxg;LED@u$JK#;I;4Z?Cd_O8
zk#bEu@Zn@;k>wC;H3ed(W&Aq`8-@yn&KBzVVul<$5GEtMl4M^c$Co`{o>9Jtk>Bg2
z3>6<Aa37JQt-NZl;us?s^BiaryAbB?PcbTRBL4A8&wT-6?B+Th!)eAd!5X5KLbs#M
zt#=&wgePb_{?SBuI_JgG+^O4JQ=@JKNEaM@x?gYLdEu*k__O)W5ujo1Y^9W1IdD06
z+urSGhJ8Z6rB(TUNaA!`B(1sQ=!lI~J?q165?MNq#+1adx|dnzSxb7k-N~J<L|Xq(
zMC`BcKX9i|+u|COakAEBRHDzUHlce}o<VXfj`ronM1=77u~YXZlq1qqA=;5m@qkNq
zUR>?_qZfCv_m^(Q@HyjL*%1B7wazg@Rub-ykRAJ_p&WtcpBTRiTDRyGJe&XnPZ0ij
zccGjbd|OrYh8=GVcESnMF;^?-Xn002-G{?GRlYpeyEG)O7Q^o)<#&Jeq{@P|=Gq1-
zc>Gdl#j&XYem<mhlavU*jp4?a^>kR5k$-`t{G$$jiosL^&*K_;4$w!`mC6&_AmW}j
zz)`c*N-<BB(5(Lk5{9&dm%-k!7EShS9xro!cY0V*jH-9C1&6updQY5Ntoxo3*`4#N
zv#AJ%6(Y~?Sf>eo5gjS1Q^-IEI~l#j;ABWiWGgzy8)r^3*WN%^x&`|KS);`Y|KuI7
z8qSV0%{#i0cT!2WCs=p*&jzmy+}z7vpuQb0_0;p}k-nYoR^X)Dco@Z^EdTMr`a)cX
z-m|ad!%VL;yiF=kh<_|%=04Dz>-$luX>Sbphi>I!(0mIdma20!qXa`J?8=@ZfDDci
zP>6)#n`O9@wS5IVM4cCX+QdEX49XOZ7jHs~cdqUdJmuu%pt^+`1eor{^?PV@AAF1w
zVc__z{^lG*7O&Z9LQp1oQ=x>Sfc|pDFF1B(y{Sl;Hh-K`!r#7pY|Yb3tZ+8plBe-u
zP9urLUBF7}bE)Mcf9j!J^|?tGAh``6ZD3YY9JM|ZG7FgV(yzWJ>VDw7!)`EG=tv7&
zxo|8H7bFs>G-dg`<)$<|{&negGD+Z2mOQ;oWE0tv6js&Y8>7)_zgz4-=dR(F-;Hj#
zZg+~hhK&Znop0loJb7kKNg&d={gu(No5wgo%XpMmxoq#-QKRP813icyl(}}3GxUh>
z3z5alc1NYP(Ti98x2UP>%b^3w?5$0V^E=jRgy2T`i*a?5b76+pU7EDRjhtat>D0*2
zoah!T)1)~n2ETk$478Ud9-C+sOD{x3qcT#JXz_QLya?c7WAU+#0(c)V`Lnb=KzEqw
zu>IuVk{99<tCu~QWS@7J+c6QZfUr4y5#Mw$t$4XFS*-4Ko3%&1DDtT$M^6&rlENX~
z)u$kn7g6c~e#oLJXjLm;Vb1A*E0WIaR0}2XY2XO4c%FU}ZpNh$`|{#bm-nf8N*m6D
z#{>h(IW$%|)tkEojoYlD(R_EG!K<z^(_9{jBFj8yNiFxd4Wau1WfwJKXs0m%6Y#vy
z2NFvS<qI4nVsWZerL=GSvDY<w+yCu`H=$XZrxvq2;M%BrQXxYDLb_v3VJ9ZtGWEI>
zlC(-!)VI^?t^7r0TZ*ca9e})Nv*!7wE5GfHYlGa6N1revP0ZXdf5Zs$!@V^6%W!kM
zmN)E=#i13r{SWS(Zcv~et#K<`r3yIhsIPIo4*UwOTwFN55g9gTPLiHl=>)IG$+x`!
z0yca5<6RmT$erW4x=N^$9&`tPK=&q;XRM9BozaX!BK;PuvJdksD{gNU$J|b8Tv|AX
z@!gdVHB|}XHftWCT&u4Y$A~Y<Rp#nFl9gJ82A{u85z@DX!D7+tr_r?4wfpViBbX3{
z@jB1Eh6KS{L>)k<-WZviQ8XD`NJ{56ovlf6nl)U^+~mx^_&)46T}uIQG-AN5ls<Ps
zAzLEy!r2L>HoE?$DQv+%b-6dNQFQfFQ&&4ks>S>3vOyiLomMo3-h90G&K93hTP--X
zK%I#ZkegJjhbHst8sPm1HW^QwRc~m%PZ>85%ai+wSh$nXG+C0lYQE9-ihnR)^EOOZ
z=u`O$J;Qz>C%8$hj8GP7ll10yXPg@43<D~Nkq;w8&eU=K225a3%v*HTv1hFwV&^PS
zx+4ct0L#bmoSPj#pEsvj)E~c7S8JY&Li=nW*xTXI+E5$fqREr5(SsW}cJ>nW=)G?X
z+x_sKaU7pYn<m3xfHu<RTW&wp{o&5Gay+;%<(s>xyE<>t;rB!z=BEbk)5h`OV!JEc
zVK?4CYNa$F=$lh26YK=p$nz^uDV{Hk8%%8Rp^9TwF0Olok|Y9Yu{0REEZqC%8?mNn
zW%YYkA5;8v{%I3mZ4=*{z^`s+9Ey!2QSzkx85K6~&GGjiLmDUr?H=})%#=#-JM0wQ
znI=_h%jTa9J~|VD)5*n_43an+mc&2vjG7X~q8ms9CsuuNpLei9Mrg;DVD{Z37H#?t
zCHJiFN}%i0sb}dJb!FIU{Ds>)`Y4fVjfmG~+#*Uh8xAJ#V>M$3H=S<wOtxd+d17$9
zGuRZ(b+2U?JKvzm&TlYcaYVyWm;9Mfz984$9Q1YRVweZnkFB?lak5b|d^*!!oVeQU
zOlp{Y@9NXTRj{6IpeC#!0I4`TNMN*wSHOd{<pQfS4n%IMXE=vhwyX<QPmZ7$072Ap
ztI(=5`+QNP9}dP%dwOMz+ElX5yX7>ZwLV8Nuejx@W(J+2oE98@dvJ3-r4jA8WvXpL
zwXyhYM*YWFRmZ%|Pz-VO&kb^V9lDa`o@iA?cL%Le>uHL)t35YkMr*nv5X}g<Pbmr+
zCr@HYv8>1uI8XVrf-8E|uO%9D)(z^QM}xCt)jQLaQ%>81Dbl%lCe<D*cN(ye<5oLz
zE(rYISna8qYC1#Vq-ntt^`|qXX5on)ZugSZ3TK}~j^S$g8Y;Lw_L7ykUw5aAj;J69
z5}H*Opwe;ft9|8Nl&JkKl+{@PJ>as$H92Rq@vx{ET1MeF>~Y>$s9CLf7R$-FX8`Wl
zjsj+{8dIn5-XDsM;-;jz7}(I$E6<W;!0WxdV|k~AKJKiqvk8q+T>jPU;t<{5hws6U
zDxGv|4{PyWg%s<#tr%;TJhhz=x_Z%BW^izqz92<&L96P(Divci(B^mN$}Z(iN{%c8
z;nH9>>jjk&k}Cys?(GZ#=#H^I<d(o2gFN@DtJ^(&uYNn{EA%J^eX%Bu7rS#&%uJ11
zhPJc4fx?WYv&Patvy^o=#_MX0w3J!}AI4+Ug!75y4W(soi@1yDd?I2&JzV*<a*3-b
zH9BTrm?lL<GhMwksQrLch$U~Bp@bl69sa9><N#2xXbUBkfQ;#jiTJ^;AI$Y{dqCMG
zbc-~e)3V{MCy$Tz#_NM(r}owET5Ah>6}nVB)(HKHZKW<V;{xvwO{(=VdJphlR240}
z{v6fr3)sOF1Tg!Hw)qHW6<M!U^(sLulS8a+Kyia66Lm3uW=9-x^`=;2MAmraM1#`z
zY`@TB7cS9<b;>e+3+-gbYGO{l`6<Z>(YQLt<t|jDQ**@u_QCGr-U9s9%5ZBT!-w{G
zBN)K{`g|qa>O4?td*lQu5#wQ;1Pqd{BPD8mvP-qfdZrKhWWy!dLT&Ls8Iet^EZrsb
zbdUuJF)e}K4?gn~LmgXP6e-3teP>@b2~-K}))+wT&fjlM9dr=9J~>XgyK3u=o7)#5
zqiV9D`OG|uAUpP2mtn=H@v_R9{hpT9tB-bWYqw!d=ZB1z;vIHRXdbu1IlEP_>hLj#
zIjWswVn2wIRD2_2A?39A;2JM+FXc%%#~n#_HUli+UBbb@=eqww`b?rDu}5IZ4$K__
zfSi|bnyf?nRc4KzJ-v60Ju($bj~u{f(reOk!;R<h$T-24(j?7WX)}Ko;IeTYi*f{L
z+`>Q&M*2tfP}g?e(sUd=t@x<3EOMl&Ql(B@SqOc3E8%3FNBq9L1+vE3399H`!;GI2
zxpZ^-lL|Bl0&>++<EmY1|B<WNi5}GuA4|DixmNSgjO}gbhm@uW*a=(c16I9N#k0=?
zw`zS*GU7l#gV${kZQ7{IZzzC*&%DIxEFR&Xo*y6Z!(U7MrH`DIZtO%Z8W(J=Sc){C
z`WXbi1VcXJ&AE!HYKz&ZR&tYVZn7J)+*Qx<Q`EQR8op|zi2dRr6>$x~t12q=7u<gj
z1!?bcXoss*N&6`$k{8=yXG9-4Joo+L)T8O^g5~Yg3|%vohM5BPhF1KSjJ?!qJ>ynW
zrEMBcjKZ&48)jOp?)vaDS%;T{D!2$Es}$q$UHo^XBJE=Hp27DFu-tjv$m!K<K71l%
zZ`q=9_AJ$SQh<+rd9uwkQgE&((VBALnHt&1a%N8y>CX1yb%Tv4p}=N{eKaV{hk;ZH
zhUeDn``mlYB&`|c#i~)A_UCbddIMCv>+gRS7H!W!Uyd>*Gnx)RoK+@t*L4$Y7rELl
zXHsd~cIL>cco68-21L_i)V&Lt_xXG=w9TY{f8dzYl>$vLYT|Yb#>d<~aV46lKJ!>D
zA4h2;!P1r91d03IpDW7a&jA{-%-$|>k&A`H9_Py#CVk4x=$R&v^&4#hqxYRrg!Wm0
z=}M(u(wLEi=ttzSbd}2Uc$M#k9_hn<-P@(M)jl6Q?%a!nb>~bgLk_J6ON$+SMMlV2
zlB#sB;Fy{m)^$^kf%#{Vj-_mtyn#!}i?{gT=lK3_;rZ?S8!(vH)a-3~fx0aA+ehJn
zbnAw**ZA#blJ^s<qn~Uhk83m%?K##=nY1+)vxZ6`gF8i(Pn}`j5L$k(4wyMBnx5=B
zy+_rR7;8A+?^Zzs&iV3U?yUohzI^<uqnq-b{%Pmm2~wO3@n(%n_XIDuhwAhjB^7d@
zoZq+fOp{TLDpr}IyxKbgB0bvhZdl6q!>LySX&-iq8nd!bibLBrIxk#vETE~}Timf?
zQlT3NMSu&rvQr2fp<1Z1@`eOV9pTgG4nSvuU}hslV}%rk&=177LL4-h<3YgQ-cWsU
zyq?9Em`uQ;HyDXd0$Dbks4|Wow|t&HK58)ctlyL|ijiLI@{GfOFx5s&&|(<HvO*3%
zZC~!u&e6;`TVwpy!?y0xJ01%Jpq_{s81^-<4-+c)gn<F!Y}IPv?lMKYiHvPs8eZZa
zz0r+|wQpUTVO^mEb)RP=#bm>-Kh`M?q+E;7&B^GwD$|z5u2@U(yFnz`=F$`uHYN{*
zE?IWc-T(&JK|KhQ61GT_-7wq4!P!C#eE_TS2y2c3;(^26)xFaF>ARptHjw4U64&8V
z?ow;!%E#(*gNU2!jlueweiT}oY?Y(CCO1)js;hz6uh9MUL(d@q|Ho{Q%IVl}3J-Ci
zjO%#zt;?lT<YJw2^0va-?$t2|Bla&bc`Rk2woen7Z+m^|FIJvGw$WDtnKDB<3~Y+-
zFdsAJXPCVk*%$S2YydgPS=gQk<!NYUOwD*Lq)IS)UB>)uIR5DEbe3rZnW%d_pK)Op
z{LBv|E}*ipDITb-9+wC5nsjLrLmvmfSl#!Sb>SQ9h-m6g3&D;u&|`-2K}V^Q2R2eY
z?7VT##|l-H`JHW`EltVXsi!d_j&SL&oS3XCv?ZKI`MgDrG!25ro+N>ohsh%CSLZdg
za#5ji)Kwl=cIIi5Iv@jNPR}ZZ)6@J^gJkRp-JU(P;AYM<<^<`+$&q8<yKLX=c(uRo
zMQG^D&=kb>4xN1}F@I)p?6R_Bn^$*-e)v#esOYlClSB(IZCB~usz`<)o7Wjf)wjA@
ztJBJ+uWPJ&ISu=tBgHp`#{tjal5N<S{A_6|<05;UTCps##T^fe<iKlbvLIw<7Oyn2
zQv@HM{-99U4xW{Cz3lDToGTMOXuIM36!Z4lYnr3YD%L21p_=Y3Q&|ushK|`~tVivs
z>s{Nu>!G06gQ~?8zRv9Fxa?2y+(U@j?eDY06#7CuX_uyCm%SCY#70d;;pG4hmAini
zc6lICTUh0dkC;?Q-Uz6tq<rN3f}!`Gb^LZet-kUK0CtY#Hkb9yeRhe^FP;m#jTTC0
z{ULXm+L)>{Pw>%PpPezCz~hfN8_k2auo?*T-KcA|Mww%^*9g~KHkT^$D~J~S9?40i
zbEZl`Y#cb$(|VsDiK}beW7?Z;)Np&kS#hP@Bm^1`WQ*rOCl^E1$)WgrrH<dl6ZGho
zk%5v8&p^n7cN%-4NqoZsD^(gr#{9}oZwI(s@Fk(QD86cq%t*Y+u>xowuX+OXhWDah
z(a*8{f>U|XQGf9AyYdg|EQbxLHM@nK25iyC`L_^z==0uuKl!D2?BMeL6LNbsQur0l
zZPb(ih0fe>3;G^cMM)}ht?hKySUw+{Svl93_PdRgjJ}qkFe3!N$GmG^%hjY1%6u5Y
zqV_^!;N@2pV%YgKA2(TfS6`Wz3BUUpxZ$MVw-j|56rJjK>9OS~o$4XxwW#b(sF(iu
zrPVjc?4=jE8Tvelko&gpQ+{_H-J#rL?$&w#$j%$Hrq{}P*9Y4|&Is>qmBof@dZ{~3
z;jHRm-@5OZ3?yru_H5P7g~<tR;fkDDyu_c)zo6~Yc2=1UaYb*ia=UXh)oSM7g>dA0
zGblc0|3V)~f31qgdH;iyeT7bGo`7)cM0SJT$g5jsl>=va_>UAl+!d!>D@^*{PFROO
zD}UCYDsqF-Ua$F}fMmW6<+0oAX48Vojq!Fld21j5F}|+{FTR>gX_d6<Qa*J)oHh<2
zoG@V<Bk?FoI7yVVbQC$;9BnOlFVD-LduP+^i>N7+jIjOgi{u}bMhVaIX_cs4bmpM%
z-b6xH72Tn6cr0OKMe>4|lAjYPs-u>kBvHnkO0G{=q=K$0J%Q(4@j}7cB%JIhddrt5
zyJkD>cH5v|@N=a`%Hlkvm!#LagHwslk#hx+74u!#=H-lk?!ZRtFSwa8UZG+lAW0W>
zv)cWHL1X$n_3>qAN^=dBQi8lXOQ6k@w*vvjU4Rcg{o*9Ps_({S#^Kdl5p~|L$=?nX
zZM~j?25^BWcZ^k$@kS*UoeTN=S4_F;?H;cny#nc$Dy$7*uggt5#t!&`RVcUY$rR{L
z8J9V47MK}Ogs}>Q%a{loPVu{(e=#UrGhM-9cl+8Kp$G}9L{rVpVr``Q9)wrAEs5Q`
z1l+C3y%(C?4^E~l2G*Z3%!+Ex_I*iu*_eGcagA!O8oX)Z-N-VHY=-r^l$o~zwW@6@
zFajHKc%S;5KNm%RbApK0iHTb>LKNiBXAg#N?TAcVzHw>Zo^^iSbiQc5Le0}SN-3Bl
zn0;}#Re0@Jj&P3pSAn!2E{op+nKuTrUOCn4=!HC0&YkMEeeRJx^n8jf?6h1c)WpM9
zr=f@KE1rIp?Lq&G>kbX{oSnUbdp~}U-8j&)z5T`;FYK0Lko{{9dM>lEb|HgijA>KO
zxumntQlD-iyd-r$=HvgO=`6#Ve&05(QlcOw(xB4PAf2Lsv~-8mq&r6=B_-V{-O}CC
zFuDc|=^CRpgaJNZfB)loyLaqh_kCa2d7ht>W5t@eVQd$2>Jui4yBkA(FTaDi(Nm4D
zAF?+B0xsv7fZ>lE?BS>>Oy+h67Bi4W&K~H;3;X2vi|Q%n>2nmWKDfJQu?OO&rJ5Q7
zN%sO&Pey}dt3R}suQ=ml!fO3q8{Qm$d(LX4XZ<9hV*c(0_<+O*MZ+F7_ouZaP2xE;
zLyw=!w%F4W)$nt{0>g+1+6^oP_OE^e1cbt@!&xk<tm@Ft=$%pQP;{wU=gLg0-v=1a
zcU!I658nK^?+*Y1M!g%R$`G$*FYXg<>3*9B;HIjdm$9g}o&}6Mz+jfX6DR4vxblLT
z;G$Ql?caJ~NZ`tOhJg#$ZcNtG7KL+8q0lYF3w6qCBUJhpw02z37VsJ5%jnJ9$SeKM
z`>^aokmed&%ul|K@=?|_$r?M@b<nY>(}#raEKN~MfgNMbMPd&*phd1e5!gLlQ_~02
zJm11WCyAc{!puTNbXPJ{@}lFoF~yQ~&*Lq#+R*2p*v1?HX{L&ES~0J}db+SnymkFq
zL-tc<YROX2emV)bb2Orih@jAvmdyNj!Va(3fUcj>E+p*>Mcrh%B`@V$KUD&DiFEG#
z*uThTlb!dCZkQ>ABZ+L`{@3YGZ3gCb4{65|2VzO&AccJ~xN#i1+L*Ls$BMnL9j_!p
zEZ|`iZD|&OVlcEN&bgPg|Lhgu-dmade&BmeY;rX4_dX=mRq0WS_fZPUB@PF&aWCGG
zhbNf?ILaz^>;#W)I?AkkI!`w*+V~<Vgwm1)3~&$NgB|e*)g%D8ax_CCarTu#V<%fJ
z8)7kHobac-nyw<K)fDpr)h1%URb*{-upAe|$jQg{-n?1G-n|LUm^Rd_Q@xx=^<ZhR
zGoEQDb5z$?p6dWzOZ-NKnoqN?v?zth*N88II<q<Q%aZBo$@O0D1@Sq3K=vTVybEJV
zZCPrEUYlvy`m;-zyXEaK;{4{hJHV&F;HN6QgJew0Ewd7grIpm%d+(1;++qSmIta4F
zfcdAs4Vpwqc}XK==<wIsK=AY|M}|e6yC#}?#iWMVJeJ3M#qJ#r+_Uj{vbZVkm5ggi
zi?;|rt-?>=d8S6UWx0|`UA?LJ)l!j!PBg(hjht=xO3(Q3$RFYQ1>SExrmtD`8ftBh
zixYb3hYl$^nIM384KRCEN%+9zXH0R4rnKwGVn{}fNP9r$YfW>}SX9Gel}6@w5#e6$
zub-Rp&%?Z=@NHHwR+z=xn(9UBL&D>dDO`7<iTiMXhf-byQSkmn|N6UF&>SgS-8QGL
zf~qF8S%X4YjEN!7JjC{V<|)^{-g&+o9*t_?e?ACP`dY<EJxW&kDo~HbDN%^e(Y{oU
z^~c9?wWqb6)<`ps!Ao`$$XhY!M&ydd$Ak0~nEcD<k8B0);ytp#`m~<Wiv+5@z804K
zBrKRJ(BvTx@|VhA=Bq30)MZtba#XAFl2KC~?sArCt5q?r@oO;Ih)7FAKl~}^m~1-{
z2AlKdK=K_x-Ss>`=>x6e$>eYz%WdPMCdfe)SFf*QW8K;#;3_u%dL@Tfhi#IDcZ_n0
zDX|n{83u$BKeFcc41ptAjg)V7NQ@ly8Knk9Z9YowVEJ~uF!gmg%xfeFvs@wu14~2>
zsEkms*XwtWgq@wjRYC+nRE=LbnND8kDMx}2N4}~Kf7D`P`j!#6<1tNO{i&u{lSQNN
zgF)`T4!drhG$1L_>srt9J?GHS^NzmJ0BYiQnvVQ)5)EYROr}z;r;DRd2^LWcnJR<+
zPJ>c?f$P~tGSKRb))AcFTR=%mrPhlnL}v4s^fo3MYUcQKP~d^9RA4TT!NZY!?1J6#
zh_qqb(LrXh&Ju6t)Q)=v7rhegU);S1K3HJ8q);$E%GS&I95}txYh2Hi5ZB^Mwgfoz
zUpy;y-zv_q88ml4KwGXT5sgKIi^o!#!<90*_2tY9Mm%ADHO!(|D<v5<)h2ZAG&rTb
ztK~MI7HO>@2J9Gf3Kd;Uu}iZV@Pqo@5kh`7ThrVV1u4V94@dIcy$ks1zjZBpzE3;c
z*?Wmlm22ZwL0hyw277POyh$4&QoHuA%lm5GFHenlPB#3THLd&oNUG_2gP@fX<qu|V
zfApHCc5#ahyIo(}E1U20cUM$ja{HGGf`6L)-UwQWto&9UGrd)^uT^qJ-GsArzVT^H
zDetX2FN(*+gFfk}e$~=h3gv(RO00x5Jh-tebSvFd(!}B4<<)b?-~@ETT~xxSTeFXs
z8s(nR3h#Qn@leZHCQ|x4a`_8Ls=rj$_m~nP(s-6d`VQke<a21LY3@a>Y7cD?>E-dm
zEy-D?=xMgebg%YPmZ^WYB`eN<ngEF>*oQ{2`SATSx}~uR9-<i>C`yhN`=9$K!Wwf*
za9A%dX;m|Li5}d{k~zv@+00SSjC9m%9zSzC<qRP^14J-+V0^p8H15beTqr+GSqC;&
zn7Vh4SL=8BdAWj~&zi;lr~|#Q!q?M7b<)C`jYn5m$8EAgG|@}TM}dE3H^j{^BO`$Q
zGeFr=-(}Z*-F3V{QZkvKX3jjqu(O>v)vfZZiS^8pZ>RRh8hE16d&|c-d<e6yypc*i
zn^LO~w21NvC~ay4=n=!eRJq0g7eObJER?`kRv5a}=GwgQn^a2$Hw0g0vCnw$fN!tC
zbp<e$+5DD3VYyU|cRsW?9lW%52l|J3ElD}Q%R!;FGZx@q&FL60=fvVMG)eK3;}k{h
z%9*Q$PQvjY=enfi`ecxKd}O4|IoFcEb6(SDlRL2aqD<qI_R#`3FOSBWAWrNyLWx4M
zuLMIGtPim_2eD|E28vxAYmC0|+Pe<^`DowrcUGRx-&ZT^pU>Ybc9<?$2#OP-KHD_`
zG?ta?Q28j;${B7|;kDYD`#`Uy+ZFdi#v=jyUL7_IALdTtW3t2?8?lj*Fj^(iMIEX+
z5na4hz(HzEuSR=psCL)<c~)T2)|&UAn=at~SH-P~f9r`lnG!;Wi>CPw{fyd!-)?%L
z2wSL<x3-Fwfs@~0oWnk*ZNiNb+3#WxYlRkBi5wtU*GD(i$GqC->Z%<MCcF!>g5D3c
z%sogtLN@ariIu9BocI|5He>_ZxuL8mV(E4`-_CE>i-qiJpv6PinvC7pq3G8cHa-}p
zRbb~%b{KZP{xS1csH+YED_b@z0`Qc~A~h6U40e*MG@(U!C7g}aQL$8#)?qpli7;Q(
zf#lq%<7Dpv$xenCEa2~tqfU>tN}o55A`4xDGnVr^Ws|j}pz~J*qYjHj&5e%Zf67Fv
zeH+`fv*ZKr6IH9)jJka1R~);GnX0ZaXMvu+7WJ;|wb7`$WWx2)xQ6@c^mCzYpQE)^
zZU4r(XanQzA!oc2iuzqJTo8G7wfqC}(kM*dW*u}tLuzyIwk1GW&&Fw@C`EAL3{Z0$
zHYfc3W$!M&Df#hfDSimQqaEPsqgk)y86=$#*h-;uqY**3KFwum*Zym{U~LK=Sf2gh
zPE(0-A1)x#?kginSHI1<slL8%=w($N8&|Omrg6L7wytNVwDBm71^QuI6upVv%EB5I
z`6~@apO(kgXmz(Hzo4>_QX3*;F`k@n)CpMJVasiw%<0a9*?KX%?JvkRD>pg7c5d#&
z=?q7Q58h}N1W$&b!f<m<(9%P{@6zAAf3`Tl%4g)YNG<6-TJ)92Czn|IunoLh2K^&W
zQY1NnF13M&Rojbtw02$Z8l)1Zwko95<d3QGeO;TuIcFpfV^MX-M*eKO+}~5r#+vvv
zVeDZ!oB=}?+mMyUR!JOlE!I>B%q@!0c2oma@&KK%XSws=*j2gRWuQbuT70gZvEjCX
zeqR)M|K+rR{1!lWx4&DpT`BMM-`!XX+<Se~|F~Cdb_%E0RnglUSzgU+cIXFiQ;;h|
zkBK9mJZb^)?Y$|0Q`IWJ%!3DmiLbo#KL5(VuNIsI&B9+m#J)iCI@)6N%kBrWn;vaW
z!@|XxzXzhIN7K8%v{vY654O=H=paiB8sUd+Zr63@M1I)MX1#&g%?_@E@pi>3q;5)*
zfFZ9Y?vhzj#GX+HgG}TZoS3nrY4hiFo1bSVfxRxo32>h;LiNsDryOL^5x-AxeUV7P
zZy+8^@K`xCa8IIjU!6^|HA!f(=xcAaTl&SmABukGjjlp7%$dU}fLhpNrbvugUtX!b
zrKIi(7y;^zK$g(2Yr9pRF0H&f?8m&_WEQ2`?eSgfwP+!%OW`LkxDX9v$VQust#$Q8
zmQ@rC;p$Q`-fiNPn_8i-v)F8YCBf;WjbY2V!!w**^69JnQ@_XH2cXk%e4Q$$-@(d+
ze$6XL11}!5E)v=Es7VqMxTkhA?u|r#=q7yFEmtTPFsU=F(@@!E^=B<}!>uz|yoq(}
z;G(AcuSas3E;LzsIaspwv`mAz+d1D5eBnF5=eIV<k@4!r$yC_om|?B?Ee_Vx2E9{|
z-O+ykX1fdVkHlB_IR~}&Y~eiBxaDzJ?ILz4WJc4%qI%>P<@g2W!yG1a6|$U(ee=u*
z25*n|t&?N4g>AW~{Ux21PupcBsqVle(p8!IKjkEGPLH)hg34>qp^D0ZZe>~yNM|Q5
z?-l%Uo;$zt5#AdKO}2tIm7E*hR2(X7|BG7O4ZZE>1&4RrnjV^iy_1&521~L|-=1!#
z4Hk!;)6NB=9-lBq!~Z-TO-$dqm~0R{Rr=+HVQ1P>GgnA1UL6X<u+wD1oZWl;%Rh80
z?dr3I$7>B{b7(M!?e!t@<~n4rQ9t>8F5l!dCh##Gp9j5$?3jR2<zBM2Ed_Xe`=DN#
z=Vo>rcdqzFH7MAi=+A$_Za@y3ovgp=%`Ok=!e2LPc7z@L%>;3*%Y6|wr=~?@0gg9a
zpJ&mjOCjDSnE$m^*~>1y7D4VG0j(V^C$p;A!g9@I(*dV;ayaO$A<^gds#&=iU(3+1
zgm4<$QYB!wzeZb;TWTe96fTDvPYOGuzoNv#uvTh?I0vIl*)(6XrRq11hk8;9HGi2M
zVVKX&Z@61~vO)IW&Hf5A@2t<Y*1jZ1J4TuAp&xCD>AI!OW}-hqz9gn7-7y*JK_=hm
z;8KUU6xW8gQav5zqhr8tBE0O50Y6GV54j%j{=Ehw*r(6;ucZ>fT4MPLTj%N%*j%WD
zZYTW;^?ZiPyeA_LH8Ti_dA=hhXzC~_M0?3epAC$zA6;Y6c;r?xI4)JDKZ0qN9boPv
zDXbN0V;-E00}FR9`y$iYwK%?V?YQ>1OA0*e4`qkVgIU>l!9ntIs<Zb&_j4xP8A*VI
zb*;GD`0obhZu&gi9qvcWF4oBKh5j?$Nx*8mjh3T5qDP2CXtOyM=3m>pL@~7xVx+08
zGzY=EK!19c)ez&oGTwS~<-WOXtpj)_-Du#bC)8wDKEKtIFWraud+MKT;d~)6H+%{g
zhrn2lYlTdxsq}5KnEh*H6m({`-Ywx66o{uCQJ0GMm*LxRaWOf-o>moP{M<2M_m;f+
zT#F(2Ci<Z3@HazsnDbc_S2rqssJ_zn@E3?I8hk>45*@wJ*#ib*?WpZ+CSoC)rx?$B
zv*I);@(1p2FWe`vFzEBQ2|%<FH-LYkh}P^Rk?N5+ld;P_=8uOPNuaG1_)So<g7}ng
zk@F}hPNRZ)Kb%42Ps=XK@4o5PzyJmjfjR{D_5HcC$)#`XugfDBE@NpPEpA6_tm&4X
z2e~Dtw9ZURIL{{X%rt#7&i^Xr@`1RfARoaXg1tBajDhnnf@y(QB^mP-G6<$gUx1UQ
z7RB(=kh_=M@0CR@4*B<213mS6-s(RQE*!>9`a|Y<GnljcvOW->*Z3m$OE^J6xJ+@K
z?|~rX-&q>Pw<%{5wK#6YFO{T*dLrH*qwj!v)TxMNZi-1hskz{b)8}@S@3JXcF30yS
z*K~4B4{g?S?M0F2BADc6!G)b9hshB{|B1#jn9)ntkb6=4htFxo`S1(KB4$jtPv15m
z4+TF+2Iy3;5z6pe@i1(tJlJIJ*lLC^S;Dyyhr^f`X<69juTPAUri;x9Y-b|0mb$43
zW8X_f1Z|BrQnp3+KOlbv53`2&q7d9Jn?ip=$Vo_!)o8nZaK)m&fj%kr9SKn4rIAO6
zPu;Ikhc>(;kyV4hvOxY9Ymb+rfu;yUC&PxlENtxPAR03tG3L{77~cSP>C=I}S`g0%
z{D%?E&f-~2O43R(euP}mkXA<?;W@sIuE6iK0Xd6gR}|5!C;?F>=go|j0J&nN26<;+
zJVPO@2;84093zKKXh5_xu)Mzu20g-F6N|Z7vd1nJ!?D5xJx+o@>;~icZ?r9;g&4=Q
z7R9(D%m_x=I%0?T#xOgmdMC>ym|}<$pg0<SMm46f_M@IRA7BK?bLMT&QP8GzD=KaE
zP9-+jhnO%HKVLW}-ZUDK)(|970^%lld3?n;^OED7mB4`$Zy_%r)I2Tn!BTkSaljoi
z6%?<3{MC(I=obTVgcZ-@$X;osv{N#tY&Fh->lVRJ&u(r|gf?s3PLaH?bn9?d7k`av
z&hHu28}p&71Dj$<NR?Ixz58+=pjv1*zRC;akjQ^>0-Ont%D0Ue>Yy#r_T#La-vQ58
zK)AX^u=g!W4CroI)o8a%JPST>B{z6J`gqQtv@-iKiP@=WPhRs~Ym{p*1J!L4&mai9
zQ#tz>#Z&mp;>DaRK(GCC_##>y;{PmvX|4~c<W#}l{qF(N<Hun7A<UCLEr1#Pkbm6|
zG$X148bA}heu>_`Fh#2t#|1{F<@mYqVTarUEwEyHF-H9wOL4rfX5`QiiO-bo($HnT
zKQ>(S*&4J-Perkq$e<X5sxPzp(D)>=%8!fSj_2q9W%bR7ADSC9LLGU2K8DDc2=HBS
z@->++-F>G;eF2{`rpX1+HHnL*io-xt6nX4Bq^rhB>jEA|?es~X1}2TM&=F3=<NY4b
zsCeygR364kehO&M9$&it31Q7+kA9zTM<V^RD*c{4i~XypkkM0Dr6s$3g9kW`!PSuq
z9;^e`#Kk}Gw;Esvy1Q+e;AbB6+iQRy&0WlnoVhzqDgua1#PK}gGv2ty75ynr{>mNr
zsxJ)cRH<uIw`@g$Q<VicRhcg45_*KOvnqPd!a+TlN=~RO%&qjvgZ7_%J=psPmBUMs
zzlCOLO=||uOeGs}PCtlcoqJ(Nb9^=#Yci@dvU>fj`e#W$;i{q)``G;|Zc+Bp9CqUy
zqW6L)q1rqvfJ#J^A%eS$F*5Y_IT^YgCt8QiYvL-Ev(7J#CiWp~N5gAHTh!LOXfdy}
z3?ct>|4x&uo=z{^Uw{;D^fFE$jDq2Eb<h+2z*O_`jxq%cy8Fd5T8VP148j-7;$N`(
zAHMdk@55nIO*h3}3X3KO6;!J7{aDMP6`gjH>n96IVoH-06sh-k*R>qCTsw?GFu;^1
zhI;sp+#%j!VO54H9m@Rm_Yz`EG~2)onrcd3@H5Wbi_%rud4)cY7!HkD>JkxVikmH|
z5$l~J&3@x1AQnS?8W`vL_!nQEh7rYoQgJ*{;Jc>~8embx4S7r5UzuY@_qM<OnHk&T
znvJ#OAk2b{z*be~zsn)sI{gn0xyY&T{V}+kwyqxZ=Yj&yD5a&hTA#gE*zTnhL-$=6
zynI+t#mcwa(ina!+B@pP^3)!~>#i2Z>rY@Bkv+eLs_!ParYnR7s}OZ-1;sm*0*-so
z)cWbKVe%zsc8KI-)oB4Y;!hb{XM94B2sb_xj?A9Msw+XMWL?04pO;6R9A->iu&Qaq
zdRLXXg9(^<#7BQ&8qD=ytjA35Z4dM-ec{J=&x9`&@}s1g=2)<zVF~AaicZ=GGD2{=
z{nZPs@0IsqwL`{JJCJXPKUX*Ck@az6)r15DVj2riU-TWi3x)|{>yDT6S()VJ0#8b%
z>Op5`u8ExHC6VVjYPy{d@Ln2T;dNn3d2!Mcj1JU8IeCWy39xB?(y`flVdJ^|rmm$!
z_R=+-IRw32H{pi377o!>i(=EjUnRBmzQY^s2amCmqXUh&<49rLpAIf@Kw?bfT$-k#
zo}t$DpI=h$yru=@m%?APz(di3i;o(rvguXQA{A@joQjno!Bor>a?pjnJ0VOF^zf@I
z%5;TFh4vw6!l)Esj%Ii@oAPwP!D>Cccc~`0k>qoc+3mv1Vz(zbW&|3{?S6RI!KC9j
zwi-`&(l^{BqW^Q-?<@60;E7`e=eP^pxuHJ*L%B=FgKt_sXO&kC-8i!WyndKq=(;hN
zP<jZ)E0SQpNpoJ76;qTmwZ;nxahP1h1*6#cys^h9MqHgxbx91CHBodL{vA1qv^6@j
z<Mv+;IVer~!JWkt$EjU&jdu7R6BFBKya8Ir$+3<x;8wEUU?4!eYVVv(HKpAlm!q^@
za1{7;s2b6EHZGexz(?MGa`$}P{9N2_t?SV-@x}va8*Z9cj8OYT-!WgVmED>z!LKH4
zBEDGj58K7;zS8dluk!YCYvhSg9V*aWeLNar73j=o)gc?KsYR_yHIqdQdqO@|D$6u~
z;ls!HdDrhnRzo5nIW=Dwg~I-M>jn3oWRjhOS0pDCL}foZ9$R_r`J;UD@k%7;dTAe#
zj%P|Vln|~OrvR+at0=$aunFD7#I^N$mECqdqT!M082PQES>P2Hc7aF!<B?~H%S8Pz
zW7RFf0snw>-szmLAuRhKrNH;pNd)L(4Q>Itc2kKZ56)5Kyo0-ll~Ux>X6>_uDwxsF
zmjg-Ul$89A%;B-LiGXM>fAk{8Y+tW-WjZKOA0^GCoXG+6yXx#J*&K{v`xh_+l!0&0
z=FMq7ZgdfT3duP?=2HzvE(yuD1b|p=yXaC}zvyvBHB^3|cU<1mp-wofc!pLcIh?$>
zFbL1!AKcZz7h=_Et@iaj$r8Ig?N49^X^-4G$d06nmN2O1j30G;zu*5!u=6LJZseC@
z>ds24$!JNgaSB!Uefg||VdKa3k7pU{+Ur{~?g>Ta&=)g>?`WFq4h4KvQ8Z!<?akHk
zsm8v&D_3Jks)CO4Vdw!YVdtsUq1XI$ysymING7XsDt^Taed`JA!z4}(TJQ6bum5-n
z&0;`HVWOVK>k}Qu$3*i&DSIT6%s@Q_|8kWoBjGHx9~&8eUKC|;7H^N)U+a@S=mJow
zSphX*AeLsR;)@23Xe#ke`4}^qWHL|%@_4-{2-CznxQs29@5>)_ffemoY5rZ2TjcAT
zDWJgQ1*4mD)YC#0rT_d?`NaF8Us}cuT9mAmY1mrpVAjl-XeA9<A?ww;PR%l1S-`Vg
zT~U7#BL1d2#K5o=X(2&;%8-XmUihKa=DZsbki=n|`q6A2o2R#<0zwUAjuShtjYQqt
z0+d(G9Txfy-&#<2bne^t|0s+=12}6<SHh}7jrJZ9{|2WXUng6(XhVXgV=<xS_v8tv
z$H)c|V$3{F;!Q=$csvjiYdptn&ySv|^S{tOnC<*ASE(%z`U`~h%XAyNvbw$0Y;<ba
z8_RVPQWF_TcUtwE$zE_6Fj}h@Clx&{MvJRHU&uEw(d+aGk-%9hB7BBeW>=L&Cat4x
zL5COj5kU#FD7#O=^1@E1wb7KKGG@Psk;mj*>Fe@{^lVtj%RIb=bB|r$^BdcmKlX7j
z?W@C3jqu6@SF$%%C;k7qp0%_5%rBa<3$&F9citHoYx%_iK_A5?c0}n>I>!w9mvJm*
zQan(kGV=2d%IJSP1aHSgJlXm1&e-eT8%dRB505(8yX=pX9E~+XZ{ISLZ39k>os~vg
zm+M1*KM8<Rl6VFvHhY_K7d`pqa0$nFrCcHX^WDk(i`&att_1M_=XnA}cBo)w!)DzM
z8<V_=&$}jj-OtIL-bX6d%hgeDZ4FIUx)<lZH9NAzNBer6H&8Fv%jEdHiT6ug^xz&s
zjaI$}E@>v4JatK&X%oDi^cRPX0fGP!;d;-cP&WC=Ofv}7d|1}2P^SAMC`-go77!g6
z<r7zb`lZxps}ALgHH^XUHH`s^sE^#sXewddZ=|dn+Dy7TET5!vyl+^S>+P!=9pN_<
zGu4V*?yAfw_nmE}dj{BkCcp~D(C3oowGDBbxp(n{Inn?dCq<R4Tivi|Uz6O${m&Tx
zf~F#REbba1W$HB};2ZHN0G;hBbflrIl=|eGOw%}Gv?HCw{dOJWjq27_<y%w?Z8lVX
zO<&7h6R?&d(d?Grp4VAj8%B~0b#hgSrH(`kUsyVI=ct$YvSu^CfvKW=Le0^qt+whQ
z(*Z|km8<gvMlE$`U{A5+k+~dVvvqSkO3G?jS68T<t)R`3y+!hLMFr?=iT{_m`4(DV
z=~mqN)9klWBZ31k!r2gNWi%YJ#2n72Ou`Kg{dzBjrGJ`W*)mg#`+rkP6YEDHR{hnB
zRXot-s2@hlwcZ8*urtFAvAU2WlXdLfyD}&3&D5e5Z1Nv451UX*5@XA`B<>_-h!#8!
zib-}-@xMJ_76zN;(uTZ~E&)}sN=3f-=R5mHH>q=(&i2&hzGJ>5ni7;KzxfzREb;kU
zlf+Sl021&}TkI7l+lcW*VxqHj62*%=`d`G_n;*TTrRuuj=vo;YK1s*93)08WI7)~j
z^>CD=KR>=!{SX;cDBYUC+YrEo+X$~A=n435<_mdDZt$+?yhsby5^gY&`~zdT!9HBc
z2e4qg`MzkM>z(T7_6NiJ_RPx%HoZkBk8F!cRu+i2(`!~DmWY?STAL0x0mM*?OLB9`
z0yhj`r}+Oaa5suniT2mPFb|+ric=X~OIm42OrniESH7wxaH*<vN=|j<=zM<op>Q%y
z;~#5fLrj@PyXhOSx+~8T?$UvShXJ8%&`Pb|M&@AlM`EnbdadRC<_<6TP{^`-+^mS7
zO5riP(85s-W2$mR>i+&GJ6oM3{94n<CkflX$aX@iDwNM|NCdJ4XVxf~`9u@Dvj*xe
z(p#h?CK{a-s6;*NMskD`m8eCPpqomRu2tin5Y?r+lrr!y2fFu^uIwd8Ib5pG(gi*@
z1m+V%#~cM6NAHcO+(of(;*Y(fD$bHY7C>ph=q{b&fx+Q0;LF<%;izB)viOH@(tJA4
zZfto!j}t;{4iIOXzY+%^;<j*&K8J((fYP_68X9dLZcS>h&Mx&XlJM=b7G^xuwzz`6
zwjYq;m{SRuD|a<8j0P1QFMEFC^!1TnPU}tpQUY(#zyDscULLNzvso;q9zM{u_Fbm<
zZdx}J5$hFDAar1_kW!I96hG<LV)A#F`y`pu)z}iI{2IWTH;w|Q1#?#2-&3OHZr6}5
zhkmVPjX55sXo~Vnf$L*=Bx)|*Ri?_2-CkcHK1G>ozr_^VI=sD%J&*P4G+<OTK)3Om
zmoeZx>vts9mb7_1Zd9uq78gnWAhHAx3&Y0~X%i?j5wH6McYyjIX41dvHgXq^5fGpH
z-1i%fJ2ww6@xE>qtU<Y0CAWgAj7j`MWIxW;G{$8_f1nRNe_ELA+eb_R3|fhK>fP62
zSwJs()Pp|2i}k?nzB1zKTXi5jH)Dqt#->It()cA>n14>x1Ho3YU^mrDEP0j1(TujL
zmvv_+N<-7aV2>=*N}MRv6s;<-I}ux3EPyDNG*`AhhZ9|yxTVP!;QgqIZB&bP`5#Is
zB_5-o(-2GH+j#*Cj^xtwr0*kTIsbcGN<9W3CG?KKP_Yvum4w65>W3x}ZU86J7JeOe
z*;;^)dI@SM7rT&+W2y@R=#c=-=)4h5Zoz|zb`jp*4tYljGPZ|4aa|!rPC;V4XLr9v
zC`pb!(c<;mrc5AtPv3tec;^Q+?^qs}zAG-xlbq;LY*g4O>^_9ikEeHkxFMim1tO+e
ze)kT>mQ6>i1`7^Lg*c?#EgM|q4>QG;M+!nM$0Hu1SZtvqJq~b9Dx2%i);Gq?XU`*+
zXPrd3A1!wMQBXGJs9@&%V;fhoqZ~p!zO~N+9*qV9?{_cM)@$8Di3j4i0HHq>2u^*_
zf7gKn)C|0?Vd=fAyXNbd$?ZNZOJX-M`sd4{(HE>o$?duJF_=WWnm^RPF-m?r66GWP
zZl+KkX|d2wI*t)c!ETg~DRhubh!f&RetEQ1-1^p9cX89=Pco;SDT)98vjEgImDAv$
zUr<4p?V)z0C(x=(i?9`)G6(Pe{d4SHrdCsSd$$PV1+RE{>)^MA5leTXcFO0HXF-#r
zKwxB!;R4S%Tp)zYV_Jatn)tz*`c?b+eR0iM89kklO00miK7C)flb{BWYu~!5sk0q>
z<9!yow{{rxa9)~`ZB!$Y_yAYVLDbK;*VHUtUF-6}pJ_knWu7^UyFr&tr`y4@s_=$2
zdsPPir3mFQE&xmOBpL6Q^|&37Gqxs*S69B}C3!tp?#}Cn5^L_|1T)cRy)kI}8cjZD
zfcQ3gm3XK7d&z@%Nc0z$i(UKL@w-N6qb?V%wY}uI?H)l3z&kAQGi@(*?G*-bCQ3Fh
z*n1nd0rJ^S?SJDA1vI4wM099NP^^*z&o{-o*ll5f<|>aZ{kuYzjwb%IJ4WDQ*6p!X
zGqd@7eJRN!*kbEQ?997$xoabLCY%X<ohH{Mg;piJ_AR*qfs$Ub#!_;f;f<n;fsBgU
zi;47N=CtsetmdeAvAEyYYpJKhI$(-x@r$&pr>JW%o#n`7>|yuie24VGSb^{V#A$g<
zZVH-5j$h?y{RgTJoBy^{bwlAJOhJH^1U*-tU-xM_pG}8_Bjg74iDcVgZ2b<02J50$
zE3dmo+dDC&UC=hD{`{W(PydI%Hpyd|{d&179!B&Yv34#ES|16ifTSx>_w)vbx;=T=
zH`FqqmaI&hgQ&3}Z;AP`f)q!liny4Dx0fdo#4YV9YC9{4KiFi&<a>7qfyE}mHhc##
z8+l`rYV>v16_ORSxiZZQFz(+jzBUhYOE3}E{18DU7+W{i@yfA6em7@Qz7}T4_IOk0
z4YN4YvCh@YtREd&?2#@n8|KCqEMs?oO-)_&drA6T0go{hf?q>L{P3Xvnq(Zul>qBa
zn&V<?D&^i1duO}*r^(lEGBr?W>lKdPrO{8OwN0P-7Pf(tiZ2qtVT{FQgWbfZjg?av
zB0F+6wXToiBrW?>?9Is0;zV)TUB`GIUqqX(FMWYe@{2uVwDKKUa#G54|6MtfAgmz^
z*<LAoKG=6`ubGGwdDlo6BaU$(2F;6zI(P*@OO-5$ywc*z0(6Zr#)Pso#{7QGxtezV
z7`h9${8HO+P)&gPCoGDttMdG5?SW~|-4*wBj^kF7#uA;JTE*~GJKcZAwT76QXp0yQ
zp~Q9r&f3pq_w-vmLMkj;4}FB`+41ckr7R8*%K`m>o}aB<!Jo1fI#s<3>I)|73KB~o
zO`GGg*<n>~K8=)-ku$lHe_f1*bV`jO-*hmJL^uuBH-UFEhGLGHe6u>Kjs7%KoZrYn
zdOg{`OIFHS6R&J<m}Hpl2`!%Z^|h!S%h(sJj3E;v<?Pz5h0KGxwpu&#6yf)G$@v4v
zyUhO*@L#i~a)bIW>p>8I1S;rmBS>sEX+t43RDx@rPB*r}sZ0T7)}s7KO<D@q$cPm-
zS&a~6{~N>j1s>p)yICW3<|1MoiH#vrO=+<Rr)9Ucd6d%pLC>bIEz$-30sX|D5lq{R
z`Ou$dEOsR|T1VEw&(5S90%)@bcfe9S`jW+}bv$+r-BQ~D&L<{yGj8~u6+BB^jdIhi
zBT)p*<BYjmE~lu5Rg|g}E|w8scyO0lpjC|*h%$KB%WhPT?PEBK(Wn^Ngsi9N&IRh4
zmaD`{xB#Hk>{TQ&n<(6a6(Q*ZfPUoGP;!f|eF;N<#P>K12OGhNhs`^65R;bDt46!o
zUvR@)XIgHHq{$Fijd&W2F9jx3s^6Y}6w{!Wd^g#dTY|lRdC_kjX|#=oH%D~oUfZ~z
z@#hil|AdFKs(!3i5`Nmgu9U01OmVg1iPcGS*f?}P(;_gW;=AoN{x6<%ckzP56-wYS
z9KM$U>Z$9~eYD#3{HJ)#fna7)SMNj1&+>LA`4-odA`^fXj#k(tMI<pVwWY%fD9Mp;
z=!kaP7AqIWox8h-ucK0qT>I)KReIUAs+r7n+kXI-SyIa4nD-#bW;?t8>4c{qP`#H2
z=4O<)#&Z@VI^}r6hBmz25RFgLAN*jK`+UP3G1iV*xBCqSVqK*p9wG!ccwNEW65&5(
zWKdlV(0?nTGOY*hG-O-`@QQB^XaBvriPK;V>m)h7BROQ1${bk`Ovuf-=zjzSu1D@v
zGSSW~jz<y|c|h!-HRirbTu9t@!oPuPdiP=;Tdr;RMs=S)FM2GsCc|t^LQUWp6UduQ
zodI@ONDlf#D&0pD81<4)_b(IhG9M(peh=vk_rTTYngx~G2b9#2|F?adP7ZW2&9@iv
zI?<_t&S|y#KW&y=@~wr8ETr(Os&%SXIc$3PcuD4&gn0gg^cew>m+6D4zaCF&$9|J5
zSX6tGv1w>sEt`&cJW=sjQ%vPL;vLm4hbQe+Z%zd$r3%LxP>eopl%TzlRe4usRdQ7^
zG6*~c4xMtkZlY`TKL4GH_q<8UUs<r3cdQ<hmYg?9Yj!GASu9Xy4jA!0acz4cLGrh~
zAJ)i=aNim3sUR;gPp@-|OLsb`j{x`X14Bwmi)xR4WV5nBDl1zW_)G8R<ILH-&j^DZ
zF9#N8E>6Zglt>Op1cJ!FjC%hQA3YNq?G=zv&1dKQPmY&vAI9Xrevim(??H>CzwMIn
z1D>PnOL97u%NxlwTjniRqxBu@;WwtYgRmB@<x%&`3;eCt$Ab$1dr0AK?IM=~Lp$+V
zrBQE_Yy5OQz76S%5W&7Gtq%7iPo3x&;~L~t?tQv-42tU*9XMi$AgAuHP8~S!xC!2M
z7`=6*JH2>5ws_b*PN{pjN_KojzS`AVQT~G-PVrLZ-H;v!SveJi{QFm-hxpoH^ObEj
z-Hr~24S$#48YDaCpi6#?zrBxl#YM$;rS?nBOj2|1l#|BF^8En|LiV#h#gYwcJST-M
zHcrB@VbOQ^r$4G~t~G}WvJN*Y61Q}Fy5sN9G4*vcx(--2eJH2j3@G9Ko1~m-9;bog
z5?=}~fiid+-m!#$cydMnP+6-^N#E9O_+!&kN;s2AK+DzXl?v){NM38|{7hOkATl3#
zR+Dfx-b77;$Q1wibce1fxd$Hz$6|#Pb_aR@nS4?s?m^Me&*n_~F2{)k;48XAQV`^6
zKVxhRZfZQ1>O-nY(qJK_RZ+L?G#w9SjCS#OeShO-6Q0w4rz_0zd56N9qQu9Zu%Lb)
zliFZ!@*$r5em*>E0ol~>hq=Rj+tx&{EgO*8k3O&yGElwm5Lb2+W9I9Lh~&=s3=iYT
zh}wIQCJ9vU^@=eeH?F_-<^bOA-cVbe?t|<gR`gGvpE%v-%&(>Z;NzvlPU}$4F9fiM
zkbU=uV~bjC2*@(uaEMN21MBDpvYvO|A6><wDTW(VU&~4JecES8!*NaW{xj@c!}|(T
z1?}J<uGVwe%hUQKWZp~l&lB<~Y&In?*&au{M;v&(X0PKxQq%)y<YI%Ek4b{7sQk@q
zDNO6aXA$<>OQIoeyW~Os1%Gi>_zy**;6ti8`BzY!Yrwz%{EPT|<voU2&u>o)ecSKY
zzhCn3D~DJSb!T%xJ+H+=i>p?S&}Lh^a0hEKC>1Ijz<CsBTd5vd3-(KxNA=y=&@~8N
zXC3SGu0)Pw5}71wcpR_%z~b1wayWEr28!A3ZGQVQk>~txV~kcd{U>`HZPj#(+5+i@
zVx8_+4)aJsk4;7HIFN1L9dkqOnS_3qPbbv*3=6^Cz?Zz|ZfjBt@m>;}f=ELVD0>91
z9bHA_1R=gO!<XP1|EO+M9f+1%P<b$mGde&Bi<;mLAN)@PgFycGEIh%q8qc6RKtCpl
zJTpFRXaqv8TUpaEY1$={jgE&<;LibY%GFnbfGN$gNgS@@5epnPfB=T#1@1ebB&QNq
zd1P3nVqR1E7lcsRuxEiih?OMM8zl}M?Mh~h_nYYY`r-qM@dL^TWigiVnrM_(!6NSK
zu|X*Nw6sFmDVIzHIv`iaH3NJie3b)U>+f82l%Si;O7~p%-V@!+;k%gRgJj*o5CY$I
z(54M0qZDq2CDz|-QqE|zVANGm@ed`A$|Tg~tta#*d#U=}*hIEcKT}+<mfII;mRoB4
zh?aSY;B0WoIn<ZUr-&9DlOvZy7o72<n|bvrq?IsyZw8VAZqa*q;bZuFmAl{$PmQ9$
z)tEZF>vMqftDEHozkFPw4xEciOi{>U4F0-hCk%ZAnsQOYO<O!y8UJ3BDb@(lj}u&5
zY|MhBc4rD433mF2d>1v9C?9HF;Y65!%6_pJo=H^ku}3VuVWfBx6bN~c`!F{*DD#Z|
zxz3~A?7%+}kJjCdKU`#stdbG`pkzRB(k&9W6wLaIr_Etl;y1Vuw4)4xs(Mi8%%m#(
zqr1t6Maza+t)r=c-e+lx7~s8v+-d{WhEXl=!yAFhJ4Y&Cno?U(8SUz!jPKRjhJKuf
zw5@nsjEZTH3V}t$xBQ&BgP6yZS(|<?71_fp0tgc6y&hv#@=hH5aw<vZZ}=|Gkc(y|
z&6UHs5<ScYk{fSV;?jrw8Ki*^A7T<d4h!r?yk+iDaNKYvn7&q--Ql0o4M}Q8(pq3R
z^D8o7JQ6gJs-HaindoVy3Ey5&k@C9<@|3j`KXHCU&i`?V!mW+={TI2;E19QNu-3f%
z0L95XvgO7L_q#CVNd|QJvTTFVI)%vFG>tf%OQFH+pp}vGAIp&e5_gJeZT@0NjW3PN
zN6R;F^F-=;bsj)R=Z}uheMm~KNPK+VYekQywz_iejO)g1Qa*=KkxiAz9)R9+CA4A?
zUam@oc)I5pcQ_FcxwG3gx!q+Qfrdoeo2>d~ZdNIhF2k57CJUFHRzt8^ZNpgbvrcK>
zI=%m!qu+G2DL&Q}2k?xSJ>8&4#H{!}>^RXqbH#g|jGEpBMaEs@ex$+bW|U!RY@*XX
zS+aWM!K-!9<-+^v(09V88urxZOyQ~oeA?Wd#T!&@5aN9)&%M$mRnIDV6tT}Qf;R5X
z<tI1ds`G(~ak~#9O?|{oT!Nw5NV(?^3ikpJOZEy*5ZZTQqIxCB_G$4i0s+XW%A@s=
zL`!)H&RU3T&^Y?QaYcKt7^ky!0QfQ3Q+}_o2Ru~80nLZS7X^u*jiEbU`=NqYd4ie;
zd!GVu*2o_GK%)zDJtsEc_c^mj>lCq0>pryAgU**#_AWRftx&SzmUdOeA@@^$j_+*_
zse#_i;0~0U_h0eDy_IX@`geG{-~sVJBI{1O=qG7$qr%~{WJS41DRfQ2ifZAIhl*qx
z_E0;{-N`&`ps$Dxd~=c|u=b_L*X;&q2g}}AcNip+dJts5m<Mb3QTYKw`-ts}?@#3T
zV6@~gd*_nK@dLk|JyoCBJot<$KZ2_J(pP#9*!5?<5`kSzlB8XRfdHi|!pBH{F<&n-
zyBFrI_+e<QE9GDb?lV=~9`}ARf9OG*eOyW@`JkxC(7j5gx6Ffwn47_Y7jr@g|IeOK
z&y)Lcf373XYH$RLsqvVw;A`7}2>%+nhG%~2ojJLpBOI%DJ}2&nEj9i|%uXV2mU}yo
zkXP$EJsl{jlxp2shg38+A3Sk-;B8yyx~liwO*ZV6GVSk^IJZs41{Fl+NWpA#akuTw
zzytemW5v@G@NA$TsA~mWGn*TF<z|BJYmdG{52KP@Irr}j;I>98M(bxpim6p~(34fd
z4L=(CCEzr&D_s1LwM7HBomIL}qoIzHLXQ^A3LbND7G4FuT9`tMBucP;j7z<&cdx+M
z%`Q=}2`E7$<g>G>NLTN+eK?eANUforxzdLWL37?Gf!F)gdp9E3F^64o_B$ao6{Qrr
z@89;<aK8+E@aXZ&4Mx+tAo&$A;w*!*-qD=~;D$vkD|Fh7t!?wyu&M=sEgZ<&rwV_G
zTFfM5tJU<d^Hc=Tu;wr)8VN8#pH~eIOos|MLSJ#@BG^X|ZHjMn-f&&J>?HtM&fyY+
zrbyh;@1H}^3L!p?@P%}_xRGc*SAe8lslGQtnZTm<dKrB!vE1U_ZZY~N(DwrFtk<}0
z<jt+~%wXNH=eesiYiFDL_ok|ha3Y)O;(EK~uJ-~}cb|C0oVr2lh=43Ik^vU1r()~~
z2pFm&7__6F?_&?ps^V@vP?ZeI3A%4|DqjZNc^fa-|IxhUgLRzM^VT{NsESYW0!_9_
zp2hc9-uz@!MgD;Nd)5b2Z*${eJ^%9Xdh6DtZo5C(<tEjnP(B2-UG%V19Er(GO!~gc
zaVNvwj5kO=W3H^oE<GUuk#Fd7i%zWbI(Tvo6jG-PITVT+S0#Yvw~TXNJ9Z(P#FE%b
z_EDPUr)keQ45h|HeOT3t%Ujhhf{|Jv&?#`#LJ#K_J0UOsK}!9g-8wqf%N_B2Q977}
zQZHpOU*D+kk&zbty2w7}(L|P$?)>)kE;`ZRXKaI6Gi}H#p)jE*-$+MC4M>K54GVn2
zeWXU@b$bBXSz3gR^mZCBL<%=K6S%_sRF%G07(T^MPLPTESZ%nxvuFYtK7n+7H}SvI
z8cky1Bw>zDdOnf}ev#R};YT6hlJ%A0<4XXJA~0kwyffbFTIY$_b2%T<P~V96<=sL4
z%yA_mS!FKn*9WL@?ClbF9|4-%*h1r8z28ieIRQ`HSh88@Q-zao+PCmqZB&}M1kJja
zd!Z)#-!z)VzvD5{=bL$-QMzxCYo3Z{1#ua!@k%b6XoTfZHN;LFc_hL59_K3YYq32M
zzBn2`zGzH)bo1IV6D4uXD&l)taXxwM2^U~bL#C`c57Bt!;C@XdwOz>AT3k&KL9XST
zub@bFmqsyB3X{}&mV=o!p~CBz&n*}f9__x4X*ilulvu9S<F)jXD%Y%jsWX1I-=->%
z4w>)VO}pf}J{gb~ZVL!6F(wgX2Tf)rhUD6#lw9M|qJ+<{$#59DuZ?RyRW}&&A1#?p
zs-obMUm(^xTt@rX=r7Z4iFV6BXZ@eOfCLO_{}`HNB3D;PeZw@%6yvF5Kh%s^rB^m+
zO!XIUA9m%S49}#aY93h~VAQe^r!NlC%PBKbJl`GR7>WzvIudk9+4fv#4UeNu1TgBu
zg*tNHP0X+Ne*YMUL9#q8Z?<)cZq19t$Mz!@43;YuaqiG-O`nVQ5MwI0SCXzjrS%)(
zZwx$7c=ycY3%?0Fz7?bxLm7bw+-?=oO%VAj75HjYM9tj}C*gh@6@P%S2mG!tr{={Q
z%^ssrkeK2i9>B`vf}o{j3+fS##w3>v;x~9H-wETTu`Zy96>;#@NWA&bcFtSt?KM3O
z25?iQ{v6+&^^!V@PKd?icxmIh8ae)!p6QePrRZ&S`w2h-i5gxjQ%^U~$~JS5PLP`r
zvFhZPKk4902gP^hB2vjjt`h2ZMUA_mNHM*u{(Fq@?VkL86xe_C$h^-t?$8sA=In&?
zdb>&jMR$A20o6vyTqv5PA0`3x6m(uv#mcl?tu9tqm2z?gD^0-SN8YHu^QL|4)+hiC
z#|5;tDB*A}E;>#VM#d=8cwtA?XZ1N!>-!*C4rKdXZ<g@5u=6`%)I_sca4o~7eyI{U
zAN#nso11^`9BR3^%HDN7=R8BqYI4zC$mP<uOl$8(__Xk>CW1EZ(DYG!(dL%>@t@&T
z9EDC1)upr2`{s*Nd25MVjCNfmq$}xI_B$(rmisH3dDKAiIiJ;Ja=f`o^TfRWR4~AD
z{)^u7yzcX5x^ykLtKlnAZt!D0u|N0h$hREF^0J1Or2-9pN&q3^3t7~E7cFV>J)4od
zCOXm%rk%KOzGp&K==ED#y<Ai6pF%re@p8_>_<XeX9m-e!$YW)DP11^3{^Jp9t<Vx+
z9CWJ+avW0JBKKq(RXNgNxH*Ho!NB>yYWC3eBIg>u&&u?16?G+f^Tl7@M~?W~4(87z
z=m)iBF_-ONP@OBKEH1k5vTgj1i<tm)xewD{UyR@&j3uw857dMMW?V5l9n{+_c)(e@
zBbNbdt`PC_GiIvoBga_i*03i?rP1$^e)BW6yPR&Xvx2ua>yxx0yF7k4$!ro<kb@Ks
z6MD%k5k{nq<SY8{XC20^*RcP;*nb|`p9QzZx(^#Ov#M2=ipO0q8M4i6orn?aCKMqi
zQoiDnthmcvEx~4;WC?+ng)X~kjteutjbOtbl4_9?2~~#+vY5cFd2m%M;NN5t#BH?=
znk=q|;D}#c*;Mx3Up=u(lwltlnREH~Xakn@qIM^~OJkjb$?6fxk6us!upJLWbb6Dc
zp=AJ$AF0QUdr2qH`Xz44Pnj-pf5Y;Haz}LF6NybQjrHsry?Gb`O3U)=?D>l~=KgHN
zkq#wbZuzWj?^&{HKNH|zG_jA#!F26LbtgJf?qe=zHhYFBhhcXerG%{+egkZG9XzuH
z>lQDD83&l~dzc*#{8X>DW4*GmyHkT3%s#nnHjLxDyiyK#vz}G>9UK?o{iqbkIV?6w
zmU>P16~i1m7!*+^uy_vYjestcj75|PS^?sh%AP@5{pUBpu^jPHwwK%-VuPh#9?UND
zb}j7875Vkgu6xaEEEXxI7HNi3qHcm6u6B`Q{e~u`M%}IA*vo&W)knVEl)F0}&a{vP
z<i6rqZ1x1Hngn@|mf%tPbmlfHjS!0%+;j7=FqN*J2>R75((O)WQSbUh|C=`sy`9}|
z!tQ>B`kLJ&A}@X{##5$~r(Iej;<*Uu;v0_yG7!;dd&vs`BweJpbrWRwtt7hJADe?4
z$PQAVS1c&(V*~hehQ;T~*OpNEwD-QYX%hRryI}L2>-(0!U6&}tL98forujllF$^x}
z-J!tfZNKUyztPrIc;~5{1Mbx}D*wO(m1`d}j9O_0)y!3@O`s$_;7i&fO}0CFewuNv
zel#IIZ=!zCAC~!9_EKJYh6P@m9;kBx4<o`Mtjj!sG)d{vA4e}uC4A_fGe=1JC=LNd
zp1b_uSB6|RqVJhV+@_j!$jWSjUuC@$ePKc&sP;BO5rfKo3UX1~%asuYKC+iW9u_?n
zBU`3Fyo^!l=`dcUT58U8J6>5do?ArP)~d{pk`^_$em{8D_ibOw?{8}Oc<+s9o$J*e
zib3&cn&e7_t09F6KNr`vr|RMn#Up;VL;WVR7<R+keBUla;1I7|6T21KM*)EDWSgPp
zSCMZLi@P`~l=C`ihXwqbs_`h6h9)(J)|d!Skk0)|Fa3leE<_w8^G!BIOy-$yZT-Yw
z2JDsC+HpsKETjKD2?38bLR7h8adH8$dp46@yI4S8+e#Q(EK+78-gZXl<#~Cx-zF`}
zK_76U!~PPsL_Q+I8n@;1fM2g-HmIib%f&8dZZ*8;1`q}6WoF(74kGBRr`;z^woa!5
zBaS2QW?xn1UJ#N@r}MkY&b~9z_whuK?@G6<M-)6vZJn4%h}u<Zw#;tp67`o3!=qx$
zg-e<)X0uzX&k~vRta2}M8-lv)qeniNIo{9qD0cSby@M0%jI$z@YJIn`-LuVzx^AAD
z&gKmj7h`CKSW%@@37ZHAx*cw~)q-`(Y4+QUD4(wsTaw5p^M-m7t;=ahg`9?U@v6KX
zR)L7RvuJOtdD|a9_U`iY6t<86o4{cwW#V<QI~M`>to^bvg4s*9Vq`B*-jaE~5!03p
z>$)r`R62uoW!gEMd)dzz%&Z)1?8#0~7)(rb+l!9%kbys5FhP74j-sP^vM)50neRp!
zFT}~-WqD89+CiD@Q?d6vPVNg@hc7y3mCCd_%NzWwBgKrm(>p(LPp@`t;t>hUJ?E|&
z6SP|&%u+p0e4$J^97xtKsuc#F&r3Snm0iDnD)}AQ{w`npsMUtxrZ}#!+{%!epvT&0
zq!#RX%|=^+<`M8TH-cXXbiLX7xftu5sT{pt<_f##0<yF^<NhL6TuL^1zGtsP3%8zD
zi3!GuS|a%i9=t5c8lh#}Vp3`nlsRaq)Z<lPCHXU3A;+9cwspCA%ze@PC$zP7;Mzbb
z6=e(#Dh<dzK|M;;Xuc?aXuuUmZvJSzyMfH#{l;%M*mAlrF2fHtfe<#<gj(f@z5Kzf
zlt3ejiWuo&j8w`4+Q?NE;v8t;6K6%=$dZ@&)}1m)i*!0aNq+hBW%=?z0G<8&R)XI~
zS5OHS+CEcyD{&w*uJ4|?l-Zk-@wCe)Uj^q*xk|4+{?^(7&&Tn^Z6t+1D!cmbHRZ>@
znXNou)<qo^a#jge4%F@-COx+?3~Bqi?JaJV;5%tYO(;p~=#erzBA`|pMe|4fQcwm5
z&g?UXN$7SkC0l3Fm1EK0seB(R*brS4=$%cwFC5;^^=9gxt;!_4^peE-8gk{wnpo1w
z(e4poCHX@{8J+Co1}EG_^sX^^N=NQvjvt8>tdzVMM_}3$VEj8&s4%<4+y=5d$9dnK
z<JhUw+9w)2vgp3d{Xf>;Gpea}TN_qH5EUB&B2uIT=}7OOG?6BtAYJJlq#8P+0@9>c
zi6VkXub~G7rG+kp9uWu~q=paz-yNQP&e`wxK6{MEGhTl<7|L4f?)RM6b<H`2ogSmz
zsWR&dFPlhh&<ZdC?cV&2rzlKJwhj6YhHQd23+270nW!Utt-uUc1X)-!^^RY8{tz)A
zC?qxzeO*qw%6WWFBB=qt_HdvUY5{G0R4#xr%n*g5A29T9lp(CPtDTVf@s{a}<oy;F
z4BHq}jgo#)z1{T=tY2mqPQArMY+b}@<ro;7OM{G*vAKwuhSz?_Sfw4OOr7yX(I}oL
zrpu}DC#B~Zy=2~tX9eNpdSF0l$OuO@u&O<n-(KE7n}QwkvPsKacM>=`pv`aqjs+PX
zO263@)a-A46`3LXEOrg%`Q;3qbBmPQEp6&0;Yz~y9+EdaT~?wp`XH8%yPh=$$NcyZ
zJX4P0Ex|YAy4B*u!>_i(RNka#lR6oR!4bilxX+FIW3;hD)1*20b1A5~?!hrj+?N=|
z_{GR;f=zmh$1e5Bt=gss@yxcv^{;*%BFEk!1Hl<3Wp&VC&lEjn`#wbK$rNX?m~6II
zvYuf2^Hf8~2_qLj4~}xz&eQwXhqiuw-lbHzN}EN1goH-#wzk@meA?}WSBUwZzb2?d
zhFxAPcM;2S+Cufd?^5J=Vj90tFZt}tV*IFWyt<vtn3!Rax?Mc-y>7~~p`=!*=dxHQ
z5bLN9yyWkuOxN!|tkK<1MaWIMI7xaWJ40$Bc8%&nKLZzCip&$Fu>KyxAW+OmifpUY
zI=xB+FP!5}oZLFPQx`J0^XrKR8An|`pW18O!kO15%2IS%sSyhX>Q54-EPw%S&ab}A
zu-p;Ho`}T!`Y82avd&Sx9_!iX#K>x2)@qheU?8O8OFed{fNpV3Gj+h-rd)S)IX*Z1
zFv4-90s5}PHmy^a=YfLFNtq6j80W-Dhyp^2xjl8AuryIv#9`m_p5xB-TR&ZXS4Jj9
z*&7jtdOe6<D&#Z^UULx1*bxUghm!c_ZK%F>dg+Y@iBEkNgTeKbCClKL0{>t>s!?=$
z;XIyc<=Gqj2y51k!|(Ujaa{>F6;gO^UgmA7ujY79`=a9Gktx-a*fCP$iG}xKN;kwt
z7Zt9g^!!GqwvaxmUfw-KN&?oYZo=|=XVQ?#kLcxB@vv^)Y+#=;IA>yCj+AMvdD$s{
zfCcOul%<|%m+zsT=pu74b_oNSX?5d9r0Enw!gs#k2n@j<ZtC;p<cK-rUes{<xV#*a
zu@#IjHr#hk5$vDDURNyim-acl5v!1rsI;lPJcuBtw7lriw<R-qPP3{=KB>Gb#Xpxe
zmV^O#9NhXv?I<*(n89+{^USN47iw9!b72ar9DV1_dvsM;j39kz4p2}`Zrx|+*W{ye
z(}t1-#)_3h?xTr5(S5LjcNXd=LjydD1;1`&L4`(eYlmfLXu~*!JmviGlN73U&T(7R
z2ei8BbfXd~>f2^Ym9Tqq<z}h$h1+&g`;(V-(JHa2c{K=G5wk9`EvaVIe#&d2UC$M)
zi`gT@L9ZmahnNVAU2ez4d%ulgth4{h=AZR|8Red}FH=08mnub-5--^>eA$-iuKM1>
z`ub2{QJTXeIzpzJ<Z}30DWY7u_zcl3C{<vdZ)pq}m@EX<pG*@n?>%3eSQl-Ue@(u2
zPTZ)Dtoi8ql1=){CI<eW&Y{@n5BG=blL>^Ft<7;nhfo8aH>0e7mB~G6Uc@bUA>c5}
z=NM);dv??3!2RoXgM)bl5ToK&THdUQDiu*zUP<Gbd9xVko_YP!=)k_%MnpJ$XRM4v
zc3ZHfNxwvoXHryGF%bdJHUm3lPV0=53fL(xZpk+t1Xi!LsUL}n_*jU=d3H4@dtXBM
zO3uLbnoy_Pp1^H!Un(IM0kgp(RLU1GCKs}eIDHHNs~9}}*I$>QS(+9SSp0gK72%ER
zjro8hg*VBCT$PN)5Rie0LJUT+p(QW$i9y5w&3avMA`nq8{N7tp31t7$paqEHVUE~q
z>Z!L)g$sz<4`k&6;7|>cuc!WfAteS*-}(9`5ptVIA^}@J!lQ17A}I=~JMIDxJ}mvY
zzOlE5i-;M&dZ2Z8!cd{)6lUl9c@oUbu+58M7VwyuMo<v0<j3ueFk9@aZzYu~1csAa
z+G2HdYOc*2*0;(p{97-6B{hB5Fk<se`+>RKiu)>Jd<uiuGe>kt!@jN0#JBLal7e6U
zNpq$eUuiB_)5<%NFdmS&Z8o{fbn?Wp7sV>y<X13CElm1f!$JgY`7W&lK_}%&FfKUf
zoRh?kty~3$vDX@H?jus9)RofZ#B<T54uO5w|E(#1jcS-g@PvkGgqPLr*hrQ!ZkuKS
zl5MkB(?2PR<I}_oUUNwEtK9zIo-<FC2Sd;yz|`d>-hBs5k9j;e221T+Ub>t+xizg}
z-jaaeHvwh@wp|9B9eaS=Y<&&sC;PWI{A*GHiU#4Gx*4Ce66s~KZKIUVr%aoD#HB2e
zcb?d}pJb$flVjB{I$#BuV0EzJ<E#JEXMh}s5SyWJ_inoY6O-&M$KyNv{7Di_$cO9h
zo^HXnF+6z`|Ng*#eN`a%U8q*)nt~je-pHdbwo~VIq_rTZtI7cW{+nMv5xh(SmNQ3-
zG)(xo3kVWYB>q!4wa}TA80xxU<-f36;_CSaKTQM?8%@Q2|K4jH{fHdT8}L}G18B4b
zc8wiO*gBJ8=s$bYUmv?v^RKzU$-XBAEpQz_dr5$)&RYgdi0@IK<o`YBf7{37eh0Uo
ze!(CBW4=Qoh*W8$zZFc}5SgI2ZEFP0Ccl*_xrz&aH$eaC-<aKkpO7OR&fVoRuD*61
zs(buGX4g6jVhge2|N9mKaGC_eil$5;PMEXS@#qC`{I5r^^0Z}2jGx>C63~%q-qT=O
zC+pq?;YJz)Z5jU2r2cE(<!6Zt<su~|n8?jZc?#kZ-aX!i>)yl(KK$VMPnO7kucFv<
zq=2t{`jwRQ|KW6S+)oG#!nJ#!Vke#^<GRd^q{#U%Vun{Bs#l7=ehsN5&yM&u%nXT^
z-u|P;!ePg|Q9*$s1woM2bG!{k?ox`pA4N*9iA{C;yN*-i3)MPHUtw;uA&1XCRaQ{_
zr)Bf^3lv5iTdfp<n<uwq=TgIndxUv|{mJ30o9<SVhfHkRWtJP}#fR=2Sr4IXAL}Km
zRqIC>MTt}T_q+OU{^RE^^%<|G`p(zJ)vmX<ciFAGj!%RGiq_;H+$tWCSZk8o{w{B@
z755%WnS^j%E8xlO)4VSmH;FE?ko=RCa)RX9U1q>0-Mo1d?5=Pvk|;&uN)9FtmwqkE
zx;Qy@Q2+j~Sx&YN6K~b8Y^u(|w%hv9odNcmZIqcCu6Jty?y0djP@uETZK3)HT?Ah-
z5C89piebm6SreCAsV1}RX(abr#@x77t5N>k#CqU&$z}QL36hW87O@921KZ(o!B=z7
z|5+bPO~JMJ7!hIn#Q1Wx*J>KkW*VPZ87;f_f|P>AX@AiyAaQH{C?SDU_g-xUR@pEU
zoP}b+do%*Y#9CHGonwWevm@bVvztTt&&-qAHB%nAS*db7>Y7bdw9X*1-v4-NPXzC=
z5U)tjvo)^M=C*z(Eu=2}<|wgW^;sMY472P_GLSVEMwyig48F4}vl_C(+yj47aP@bX
z8_%`21>yD@dq-sd<a^+Hij&WvOp$ZP6x@*T;mO#U%v(#ExHy;aGC*+FdAwBZu7U!)
z+0=xa_m_v$Nj7(%kl2gcj@U}zS}tyG2GO#+=bR7by%wdD_KMK1-!@CEWprb-?Ec!s
z#qXW|`iN)T5{|O*4RziLIh4zx;{!4<|C`BtCS`+aiMOmnW{Qn#SQ71j#JV5hO-$*9
zjJcBd>76AY%$H!q<E_^>*-7E=x7mN_<Imx9t)oFW%Jiyx^O*#{vk;9q#Z3(K-Wc5O
z=C=rH3f&wKpW(K%^eA-$L&~X_{U8PUY_a<&;K)RiupPk$>U_Id_j(Pc2mHdv>*PCI
z)J+vJjNQ+tLA6<w-OSZGVwuEWNFtD5c%2WhFSpIjrbaiEiTCStZ*IuSM5T(M_X3~l
z6^^7BeclUHeZ_eDz7p-Sr!zEKgR<zuaJKsi?Tt)Q)0C+qE+4KwXM-W%ZRF&hXFW4<
z0bE|_3%;pN#O?LZSIf^~3gXGj#-{k!)is#DZ~+vGs0d@bcgbA;+0s00t`#dc!n1i@
zT+Z&GUEt0Z@g!=YX6gvK*)rF-y$FQiSc^2V_xlhHs8PVdMuNxc550k0HTpimV48hQ
z-ORuj6MYGHz=UdL8lR<puDGU=ZYX>7E6C6Lz}HBlXT`v3H?kw{D-to((x?BuGwWMd
zHlUTPepSb2VpgW`HK2;3y0BU!*`Qgi-)N6J`EdcEOsC;7O*6#ODOG^`^lnBnUqTaS
zd)+r>^-pK}EV2K0UXV6lOhGs7Sg6{+h<!JWOfBEMJ8$Z?w{TlEmF1P=;qw}b&stAx
zs07w;eOp8I&v0~Rc%$PT4TQQXRA<;5YHl~td96(FI!W%9xP(%!@oNoz!60j`iba-%
zuM#YlCJRG^owf^{+T@N7SYN3<N^<ys%C@fL(y3Bcg+BY)<&`P*<PZee>EyWaN(3Hi
z(cQKTlGgsX#5;aLFS4nd23V%n5#@ilEuHy^MhQCM{MHmeBF-TWcct<Oj_!40==7ti
z*`CC~=(<ywh^t(;VCz!MM)38d3T#fSxzah+Xh#Dl39}=@^CgbaDvM-4?_b%LU2&?N
zNqkQQ>vJ#adtfF`XWi-3lG9cIV36SbW$~TC-ZKAr#(4Il?5jT8mpKn?g9Ye*h@A1=
zJy0rh{AQ2C)KPg&PD)mm7uU+h8=57hK_x-pq=fqWns>H`;}y_!gWc+Et#nO$S<_KX
zuQB80jW2P4wwsNQGMa7g{}|U|`HcTjR!Z;r%^ty_{D%qTYlz;wsm9l7UZ8GV6mjDO
z5OyLhyW_OKJmhkb)_KJ_zurBgCH9s{eRto~WL&NMJLOkudQhww<chw`X_#G7;V{HA
zaR4+BlEnttaFewSz-u4k4;>I|b+`zcuDLFKw!lVdor>Qdr<c67`f9((7@#!`#cf`L
zB0*izfJgyxVPDw&eZ7*#w1yM3;Eu@`Cih2x&;k0cFHgm6bZ=1)T4wD@cc>$0L<FcA
zNYA7o7<L86k1zCpXhQ?Hq>w5Mesb%2i3uowNhJ5_CW@1#b@3GWE2Kz-pvT*K-0*pc
zr)4js6kfa~6>Wi2DXys#`K<~ex@9@MIYOwT5u%ayP_ojO&sZK_9u0>?#ZQ0y9%|Os
zbt>C>XE}ID^Ht!Hzv`IxDtjF^U|PMbm_oz)z^hkop5iRRbvo-R|Gd=4{kYTRfMn&-
z`7|uF*;S0_IM)kL*mW{|ou?Jjod4sC4d#f8VXSiZ$8rU9^JTx_(}9N)`#WM!lN`ps
zyz&qpUt-L#@{m%a;a^Gx`E)LB8jtgNF=U2Y&-Pe$WV;me?JAQ1UCK-?r5x-~$zJY}
zt|_CdO#6hs#JXMZ8n>tIrm-&wiG7>E`{*tNAv&fzR2L!p_Ob=!-sWtF)#8g(Sr^IQ
zS4CO#hl`SB385qOlvM#`16#tUOxm#DSsap(RnHZHqGhYO8U;~HQm3>0M!sH~Z*wE~
zIWO=r>!%tVZ~WPX4>u+nHMPMvA?;GaIdG4b9NvMN`5pC%MnNP@##giRk#A>_R~p3v
z--e4koNCrzD@_>E;$xVn_vr-%QkIu{xFDWr5CG<|vkZ&5Z%tKQ5JD#7y*7%rv_jjH
zz=S$<D;bl?8LQFO!AGt*uJ}Hgho($YcexU{ExMKidnC(jx_DHnIL^VNLBYC?P3-*r
z@8>U$SWPV7i<hjFb{4Ff?@Vm5EJt%LYvf?_^@}@+by7{=<*w|#8Di?%Ow6~O&+J{@
zY$3zKi>Vp8**SG{-s*E`Cc<rc%U4Yf52dAgaW3;k4Fk0bV*Tl-fa0?+{wCVaovhqx
zEVC_NPjqWwOnnOkvXw@}+z@<VKlJ(6!?{sS@1_G6o1QfJZCXX4`gwt7{E&u>;XEh^
zZ51*~<3HQ<Biy2ebi|j-BkH`bRR)ni;zj>V&HV%t;7^y0)V&$khFdV>myF^+AWUcG
zXUjTB<pO>@$kQp!$Pm4=uQlWX2{fs`gi$`X?pcHG6>MI!&?u>MULR0$pD6zt31|w$
z?hNI?$Mq-u=>lFZru5blQ_PoiNz4MV4L76$23$O2^lz<to0eDu&y2@li3n}}^V{;o
z$z!wmy9zok2uBe=6$df`zOlAN?{{$3EEh?wGJ2D=h%g6i9Hc_zCBoko8T300*;%%U
zoFL>GqROigaLd$sY4d`KKr^3IIrlFUzFOCfl#hH@qwECzF*j6gNY>>{agCH~!;3wV
z!a+XGD~qzI+ve>jpjpa~c=^`(4fqt4BQH~C!?3$oJJRRxNSPd^3tCjw-?plqjP~TF
zRRaR5(k)rzjaUE?PmosT#(Q#4VG~fXGaQY{9GQ0Jxx5)d3Lsc}E>+HT;g&(I<EI2c
zu}kVAVpqgN1~IeVlkDr=>C-?`i<2?EaSPPfio41g*EPJu-QtuBZm4f36|Ck|mf2be
z*be-9qeXd<)bhgMkyU&Y!Gg#eMc$BXN?qC7=|vn0(qVnO=FM*WMg|JlT%fWwQ{+l-
z+9knlLC2=AhV?Y2$+{Pf#<+~`@(GF2p1+Ov8SNa>$+EqiDhjRF^?X@uVd}47-D`I1
zTZA;%Alk3nWi*TggAJ(CGOSp&OrC6f=6OvFK`nSH_|}<%sgg&-1?Vf&SKb+lBxGQe
zVd)Z=1OkOB4QT&xQy)8aA}4+OPGLe3Kg{A%o4id%^I%$CQ@z-Z?^^J&hSARf42$FW
z`8K_h!PES^3v5yJKep6Su|83TL_JFOGeYgAc`=`t=~1%s*omc{)$x1jNg6E)M+B@~
zw)&i**Vx!xg!%)5znAn|PhqFuk=twi5=hCvPP{%2q@=Ke4-j`Lh1{P^U12?&f;xLW
zoo5|?@kRn5-R{NktvbC+<~J)fz#biJY0=62Vo&dwGDsc7BthbRu|53a@vHgPKZ|vi
zYlk{7PVHEty_24iBlQEz8bOK0-d~M3oAT7l56y0mP7J0qAIXzV?y`63b^Q9oJ=fG6
z@{|TDuI0Rl%1xi`O>PsC0nB|lR?L1%^Me0QBDk%U^omVfTwEWQx$0%pt-hm{5~Bc>
zIJQ+NnP$~5V6SU89fYrI-7l<-S{3A$P2mUXrt@%Vs!P?EPj>UkJ^NmFSx>t`hpuMS
z07H=y<C-k+hi);c^8@0UJ68Xm9ElhDY=%{(>&sP1QJ>X(iv_33r-$L@PiZ_!U@)I7
zz}RkQy~BDCayGlYIaaEz8L*6AD^nI68c_ep1U`d_X!5cP-mdlK(E*SW#0QGsSjI80
zm7C*UYe~brY4?*aIIXO-17Wn|a$0b}>L#|Jxs6^n(Yb;AUguR#%a*iHapD^cnU5r#
zcBvPNUfq9GaC5%*h|@y(d@N8(jm%|OWduPf!}#@AIi<8t^|)L2TDMvJLJT4fxW=QJ
z_oLFSmUm4=e;<Oo&l0mO#?~7mvC4Hr#h+@SaiFZN@lbC`*zv<huLX2nzVK(-06Fok
z1~Zk&fJamQF5wSvnJJqx34Qggn)e4+no5j6t0#SBg_T&L3B*nZy=oABnbiC~a~97Q
zoaM18JR%5}GFJB^<WGP$V4F0O{soV{_z6(0_ikmas;j$`{@(YYv(urUo&@{FO$Xy!
zoXWl5!s~*HgK)oM9>t%d<sUP@{(jYE0i9bXZBU-}j-g$0;^bD3<afko*~7etvJ+hU
zl-K#X^aI&IdW^(a1@aMG>}e!S%wU#Vub4N`td>m(op$RL6ECxgM#+H>l`y)*)M*h_
zXOyxd?i8@K)31|b87{E3t<fz>sU!!&8IL`}aa@m}X465lf|+Uv26bvbgl^mapcOk%
zYQ!Y*bWFF=*e+GvE88h%=CcdQq`u)W!$R>oZBOb=sQdgtf6!~_xv6;l?;66RYg-)$
zsV@5_5Wp!Gj(gv)>uFf&K5ryvun50k&FuP-r11sD<xxq!GXQ?YYE=vv|Lo!*Ww`<n
z7e8BD+ux@!-Y$g4aS+WL{a!v8C^^*EI_0w2$t?{dcryR4Kj$g4m76=uroEYKrr%M|
znU`J3kzy``+Ooiy^KeEhk5xEcFX~k09qR}V2?b@3b_WWcosyC(3xe{_I%*A)_1@#q
z^&aiiYX8)gY&E^I7$?>n@^pBnqDCu56C{Ue5ZEdLF0)dXULw&d*cLNQ{PpeZzeW+A
zvla)kwh+CPat#bt<=pH=U9I;n0aEUIL?y(PmuzppzB;>S?ATKmVF_Z5+<;kAw(;>(
zmAc1nBHzf&w_p&T4N-L}tA$Bn<)F9pH4Oytys8PeVtYM(wI<5^L+kr$;Mr>Fdc(zr
zD>CC-vROgU`S26CtvQi9SY7EZffw=uq!V|x;DTWBMgbMf%G0Gk^Jq_;R5>=yGT)w~
z<$Ep39hryvmoM+=*?c~QiLk_$Dijziz42UxZo}<Jpc_?pvhiqIr6Z2hB4u$Zcy=vS
z^HQDElYo_%VwQlp)%pCBRg~WE-n}rJ*umVuSi@f7Sj5qxk+nv;W!C}{5E0&MW2}Wz
z9%8Fq%rdneC8ifK$eR&p|2AEO(65Rb$Hh27=+|2|W&V@(o}m@%WBC2OwywFghj}a2
z<&jhZ#Z>gd{-z*XH%qS^N?o#{Z!F3EaJ<wV?zrcXpTML2urrx=6`ZfYnntUxl69|c
zO9(;KnpGGt=v$9)&sa|Xy7;My6=%5?xoj}`vAlRVp#Ba>V#1RLGS19J%&QvBcmgkW
z@DP(jDEwN8LcNT~2tD}dr6A=nN4|dFdS=xD5Jpot<GuY1+?NQuGp)42>C^&DX7wZg
z&gJ|Q8!4<-9@rn@`*%<BU7i<0t^?=2!Vaxbl=^conS3`k7xsC2blbq4wtWN`;lNmJ
zCx@JoF(|Y2$}E<5v$@G3FvcK&z;5{i#DKQOXEn`ZwNKAb)ZrGz6}GoTTiMy4tg~m*
zmz`*R0DF(kZh)=oOH?}iKFBo9{(%$Q0nX*`mMU1rtB8Hw-p)K&K++YZi1z47-&TDx
zs7a4qc{Fx;=uxIW#%`R<qzY7^C2FhL1E-_~1BV~-nv>hm0qZpqRBQT5uj}Ns%UK+g
z_)F>BXxa6v<4dpjAnpfa9}GDDD;EG3qI(n%u?Xx9bl4zlwhBef?S;q3u^Q3PNmj#%
z7bwk-m7Q~FGnN@M7)!DS27h7IP_0g{d!_#KT0YQ+b__xU%*s0vwt~xIqNzJrzui|A
zj^hSbAnLcarZQP@o3gWY!9{r}WB|9>DyIY%fi5&@+4nSdKce3O5g+)x3_h2!X_un|
z{c{#)TKNGpFoQa@boeI|^*>l*SQH7^6DZ5YXOb=TYbD>*^xM^1RL1?2!THXPRj8Sr
z?O>W)K%qzM8bGQA>nQq>XM|pT<{F_v5Q@-)|Jjl#_<Upsxt7)}<GagKcGPsU|HQ@*
z@7ych6`AbrklgDM02J)D519U?q#A%S0b7iWPQoLILZEkv^CN3~PCc)#4YFczt$OAH
z?)jWKta(Q>ojZx28|FB{gUwcDT^yL=4n;`XCl6uQd(v32Xm6N*@sUJV^(l;}4=}OX
z%Mu+tepnj?{%pisp_9qyvh0>mL4F5TbtJ%K{UxQ)=s+p&)kF}G6L&;7tmDms<mu+d
z#mi-sK_p9oUQy6__L6EM*QeaH&nx+vkn#f+NQ+<NL``?p3EdS+62tzc4<9WT%M#;+
zR74HLeQVh?{X%mC0$Gc-GWiClQhBZJUriR{h~6+j0!`21De_Mn?))S4e8aqf{K(zC
zg0S#2t*pfDw7%YPaU(2FgGeF%$qX@(pwp|@pO7KjaObz8M+fHe9WParl@g&a&0*#p
z#&>3K?^83nzZumJ44#!7Gy{`jWd5Qex#%%3d80IszWVO=Lr&fMr7WjEc}7?hZvsO$
z<olB&3TAX1z|;Pwi8{Ym2`iw>L0**0jBA56G9t}B{jv}Y_)#LT^-fGPJy-Jvw@P#X
zuZw0nXW$V54&oUU-(2;1I0koG?ATmuhy*)kC|_UcRJ)kVIEW2(H{Mow%gh%1uvkaC
z*2_m$y{|zxxmds3S<deVDe&OmcTW{rRb=u2CD*IA&inJbg-(#?>sF^m^_PcT64v-H
zly&i^2x+*@cP{2Bhit>XpwxRZr8s&;9C!eFw1eCd%c9#8Nk6L0M_KNKo?D4JIb}sS
zjlB3AM~&<AYrLLPa7e&=U`->je{qd7J8M=me=_2L7n?igUlMLTbrnRSxoSXwbvv9x
z^B!5eos80(**kWxt<B|jw(L5R*vmPVp^DrCj$215%sU_j(`)Ws{CeQMnlD<NLk=iQ
z0EFmNd4#)KdAtC?At}O4Xf6gOZg&b157GGLo+=NqAMeS;!)&b&rPkGH+F4|~Y~}Y;
zh346ehSf!>>U!^*Qn`F@bSoaHp=0S|_BGK9+2Tfh=1%UWywWw5&T7ytYa{>D>k0q|
zy~f5Jx&O@B5i=uRlXtoV0=M#hVXoUCGdQTGQtZoWbCX4w__pbT))@qt#NfNbRr_5E
zp`X-x599XN>a6-F76S?=3yteNUa1ExJ8>G91Vu959+8Q7MhYw=z{*EVB9)0sfqzb^
zxpw`RwYiu0^e|~P?^e-sfO>CYUm>g}Uu$gk${n?rG!y3X42KSe?>5z&T?b5#{3QVR
zUS#2W#QI0y3JL;nuW7gfk*9sL(@iDrvG-Yeyr9zLDY)P(9LMg}dij}pOrYhP>gDKi
zScBvRh@Z*f^Zdil5Q!&1eJeH{bRVV=Hrk-0_-_GJ%=~fl&Bk%E{<ZhgOFZ$K6qJ;S
ze$cIZOLe+RL`n#BOZ^N0CaB*0ATrYbO^^PApALy*SiH>MQZMHZ+I@lqUIUa0a2$D1
zH&K-G&$j?`J8}7=vgb&V<WLSB8PJSN`b2O&-#6Op&qm>r*zv>)JS72_(|46%y<-K5
z8KBD2U3#wn2Mxl1XlwPm<98kN;V!usuZ|Pt1d2-FU7u~WY5v1Q|8vp(pFd@B0fr3M
z*Y|(~^RZU<Rt$L61Rs$=;qy&f{WEj(=kS@osOy*D@idbzLt<p%2tPm-SI{aIm;R_>
z!PPuO=B|?Bn7K1n&RRX5_~y$%-y&Z0gV^IgSrRCs#)0X|mAg&SOrpmt01f(x_j=0p
zXYV=F8u>pwYO0A6FKC7Q0aaMc$*l-6hPWCBx#Sj(fCybF9<3zbPpU&IpPXyzpM9AW
z{<CQb4g&~z%)L<PaVPIkhiRSMLc<PCULy|_s~GoWKU+5!)q5Nw1*?^mIx=J*mFO!G
z{%AbTkeVEO1}AUQ@)@6}+)pYYA&yG0IL9Rz3C1YO@XCD1+`Ef!$+~+NbjP7xe|Vri
z(*ui9yl&Z6oVaDMr+=w69sJS=%|5E|d=?m5UG?O7I+qUI*z`ZkZ~nt#3G)Th*4E&!
z96?-L&si^-kzn#YVVoQRIGL#x+R3*(i#i=DGe)iXPUaT>e4~R?!C8*T5QV;cd9VG|
zIa&o5Im4=J#6~a+2Jc-FfYo(4#5&n$WCU6|CyS3dUyu5u1sKFi++?H_S1t*xKiN87
zyqAbWRKi%g3PfY2PBDFqe{e3H2>wi@>N3x7X-~2y5YIGc)?+zL59EI(hXJQ!EWP%z
zYJ&M57+`V=(br#qoaHrh9@&4Gi2w5t`PWGQOd>L<reZv^UtdLhfIFTuAnHMa<O`_5
zt{q;xJ}&UT7sRl!z5I6p3mCkS1~dTACh?)e$0ELedK@ScRdatGc>gcOM8_K`s-E*$
zoph;slDL5<eKY>of+DTA%qPLLtdrd*b_||N)Y|zXsE8V>i-mtg?1mllGao*D_!B`<
zwF#*gqbz6LMZ&dD-K&q`iV2;%$NS;`zCb~eCUC<);ya%7jpVny$E^!10xj-Otdr=v
zED-3PVQ}tm4%(o=VATlk_H1@30&Uono`OTq?B|*4mlK}Q{LL>DFQyB}Qmgx~p_C<-
z$1CtmBhk;MSh^1^6RveieSm&ZQt6!ho5!0d&(1n;8df;mN|FjeGX7StNVd82_j@jk
z>G(4g6gOM^4)#8mP!rcM@*FTmM0C5uJ}GQXGbuVX+a`g{mgdSs)b{@W*WM*o5~+)@
z?d?}e>_+uc+%o>gx68Oc|C@I6e|A-{I4^NMz6WBo!C%71NLmvRd)9}t3|#gWEwFBx
zN;Xjmi1bLM=WY7dN>6PGr4|Pgg7dy}kDzR3j378!J3~Q&&{e!S)L+c*kfaXsk9`+M
z1ze9jZkN0x)gE9<M=S9{;{`+!4gecoI%Ii4K<z4(#zTyhYMOA~Y@m3|EI_EL-7ahF
zEsdbu_P2}U1fJgIG%0(msI*$oq(xxkMis<QfEYi)PjA$SLLQUvqe;ScI$bSLcNN3K
zTtEzz79%M2`TX}QfQRU%daX&ag%|nqF=vTG@4Q=w-*8tF-?Of<TqoNfS%uq+{n`M#
zqbXvD&q2PWh|lRHKWE*^dU2jo4DEZ@aRjn1I@yW6y&*$Axw~A80C3x`UzJ%L+B5fR
z!1iTTn5>CM{uU3GXbm?js91s!t(6+BW)d9xqt2_DxZr5TZG&fxVwHS>h?BuZDqV!b
zHYgN2D?Zw20S79tJ7bm3e5+#>C69nM=^1Xi4YpEUeB}3T#-z?mW81}IZmH63DR)q(
z{_)dPS=^971i3qUdH*7l1Q$^qfKAJlrD=z0ts(gRQ+9k2;XQ&=o~^rBU{0VFXaO4L
zmA;O@%Bj=-@igPE(eGd1BFcQ%X?I;}n^+IKaD~j7$gs~booH-F<0*2hrR~&#_ofWc
z0`-pf_lz6;41n~NJ5LwQi_<uwJC?T6o+hec0nrgVfbo;eayODeA>8KfH_cBz>t}f@
ziV*b5$~fA(2+a$0shNqE`pQ$b|8Ymq31ckbwL)LRp>f@y>UngwFk%OUnB}~ne@@k3
zdO-QGD+{dICSEG>qj?xHj(TN3f|{32HJ)u_oMs*lSdw7h5BwVFj?wb@?DrDngX{CU
zas)?wX=M!dgR#V<QcIN7ymdGg`X>7u>e8*4l;u7|%5wi0qJV&uB=sq>Ij1s>kl#mE
zUNq`u>OJsM7PR(jI<)3cOXB%jx!~nATBRGXH=QtHu`l$7hVPnP;P<HQVq2!VUD!d6
z6Efirqp<(7LAiBwNmMY>WA{~^W0qn#vND{!8)wLcwd}1fFP5e{WKeau!H7(3F@^ok
z%w2!yi5pv&lye&MJyi?I@`u_W=e0utWTh6z7QR}I@ET1mI`S}+!0TfPxkg@LYg()D
z!8^tA*+NdxpNDuh=w_X<+V_=P^WSbS=T&}tm=R&xTX(R&;fsWC4*$3Yb||2h<DMQ4
zuNV#=t9Jvyg?kFE0xnBurH&Ey5=$J{;t-a7{N%>B9?C3^#AkMoK~SJa;Ip?L%Re+F
zEByHkHBdb%@f?8(zH0!@8T=Hb#~^0$As-?>lV2R&@h)eOwNLX^b(xb`ON=M8YdL8}
z%hE*6k!lh$b(W8ctu092_)1^&N{<Xa?fu5OV>y0jg{8OB_J%c;@R<r-c!1mN2oSR6
zKjP!JP`R+-G4(oi(PxHKs`2)m6F?BZ5Tr)o?jQ3N_xg!Y_ux)?*K~38SSmTzdBcMz
zl%If3h?hIKMg0XOdZ(X#?p<CnL9C^B<lt3=RbQXB?EKQY%k<sT-J%z&Xj}bh%*`_{
ze}4Eex<-CG-mfwc&+D+254m<oNwrtE(jWn_6@}@s{t_s?gwKl9XoHoLyjWQ4Yp1jD
z%W&JTQ2|<$_sVyCbFIcT-40qWKK+sh0{GQ$9Nm9O8_>e@b4QuqufFdSoI?JnMM#A|
zY-eT6G&7LzfRZ-zuB`Hbza9yW^0&6h%lORC<E;VSx%X2Cj9(%lPDYh)H)9g3x;)l}
z?j;o(gFx;ghVlDtUWH$gOuL=WQzg8EDGdkGD?1Z8sWH+5Dfq*dxqPeNCH)|5I}kdS
zJ>ToYICh9jlI1T^wxQFSD}AnbYSx=+Ut4mxAz<+G$*n{0VR&1N+K}N65hpFP?B_w8
z-hs3(X~}S(X6)dIm`BXOjs0MkwV4tT>+y}JLOXrclGGM|eX|^nRK0U^AGgh~lcU4S
z`KbOgGIK-u!SJ0=#EYfm^!=nj<Lxwb@MJoRv<tspRa%COHy|3Tl&)|zGWJogRDG-3
z-+4`Ndju=%HWctpyUO{nX|NSUF^$c*y?e{=?c9;D7?8TXbSvDJuJ`M0fnV#7Wy!we
zoCUYr&!jU*0Ws#N8~9oi?C0qaVyX&4RSS-{D~<hQ!NHSY^x<?;uXhs2?cNSzU9#V*
zioOr-ty~foL^%p}?muGMD>Sp=F|1eLr(}f0=;yIfnK9UPd96yw>lGMq4^Ca<r|wKF
z9VC%KmA^W*$KNNrh2qeP=Nz<2P5;T~Yd@3@e~sAAdRX*$N~l|=ET9EauEFYbMaHJ~
z@VkRf2%v<;<G<D`!vmG@Nn{u4*?mHivF{0Y0GaG~Wzcdfllr%>joF?dbGmAg{wJN&
z<N6rQs+kpTv#tfo>oxB4ak7(jDd}ep@eQc5o?5?E?{~#_meS=+*UIJY%`d;l=Ya_7
zO$53aJMVO0o5yiSTXD6vaeL<oRrHu`wA{MVg{3y&!*~JePDRZ9c<<KjOS<#l(&T5>
z5&WtkKJh*fgQ|-OX%5j+J>#owj(G&t>B*4bAeS4zky|B~^_>iux-Mt_l9nn)Jz*r8
z0Zpr%z}@|c2SW0u!drB8q=);<FVsa-t2a}niX9#n->ADzEAL?bOYzso7_obyMgHnJ
zElC6AUFS{~><nL(u+hwkNGjrqp+WMmcfY&*fb~~r)#-}cSMM@MpE*x=TN#54)S7}W
zdvY2r`CQVzVJF#L-+h{<@#q66Frg<L@~mfN)JeV`;E*-$h%Vio^sxeIc8%BXd^|HN
z49sbGaebDH5_~a<yzDLriRR*2J1WN?gm29twAr-7Lhu`t2*ZMEJbNsldvhCvjFhAB
z{3o~oFqXFX$qiSQxhlTj4F_{*O)vbm#nKt-J#3WecsKKIWGiRz$R*1MaBVgBK@8_8
zZZXZ3mR#Me@G93MRWAKo4k7#`%~6!&SMN!Mm|&C<xz5@C92!YQHtAKjgYO|!x4!p|
z<=PzB^}vNsY!7yiue^fegwSW<2v(z9(^)4}X)?v*T7@rqoM5db#rCSd-lEQzjRT2N
zGyp?nSnKgzw#;67%m1%~;o+s9?He;_wK>DyumG2$y(a<H$P6Fd_O%9lwm$qqT&s$}
z@W<0krF0XM`P?R@NuwCEx%eS9w)l=L4C9NMb^Suz<JuiYTmJ82pUqU>&~n}~3-mRn
zNoSsP>GrB}9DA^jUBoy?E83(AP`CaPt4TLTP&nxYTEue11K%#tMuN79A_eO*n>kY)
z!<Ds8MLC-SA~dB5mQg{Ow`NVv-p|~ozIJJ0{}wUcgH)l3LXho=tiYti7H#VJt-#SI
zcfI@GF;ek~wM~Cisb}*<y2OB7RgrbbsA#-o5~5%7m}{+0B+>d|$Ad`C{cvQp|MhGN
z2Tu>ww+xLDM_3uYcS@%j$XD})Sv8!(RK9gTwMI<ULZ3*G8_I{~N0)id^QB5Yi+uRy
zLC-Lg_D>JXc^_H&1(Dl*vhKMt(i%%YbnqQ%Ik3gc20Q&^INM1MH{R_uWSXez8)~Sq
z`s&#FK!K;P>ZLgOFOTw=MZP=|_P>p{%3I7I;PBg7o4Rex@_J#nc%gQzV%?sK(za@=
ztusLYRdKGp7$SA_=F#%X4w;7FC$W!8J9d>l$`bgjI}N$rB9Y6%*fazD?^ui7w2<BS
zMUjZh3j4nM=!`8l|GQ7}F;N*`)Q<)LU$VeGTIB%OaNQWDpOMz0?z`JlON?rz!_F(B
zeJ_rQ{iv~#>$L<7@>tQlIwB77L35QuS}Vna1VaV6XX`AxU`bnJo0+wbYb0!r&XYT4
zQED6rx$m?2mWLrEKMKj@^h7ueJG1Sxy<#<UjBpRX@o|QxU-0(j`K%q_d&QQmLw)?T
zn(AHXbBF*Qya6~l!GXZnyEySC?o4a8yn4pH*2MR2z|Y-`S1>t4ss$X?pQAeNze$DN
zpM6YPU9ot~5lP4AyBh$pfT+`~195~QDjIkF5qH<}jLP%t9*YB3dHaeo>Do@U9TmEV
zXmzPflA~y0yHQi1+F*@>6*`<ccP{C(Ey*n^rE3DkqiGJ(lMe)KI&Yz22hFl;qF}!k
zrisNiHb{orHCp5BCO_0s`Y_zK4Ej-ww*=bua3d19WV<|!<YD$hYG}PZd#ZrfWAS<|
zQRk$2sol3kc2XI$&i-~<&qbHnsh-ZtdE0kMc}#q0BCG)Y?)r(Tsz>fxkM;@uORt>E
zpvzu3*M7$i8^&pd#5;&nL|v_Kd9;*5g6Z%44G&h;B;h>A@#@Y-GM!?q4SOFtNPfvH
znWzV~n`}%c^e~yrc1?wtBKuXc18c-eR#XDh&jnqi<#P~>wMqog`({zk)MHOpg!VMo
zf%gm9x!L}>#1%>_pV$hI4)e^cvBTHhuw*JsxRpZ^-*0IO9?7ofTv2nZjW1^WHO^TI
z{VU9@LMaBhdZnG^Sy80>Q`s`+vmnr^-hmY_8~%Ke9!9Sld{S)ciapVv%;Nt^N_Rzo
z$zQ>wOtU2kka%}|XUeU&8%9I0r3c-na?3>D)?7zE#9HKe705*8xEbsT^W(byprCoU
zk&M7Q7_d+Ql4($(kC>Sn#f%s`6NQYm!D?JbrtyRL>bF3)-|_RX;VbV)Dq+!_$Qo@q
ztIn%sliTIuT2?W)TqVogWnkQ!Y1i(-YRKUFpY_I_k2b%#ck3RwJ-1H<nV_H@(wF%I
z8|%v~r`3Bs7@h^dO|SQjOG*jFFyg;YDZXV>H6Q)mA19#oFiI1hHg!;-r7_4MfGRXm
zQ>J8?E$D2t7oG2)L6@LtfG(Ybso0PIE63DJgOQ!@s76=oBQH#Wu%N$i+DH>aJL4!6
zN8Y8Ux*ou<8ogpL_tENTM+|3}Tvv1|^n%)}O)JZ>><vw-uMJhUg9ctHK?mgB^V@x~
z#Vhkt7O$5nm?u1ywiPA4KY<Jz#mltz_2xU0iyOa~Rb!=VkT8*N^XSmJ#?O&$KcKfk
zFm+y=Vn)QUG6)vU(WYa4BFkl%a2#n(gtbngM~PN8H5I#vt37Ipf3{s;We%ifxz{LN
z^GQALS3v%-df@d8*NF`2`SzqC>9_*N6e_v()0KxBkW)YNV47X580X#lkn$NogVRtJ
z@agPn_cGL6U)WsBy2z&c`uyhe%KKA8?RYi46!mPIxf<&zX^tVyoBpK9veAzC9+|j_
z35`PU@?<XUAE~R*$!fa@TfIRWSRSu8M9qFJ`Vh(IeneQ*z_DbixI$@MqYi+(sp|z_
zA^5>2EY?K%t@u`!cR{Yp@t^90QsvxfD_{1-`zawK)ANIf`%mL1>$B~0WwVf|pHoG?
zgV{*~)`$hwI_pOVLlZ-jIaa#843mvXF}7*N1fpvP(OqR;9L{^^VT(6T`KFaFHN0~<
zk3-$n<SS`7+fhr+r~BXBGF3Y4$tHn%HCbd?bVSp+fxb=!MLSz0wH^ng-((O5S+|E(
zt0U}k*CK$Ude6?{LBYM7u<@+s%i~@vNeZDcDTJfY+0N8SX_7)9MNbx0$7hK7koYeA
z*2f6dDje4C!Dj;mLLU}BlvO8FmNAg?S}_`rec!dna3m=#JW9Efjq*L?F-~H)`~sWQ
z&NSbv)=;aZw)Bv*LElR7Y#;~Bam-OjMRJtpE44WZ2|Tz7h~>u6;r%nkHqCs%JWjYB
zhzBK?u+llYbS!wv!Gf>uv?)DzsSbuKwEbajFy~QcMphrBbqT7CMv$mS0*d`OgDu+5
z&rd^Ey&I^u7a0W1vWz{q(tqc!itqNU)S2%XE{-|KS3mLb9v|~qfOx_J?tanFv*noQ
zeFzx{f;Kdj4jqso#Jp>v9xG?k{n;QSn4K4qjO&xo`F8{D2buQD;bD>)mCZ26gCC@~
zu?b_C{w50~>kB$_L=a>8+Qe4s%1Dj=z*PEo*(5#wfW5PVeJd5HB9lsVgU?EC8^Y&c
zsWFVEy;PT(%c1+WJ;<M>QN@ZDGb3tXk)m{zat4Ip27^`;8^=iq!FPYN?=t=eh0NNJ
z`a;jli^)~}`3LbkU&3qT^V(93s@4(+W{gSoP{xXR1)qTV^ZgPR8v57s=ndfUuT};<
zyS|!Ccrq@oa=Ry&Ynl~Hd9B7mdMlHyF)2?TATp=l)MK07;+2-U-48*mae8l+@0soL
zD+?|`y55%asbd)M?kkk8o{Y__83<{DA|<|kDIWuQQGZ%3y%&3`%z4f{*B(~fb2~}4
z$bd<vC`8wcVyl8`{)Sl2Zi6@L?&^^asJNxcl@<^TheU5>@`6NPyfXV2E|kY)l}GB9
znjV;ydo|n;qFdoNt!5rAvlgZM$<>y|k-m2}8Y|L0ni*zFk#eNfW(IOp;$N~z&G(5M
zp|J5o+XQI{Ui~-hkYFl6xU!$k<6moX*WGW{CCuK;$P&%4CMrR24EBSGw|RWiV2UbM
zkFA|@!aT+b#XsW@p{VDysN%JWUQRvZ@01SV9;uo<5M>Z|MCfy;oj9{<!Ks^<v>-9H
zLg%t)7->gz%L-_#V}Ty4ZnsqMlRCPRVo%V2l)if-@GI#}o$9`iI@u3S!p4~vaPfF!
z^*}RGr%{O9!SDFRKz?TSZf_UCc+Mg8rJ;4GjPlghsO+e9Q5TzfiacXS^7!_6B1pcq
z=4qSGM<BqZQCXz~hQ8%9lH!Db{fe;!&b6|62Ti6>Upj9S$)aV-S)aG%#_!uUHKC?N
z%A@+$@6M5MqC^@%Q;%?~NC{%h3`X_mYByE0(cZ)j0<V<Iehx<zlO0t$F)GTR1&&u`
zu6+-(rEpw3T&vUVsG{WVc9H+;x||~7{o%a7RR$#w>V&&Z7>}!D-xHf$*>w~^Zg#}1
zf0t+v0M#MT@VKOKRm6O<UM1V5D7pT7b^D^f#XdDL2n53TxW@8M^;TW5f^uga=6Z>@
zfWODSK13t+CKW^@ktjJr+7*XJM7Um`_^f1v_Z7FERnr;YzO3Z=yOMvx)7J5IKr{dX
zA^twbh$O~)Pl$qFq{cPKp=Fn3Z>1|SJ@5eAt$j9O{}*ey%d!a|QC3a*(>9UDth+m7
z80oSUi3@w<->ddIL4KBWK9;(G58Pg|ZK;CRCH`GEZ{D09qZxg<kU^_5EVhz?mTJ?v
zKK`L2p))m?rq0DLd@<m5?mBDTqFKIiX}#Y;hw^BdQ!<E~QOztcm>fiVAy?E^%a5kp
zbVWy1D?6!?J1>3xbnF~MP31<+_b(jc=D%nZZMZf{Pal4tIHw}gqm)d!Ee;a2!abhM
z_$XWjmZ5?6S%CCbuM!PJzhq!QRu4rb{g4m2+0sUoBs!LqF}_`TQ0NAw6SKEXkq6~p
z9GwJlPC|EP)^36{kb>`Bu&x~DhWgm45KG)r%*3~D*6y<@Qa!NB7^EAy^>T1w=0XCm
ziOy824<UAT?KI3UC$GWi`B9Mu<k~Vqb8?4XG&QI!SXALl-GK$><rC!ZJ5OKWe0S+t
zK!Vc*Iv357JLb88xNqh6Slk7VzQ5F$j(NF-6ksh*iysg}`?Qe~jNP@WG(nz)@|ZXj
zU1L>q>aJpxy=b4sQl!DtrM|WrkcV?eVA$|yQ*+C}4^sC79Lg+n)2BpYj5MJ;qppeU
z6VoJu)p))<w*(d&w%Zji!jv4$kGR73B%re*HH%|D?Ny(QrQgq!Q19J`>36UIEsaAg
z?6fV`blGA^DBb#}-#{acu(BbRl@yPE19OVkY5jq>;Q0kV{~t#BTecz%9~8)CD28^?
zP9)uJ4Vz^$i{(Ox1g%2)N?V)tYHzLHSl)<8I*C@Q1MRv1_kO9NhEPg}q_E82J{N->
zjov#AA>b10jT|8wLD8VdsBF&6)6&JDYq(AMt&}>B`t+~9q|Wrglo+yHQ3$>Q`?~@v
zj2XF%I^}SRKsl&hrh+(B)=O9a<TDtBeUFeCvnvl6`sEs&Fl7aek!L2^ubXZ>vC93#
z^pw%L)bn+pG|1Nr=uj@_pP>rdZs3HsT&fDn4nm-72AR*+cNA#^5RP*y81LurIksZr
z{b!Yd`?jSU7|5SG^O8>26yD}D*4{3e@orZdRbRTjOf4rg?c=2<eXT!e5@bD(uoicF
z-5O5S_1s-u)cPwMebC0x;c5?0dbm;y0c6NwXQ)Hi=H{x$-jy8>Acza}S#X#<V1nnj
zWfg)tQMDMdbL&rk_h}2dOq-8Z>?(BpZX!&TYbfXJW4545+mCx?COVzm;4LymZRHHL
zjkdkM6N8=;{%f<y!3%y3Zv`A(nHKvBi)E&~FrU<Xi#xJpAC+15SaK-shzr-EbsKl}
zAEF8=hkMgxNybr>g_;ndz_uUJ!B_`GbBkgO6Ac0%4blqr`c|Q_+PH$}fnxZ5N>{zB
z?NChn?cy$wqxPNB*Lpq?x?Ltwy4{_ur$ASPBWOJ1pIyJE*0sGlYG7DtYwprm-H*P7
zm7JUrn&)}@^y7DYgKgkJt7@KcxpPWD@B+`r<sa$i0hHz3%RT9I52P|ue<v*ZRq^E7
zX7dd!^^J80LuMx+A(CSc1l-jk)!FTgmPI@<nq$$oot3q%!5Pn=q4x<$c4@lbK{R)z
zY<wQ#$2@A}8>K2T1|hjH-nZ*i4bMKWzyC0ux%Ocv3c5p?de~!JWA7a1PNtF6SMbaq
zh`1f9+0M8lyX{*{p(5(g?f`N75qY}}KMoQMgCaQOnKjQ&+-s`eGLd?(<!ykN)*W?r
zE^)iK_Ffo#t_QY#<4*54Q0)ui)UC0!wtUWe;#sJArT~|^;8`06kkAojQK&hIe_hA-
zQA;3g_dDreZ-C59{_y$*=}i=>XbuETIVJf&Qfc9_;5fjWJuD($WYLyL@-7a2Mr6DB
zC~VE#QtxZEpLYMaSJcgvDw`OgQ|9M6$dRBeYj~L1tI>}Z>}DxKrNJCfLy)dPbPkOM
z{Y%buu*%PY_!m*9Df?5~U2=MoNWpzf>i6CbT6|-|w=MJqcOhrR;6ZH)uM6<6fgI1V
zU3*JHOp<OH$Tau^8e}GBOS!TG0(o+<?9!QD9F@eC*g2jik~eV<@>B&xbKJwv8@)Da
zn35lUZ$NK1wP!##0uO!1G}&0$1`E)O_9wjaD|wPLKju|Uokl^fQ5IDRbBrVAq+EK$
zz0Y-JS{NjHZV39$^&_CFCV|u7E7{tzG)KEkmj9feC=H17QO#H&=BWaey2=S2``I0g
z-?68e8mZ73e8mkLNeuywt{YeIqqTG((5)K;86<!bVx3<l2EP$1?!TiQy#z8;$>U!W
z-l6Me&b{d8$7~Bpn|_L$NEeMlrXHcO5vJUI>FUBy=iYxP9-+U%07Iq<w%2>-jHFz#
zNo!oH9R1E~R^p$&wzxn0K>|bOiydV02=Mr2>`?>KP}Rm5d5-Q0_yumNAjEiDf9zfs
zVA72{j$>#Q0{#(Uy)U{lLao1^&Jz29X?5nK|7qlM#Rbm@-_E^aULW^g%QIhC2lm$X
zDDrgjGrPIuHs?<2)Z0FFk8{5Z(R%lEZEu2&C~2)KG<yDJ!TQC3$X<i#Du+6x&u}-$
ztE-A(_k^xi(@r+8OJ=C_T$@&g`O-lAPrrdL1{V0*Hd0xH1c9OE`9_?~Z%=Z6aq^L#
zSJGNaN6~vAVuz~vb@%xFFGuCxG_E@IPS*mpTsir^eR%$icWvz|_Sc%;jW_TIXFokI
zWl@Td`W8`F=Md2{J?S!4<1*mLR|hw6e!BkrH9FQ(Fe$LC11Z&uJaf_$KivH-Y|yxs
zx)Ew_xi=P-{w*?J$?oe&tf9^q_k>qd(rQrN+in>))&|v<saG{inxD7jP<yfXvhUu9
ziBgI<KMp+`HrfYGEhv@K$a&|x8)sT?=SA5Wv*pKoeu$vND)I4>$nVJS<rpL_vRIoc
z))~h5uF`Gu{DB#Y@OmwR?gX$`?tW_hY{WOeRGF^WViA0GTE=ht-u2s&tb|I%8!O^<
z{92jPwB|1mtF7XWLC&L%btyFhd^?Mysy(E=<(D_@Pw3|K4oiyH1b<a)ak|7!?kDC}
za81cLsWzMr1JyezLVxgJT5bl8+ca1ht&st#Kn=gs-Be_jYAw$WWUSs>O3mk9qbiSK
zkP_X9boKvs%b$j&Y=QI5W9=XYdItL+4qVBUD?h4UUE6yQHg(pTr)Pft?KfSXq`79A
z16ga<2j7-<ZUtZa)c62d))lQ%klwwA>8z|V)C;iYMmgT1<4F}$z~mp!Xiq`UCenOm
zre7Vc9d>>ab~c3fj2{>29=55=`~uyf%*Mb6X$RL}zZ%ZCl!i2Yo03h+bXj*kN_@bL
zN}wJ*E4O|ABBQKw<#pkBbW@E`KtJrO?3tI>P70M~r}4tAckXZEM7s(=={|GiHN1!8
zQ57=@TlsJ6?}60OHn%x-OLH=;UPdJy5YAIHOVfkYr1na^nKHR~=DS(No3jrMB&m^G
zog(Opm3y@OCOI`i97dwT4yjM(LoU7TIvTcPS<Z1X@@HMn;rVS;V=cq`xZYSArpT{E
zn7WlRzpqF7^p?wGMAFLR@aybX@)D(u3#B$rZ*C%_g9I&VJu3V*R+v%9avEG%ptX=g
z{+yEo>NAVt9NPYw+^&e->HgK<k#!>U!pWyB@*i>X>kWV5SSq2Ijf|JUpTC?hG?@kc
zh5dTUInm<O;S7gX>ykn2=Wk+^pKU*ocx-H1rODV_ULC9JjZPi%`CPZoS&p|7aq;xG
zHp*Pg_bG&UEUkds%+mR7G*!8HXYtd)Dz_7RhbHN^$+m&6<FlJ{4hbwuI{isVg`L*3
zbl(jMCZKu`1L{TaWF?6FRdwh2-%?3ZHTx0GHz#fm)v5esW@WtEd@35tB+WJUt$VIu
zwFBf-;MUt%kC963Ou7Xb*ZDH}dFe5~Swl9c_oaipc6+vL*%-ojz86jIy)Kh`Ib&wo
zc38RKt$A6tc-tJ^K0PQ1ZJl$UC+VsgSG+sNg^MhoA2&4K*q$tPa{o2jxi?m|I-x)y
zyTBnAD96d-S}|tiin^>b-`%=l9Z)n&-h2?4@PZ0iXHQi&fO${_dr9#t!V9TjkN%RE
z;#4RgLmkgtaEY4(iSsYbm~)D~bbf&&_yPL=<LoP=;_9|+lRyF_!2=`#f&~cfT7`w+
z4#6FQyA@Q>V8PuzxVviz?gWCn7H)+W_72~7`@X*2J-XlPG0u+~464pP`>eh8+H=me
zmawXoRcR|I!Jjs|vZ~>PUx9r1Aa$<)JUX-RWJ7{EDX2XR2>UZS47vi+sb%uU4Z8a8
zTACzQnxBsp-5qBWR&+^HTWPSz;l4Wx2^sumqG-HAZJeN5UH<ej7HTN+$B)b-OIahh
z-C00!`#>wVRiTY47-P)YHI0ESNts$^3PPvefEvd63+b342#4}H9!*Mkp=u%NQyKbU
z5`kmY6Ku8_rX+ZgHs9=yYnp0DAsxbqJP40ilhaDDOGMpjbt&a4IOmbVb9TRdA(^l&
zf_F5UAYDzT-@{)t`R4W;O1qt^)C_X8Aqeg<;Tw}0fi3sl6IxwMp-0GqKj+Z)ZY;`(
zV*1&@;cs}<@aycV&MQggerG@4(S)onV>B`#at2h3sF&t;<L<5N#?mR;Z+4sr3k>V{
z?N!WT^Hw|QQeH7A`6&jd=Y^j0n*1^|A-9aJohV5hY7Q)yI-IUahFI%RUI&Jn6;2$U
z?vtlsg^SdIq2f8ujY1T@csjS^;O$dAvh8X8Riy{(RZVfp6gVKz!>-IrnQ0k?<s8@{
zRaE9^aC{D&PhFtXQ3$!_a9MqI*ILCkAeGZqgmr#6p)6b6>oW+AmA{of&~pBup>Y};
zz}u0wZ&9E>4l!62s(8DGFq+M9jE$?Z-!2QiP`=GG%R>BVaz$A)+jm)Z&ibM`ITM7g
zp|=n=0ja>7D>q+K#cI=BgrT*o!Els{5kKEPmz(K|N&U9_wfR@)Pkuh%QmWiN>g6RA
zx&8)=3lDQ@1Qu;T-+LQC_kx>uBdJ-tUpfAVnaX1lX!R}`&!`&<IkGnjQgX3F2eaK~
zn^k4|2U>k7-jE+I9QIo)xZW$|>nO%3Ji#o{lzXvx#YHP>*;2lO`SR%H@|&M*UM4>;
zUuv~LI@Xp@hC9X?ty)N|$ZqRke>h5}*9Z=4IbK(agErmImBKpw9q&>W^R|4wM&oD=
z8RxRi*!CH92iHxK*`54l2Ah9ez4%@6axQ1;(U9DJKu+8`4@*`4NoAm9{ON#pd9@6?
z4!h?f_7e=v+!VicD9c+lAgKd^zCBehf-)r6M#0;(0cA|LH=>)0GfU-n)q(bvBnWk>
z03Cte=+H~#r0&kTW}M<uY;XwFC}nvlL9GWSiTkDE_+)aMYb~L{GoLy>!ePW@IF*4j
zv{q+t>uOtEt`yVQnx1X+6nDKWhL{ETM-5g<4v9kU7FyBi^U}hfGXv?<Z@!P?l7HRU
zADc|Qwm-NLNq+s?3gon@6#<r1zMMTb3iIY9lb#wbnY+xRC+T6~ZPj5hU&?L!P9*9W
z)6X56R5O(sFoR{O4u2KvY0#}Pl<s_)s0rvNWa#nouY$V^rG*1(*#&ASjG1F#oxKhl
zMy^L&6{omtM5Z3?``nG3MMfp^HKl{s{S)_#?kRN%p-PC09T0bY<}w)7jTQM1$mY8A
ze&>nXu}Z7{{d}8^RPqL0GPBC;<wc?MElPMqTT>35%5F;q<`XhWuU+Mvg*&HiA_i@b
z&1t#8q>`&Q&YhBMtRWQ`1~2o%#!Uun22z^Jd8_A6>ipny_0Zr=CKcTX4+GMaO_-(F
zgxP29&^E)Xptw4_Rs&MKh<pc6UHWktFVTJ6gl-jQDo`h87yCx$JKW>R!Zq@w%$XC7
zvN_9(lID>DwhaXx`+-9(k4;~p+2M4|;>pxboa$QtrRo}259Q2X;!JStszExYru|i;
zqV=nqU9Pz+&pnGuy1{$Q%eoJ|>(WaviYBcirpQ!UDuWBTgJ**FZv1}E#*t}0CR`$L
zUzn5R`?GKnlXY!GY10(ULUaR$HhyUzNmEt@f_%-e8%j$9e5yqMEuvaGP=xw1T%%b_
zIr;UdVSF)YB#8fUmCd8N$dYO{9zGVfX8JW}iterG`0JZ_+pDYax!L(vdWF)Y%^oW!
zYl>asI(;5+TUO|Bs_TfAQmaapfVCJ+&j^(+XzsbMmju*8^K4%#o+Dkw2G~OCSn@`a
zEO3!rtE(qu+rD+I*N}kirJ?TCC5zoTmWIH-@hZZ~q+e%K@^bXG|Gvb{yh_3EQM2Qj
z^It2|jM>gARv%Sni3-y?uioxkYWWZIA^KR4LDD=$wVXwV7|K-2&PrFjuIT}9&Ww1@
zrhXoFRVTt{fube)Cf`?1FG2Jw+2w(FDEqBkeo`uNOBrqFd#W@244%8waXl$JTxM3z
z7$~HVo{(ZCp{_G%iM9@Oe)=dIoLVGE^G4QYN##(3%pcd?|NOX(<RbXx$eHp+ac%l%
z!XFYvVH)m|IcL|IMy&4Ex-_t1SDhK$&MzR^H&%05hoo1f1W4KJ0*ts*4WXsx`#<@K
zT2giWSb`1zcK?O+)83Czy}ash<*kTYN@B028W#6^jdNR#<~NOdAOaX8wVEv!^UW=%
zT(v(MtVeF^Ex$8+jKnZ>7N<8EPVuw02sqsym)4%0ZrD354I1lYJK_<}5fhzN9fE8>
z#VIW57VYi24G-FB%wu+$(ZRypMQTh2R11otj;AO0bn*x54}P7$_n_*`;NM_ydbbD5
z*DkfR?uHvf3$9Dkc&sVxXAM}NG6*bUBYn(n!&;E?taY{HwhpJw8#8c?-ucdKJtJG}
zTzGFVop1N`5U6BP*QtR_H*DTCO*~g#82x77Bds!+281-1()FGZ!W|<M?!@@j`RYU&
z+BSVq=qx$c&Wn+i%<EnoGG6Myv>yZFC2-zpFm{qJ!TRCYGp-@xp)1H7{ut>ULFZeM
zdTxJa!V$qOmuKKx>{S?P_4CcMC(u&EeA$m{{3N@eN6KP);+8!7azp!zO}Z-VyX=<M
zhAcnW@{oH(^&5kt+ti>lJh{FB^x`Z2{c^Z@g`^P83EL^I80DvP(~)`PZ=b>qs*Cr7
znH=VTx>UK|(^krBMnD<iq_+O}r%y$>49~&p#x1rogN@|3)AClEA?RjR7V;hjanqy{
z<)dJeyC_A|T!K^w>i1mBUE-^xcAfNzmC}P#37!!@pJ6&51e2ldM+|5dd__`^1NwuT
z-i3YI(0CM0d~j++@#KZdX{l@$KI`p-1=miC%tZtJd|yVIkUJ^<DGSrBU|__nK?fa`
zeqO_KH}!W}TgA{O#<8Wy3K374X_Rkrevb&NFE1=!4QgKbv(VkC*zzKTK3fVJ{ML$_
z7qNWIq~k^_ZkI~(&1;8r^u=a_$FGrf8~8op2XlIj>){ro*SDmihOcic5|7hIik5;a
zhO<KoECZan3V6|{CZ=Bx`3oPYjXGOzjVnAeX_c)K;Iyoge>8lJc0{VsIwjfxir3;J
zF!qMBbu=_;&^b}#^;i}mlMr&*uz(nz25E(fh3}(ZF1pDW6OgOeMYT~(uw?%_I*jnt
zHU71xvftG2fN0E#{c0-SmRG!9QaVz<0eM{axWUJ77p_A5f|rM10GG}4T0407u$>?2
zyQGeRF%__T03q=yT7o-LaV_AgOrEG(9|p{TH@HNWB!-9;MI@EurYKbw#t5V^5Su1F
z(#(g$EwBrpnWnVckR=ihy^7CWZ|#>~-Sf+(fUPWMfj%-Q4htdor^Bh-h)cw6dq-=$
z5eMOD7Ul)n`QK4(jED`B1Erhk%PiiXp~Q#X779<0#Jr)ZRv!y7Hi8zU-7#|*#HOV}
z4t8pGPa4*otL#;*tW=hW3#COt$yGovS-YL5aC-msCDyi{AuZUu+l{NN9=ZPUi$j5k
z9&o#Fq7qb)*+vw_1MosW{Je19?Ck0o8#z-Ya1lQ0kDfdN#XlAMYLauCJ&THfc=0o^
z>=qI2W#1IH!qn%7oy_04m~Rdu=!ww6i%~ZhwlTjhH8#(jwPPX+K0<B|eRN?}-r|E&
zdGf`k|JXGeh0cy7U{N<!b%~WS0mck&NAvuCdRrNW3{MG55;wdmbfQ&nFsk74q^p-P
za2)m>Z?8EEF>A25G-iYKEvu>R_Xa8tyho{3`q1M(IOspZW1m8WNh&`~eEl3#df6=|
zKr5$9^8m?&F!*@ncLu7vR+YOGljt4uVy*K%*;P;UQiWO~b;_E(E%7HAqF%Fn2v7R%
z=!WKgc*ikY?;W@g<NG)$HolcfC?}^hmYQ$*QuLadq^b>P4DRr&2QajA=hGgeQP6}Z
zc8Z=(&5zKJw(c6;w-MF^pi1;2{&#FmEfvx`m+pH8{lh<<xU&rBD5|)s>I$5LTT^1&
ztUsW@cGH<+sivsmuV}3d(WC4SwzP^T9e9|;&Qz4cM(fY2RgTYqJY^DmdjCn9O9gAJ
zM~{JP1RKj+K8TRI7RHK2<M0lU(w>;U+ujL>izD_6H-A7T;Jh-LZOzr=Ue+mKHfmc5
z2d+&2*$<hlV#*erxwv_90~^iH33{a(9E|fa{hrI8tV`^d7FlQES0658H-to$m8CE6
z@MBdONVHiI#wlfv;ErwC;hLTNNj!yzQ;4Kw3jLBx<WCk2O%zO>t$8KI$`K0_$r5F(
z$%zZ%6fHb;LgIDWq$i%MlVQ|t0ooIrk5-4i>>em0B>s*UE6|j)*yIihh$~T(k=m5W
zqfczB4ko7^{8Q=fY`&OH252y4(+ENOm1;T&)wlN@wzQhOrtctV0Z3IA%<%CZrKv8d
z#p9@~OhyTHIDV{@Q<)a47|G|kk;pP%t)#R03cmH--J&a$y0u~V74|Fj8P8>AVz67x
zux_*Tl+9u`P@Z6X++^fSoW)&28N*7W$2h+ETmf~B`J!*5lO=Jsc$rR1ZV3qTyCOPo
zyMKeud&VkqlM)C0eS_oFw^YI!?vHMAsf`zuI^Og-E>th@dc|}%`h=dIxQk$u-_#+e
zGOx;S&Wn8Et}+oSekNtXWu5!p;7uKa0hAMhNh0t=>q<(#wm5Mer&<H(MVz9YTx1jr
z6>yWj3W~*Ti@mHiJ5x+t6JEJc{#}_Fg62anx0Nl<{q%``+RqIAtnE5zuxWQpdcI!k
z{SF!sU%r%hy^=4|RQh>$x1ZfnkECyZq-4%dmkZR!jQNV-QUO&ujWfElpYGJEF6>lh
z?Q7-BUCtYc{l?SGNru)RrNkPEaZ--_<0}+BW=rR1vr+50kM9r7YMbdjDF#$aC}z<x
zO>cvqzS6C8GXmD)_TJSC$CG8*ro+N4@aNP`xG!3-96j1V574?HH*iffSyVwv`y{F)
zb@tvlG@L{rZmMg*<YX)Z=zyM)8@ijE`*<W=PVjXxjm1IcsYv0gYD73x=y~Vi+F--;
zak}GTyM@mU%W;e~iq48=Nme2~A!@l!FNmjW0y9NJ4G4S(x(B4F<*-4v|5gh?I>PHt
zjadl<+n;j0Z%3MKHlj}DaSbcgX_J^L)6E-DEgRs4CPw{**v-~(uYn!c)sl|q+>$u$
z=<#S`bh}r0^NP+!BRu5P`!t&b7clDXKZ)g7zF<rPrA7rCwUjibJe3^F5(_WTDcNDq
z*OhD9${deuEuD%9BNmX*oV*nRN=A}9r{lT*GG2NF;32X$K!uq<#WE)5V;L9#2&bOz
zH}1|-p9qwyk*F}}&UOb)TIlPxeig~|Nnp*ElA^=E&%J_&fiBWKZBQ^ts-(n-JA<y?
z<VZ(q5%-%kh%L3B_MA*4ksN*sdL8M3CDr3OcMl4}rN%GOY?TL%Y-@&gL|!4fXg@d}
z{1Q3VY!o5rVja1-yVJ~_Yjfr@S1Zen>*<-EaYgWQynQ=Ol`@g{c0(fFcko7wCV9~q
zU&TtRl(B*l`Q>Mz{-ORw--kT`Hg-24zP*`mFy~S_%dReHvqiM5Qw}&=YS0XPnV2*_
zTlmrcrMim8HJx6gG0Jz#uhH3BiXoXZYU7p9t%S4-S-j9l9A$L3(*B3!<$Qgl0*xH|
z&VgYrvzc#i|C9(JweFXCn`x32=j}KpjjA>{jM<D+o8L`82He`W(NA7;Z{|sy-R?Pq
zfcjS*nJ-p|_*^a{WQk{KuJyPxW|~weNk0Ww+K@WrhEzM=c`h;2?NeJ*%s0A!KM&?q
z9306k%C6bx%9L$!@6kPl&E{kZu&}7Rj|5K$=j&J1<~o@(;C6&%L8Lg2`IZqEk$jro
z)vyq|;&T+gPuh#NZ@7^kyldI}a)Sxpov|W;iF}nnf6N05RZ$kQ;60LCqxlcC>dgTQ
zJZB7`MrS&aKpge7InSdH6IS!y20cL%yQ++tBbj1ZR1CbMVQuH5zZ%*UA;PYD>06-E
zxq3=G+Jx}j`;#o`HK6j-=SD>tps4)|h6KI|Mmc`0RTGUGYb2Rl=u14HRbZNPO$ot!
z76R~~<)%^5pUmL+(&tT=7|($W%81XGU#}W>r|y!To$r&41kaS44Ic)ZZN?mDrt`{0
zaL<nnLER&1c}lcvfuHGVwHKLwBo$L88z^v}QfrO6H?ERcu}>?rd5`Fe@jUqwSaWB*
z0qa*;cu`eeEYKSdB9OT;i>dA^VBXOwFkIu5-BYU;2h&-qK5T?D?o1loZ7%P+B}=@p
z=EmV(k7jF(LW_IA9w#v;cr?@qj@8jk4ynGL9<l0i!r#YAd1ggha5;L!-AsXf&J}s=
zXkN&uNy)xg7*XPCPjC@&(OqzE=#J9i0WrJh+Hm!ow%-9H-AYy6==rL3=iTGEJ%{6r
zwFZPL?qHL!8<D%aJE4A@F$jwo<k_%G)aWyJCiaj0oEc2geuZaSgI91z#1Z3FveGPu
z2juKrz&%A&X6|=s%eCoLdeMfvgBZ-9CT-w~a5n?N>Nn}m0%{Yh39=OM(c`b?C;q^N
z>h%cKCE*b=yd4Qbl{Dpi^E5r`3`@U;jfER$zFeaQLLrmLsi~r<?1E1j_KrWIUZJDZ
zwxC~e^p$`P7_ZY2bOs~&AdIN~12lA;x#F|we&3%;=NeINz)6FE{B%B~OwhgQq1~CV
zDVLs8Z#Y@+7cvyZh*~LzgqcsVI8?rtj$r6@dd)ZZ7R}fL;UWqE(NzuPX&^C`Brb~}
z{`}gqgYU}i%@98PgW%UR(nEgCK7LR4T$bf<SeU7WXW11`ho4!gK84TI(8ZC(e{{7r
zrN;4Y`XUh}Uu&6Yir9lze#<5pbnpPW)o1p#4QJyOO-3hBerx%l@hAUJowI78PD3+z
zlUZcobL91Kn%~h%hs5y<l$U1h;Jj@~bsi#+QMLv-FMnkK1{P;!c}0$E9_OD*b;CE$
z?!P@k#p1ykWFu5<(<f3H6csdh#;_^`a;+_iO^u<i)T+{tW?q!ZvsB+hQLrQ8#zLie
zVr<aI24j@>Gj}RbykgBv!%<6T*^F;{El|ajgEj3kyf-~~S>~&ZbnTdj_*h@++@D~s
z%sgUt`J%m9%}NyGT$9@*srY_-eDiks<*<RMC5<s|Ejw>BOzxzL8Fe&)AdF8;aH8sD
zvtPo&I3akpvzYFE99PZz1Q?EH0Vq+M%oD|)fL4a4^Jl+^g9kd!r`zEWB%YS5B(;cM
zB*@hT9>1H*?}pO`BJQM5e-Z(>K<bb#!9=`tQW&o-!cDFrsqWY~joZn8hr>+daIrNj
zQHfe!_V@NqSdm5%3$Xw+Xp_fusX#Vn#pgOOY%}QO%?8AO0;a3WS!Lrj$><=D;qF#*
zD7{?xi+dKINmT}e>R!r`vpbkj?3n{q!bN8bS6nDaF)Uc<Pt)BjUFTlBZw7zj-h4Re
zCpfsgL2wbw?l9}pWU8`ybmp|T_?`2<K|8nIsy90jcbuR=X>4xF#`Fvkirn5zyeMyH
zd)2Q@tN!Cz4#7F981Bm>zkCz!qWm@ZBf^d1Szqq7A}b7|YqSIR<B?kw#h7+ZY@<0l
z<DO+!<cgYx%L93%ue$BcUrp@PQ(|kJ;G&hS1$$1!bF~@gCCPT|pdLuBfl-kVvyIr(
z2hie2s9<a6Mki^r=NHYm-8W$=NtdF5KHMoFZ)h0I{5tR&{~+*uMuJS7)xsoL*~RRt
zpMxE!0n{H$5j+{+0ab&J>{1J_)(@vptVH6qHzQhY`G@-p5I*x(7d%ZEDM%0Q+2(x)
z^1fCr>I%g)-tok)>dCa_7%p2o80A2~lzT|?6lJ1VC(s{#hwfPi<du(sbMo`ehSXsv
z*IM|&Vy*1+l&&3kr>8LDB9oV+XeRbMW(ry!n~}JjCw&Uu`{8SsgqguP$2~@><!P!<
zn^Mx$U$Ba%qtyZ<5a)Xzfue(PGr_UXC5myVsK2ZRCWgqOEu0lA&;1Fql0m=xdT|IE
zZ?^&WrPv!7y)9H}VsTI8=VQ?PlA7E|FjHleYhdtE1af!h5hGjOP!$x25*i(S1f`TV
z5xN<BdcV;i^^$d2;wXwzhMwv`{q?8jk`sHX1lZ~K(09~U8U4mth><3UDFYRW`7fcA
z=bI&9;r27#-oZ{!?XTx~ctulzk5?8te;y_E&uyzrXcpH7m(2PrlY}cUAJQ}>P=Js+
z%E=Q{&)7|nwwq3gNbAccsD6E}MWaJd;C&x}72oCWy&)P_Xo(&1Q-J}CUaq{W%6s+*
z<(bQ~zhP%Rw`bs%K{Qwo)MYlO<RWV*+OyfW`uBEx?D^-#Zm>X?q5g6WgLcKN$`5nx
z1}z*W^b##NL_0g(^oW)zPm^U##Xr5xw!o|&dnr5~CX%BIVxl!48>yeqe=eV?#R0v$
zf<M}JI{EVkYFX=85M((2+^{^vVSUSPji%uhm<hMbNJ%z8@yq2B0fUl`Y@PWV+FSc6
zz*ByrRVibFW1;H}CC8f&MV8e=ikDV)VMcrP#l{24I~{K?78;nEt7%~zrdy`T$9FG$
zyur=@Y|KE%G8YQKy4&U+%^d^dxdTZfaV)Nn=K$`+s@bt<@%U_WP*?HLsE+C7BTk(~
z&4B(59PgA#AC&MfuYZ5D8c52^F98Teh+PUX*yU6$E;>HOVS=ZT)6mVtNLhd4#HxAk
zP17uT^32$mev78HRU7FXfYkJLdV=&lEUIl{zsY+N^K|N9k1+RFfej{;cJJYPov>;E
z4cK9?C0%BD5}i97F>+kSwrL7Ia!zl98B3|!lb*GdsZei?#c7cH6R(|Aezc`)Yq=qY
z8TCSGv~EeR;kw86$~kSXmo3D9-^ovyDVp?C%o0y+j3p7Zi5K*9-j%*hrISjkHC<AU
zTj}f@@804*$9bYP(jV0nuwO*JAuZK;sN@lM)i4U8lZtOtbRNqqIrp1Z;TQP0UfjG_
zTX@jqdguZ2v}vKzIZ?aKt=+#Iux{96gAETj?DL*gHsPD3v=Oq1cCUQRTWrw4JnMAr
zpJ+bYz+)qusdtaz98j%g&~)CCQ(uJTWF{Ve6Bd(MyJMw1a=)Fs5jkmY0$^V|z(r0#
zsPgirkKJo_E;T!*N^C}sZ;b@3!{4S-AGEMwiuIUp+tE##;lr-&+In}3mVlV=bOvre
zV;`HhwH^mE9?{Nd=AVU(6j&sMhF;7hUNtBRw(Jka9{pf>$+VD4qpD9h1=VSF+c?7U
z#Zp*Y1JdVa{3-y7Fqj@ArH1D-A5HyX&K;M@Kf>MYI)!5nAm9x^V|?EvF>Y)gFW_#R
zVP$#MUz3zxMSKRND58z)(R$vw{{nVGFF{kv(R!%sRqLy&5>PYp#F7Glb~iB_A8O!v
z0jaWL4qxb&ZQE<o>qCE<0a>`plooXx)eYzu>)T4(HfMaEJE!W2tqHGt7`07M!e$u?
z)6DnimaG36rOt4y5d9UYAU$UJ=C`N0e&MmuU1EveW@d5G;~wrNyOdYhpIT@81}a-@
zo!Pt|*M>P?x?<DygQCZ3Xx1@mrGDRPbDFUSiW=Df)~>a;nlX00Sr1gV)$A#C|Kd_X
zTMoHf-53}vlMMAw(iPu-ZMB(lkk5kq#bch6#i2v&{{2XB-;3&T%c8a2Kf9>a(FWhG
zRNOq)G4Hou&exQct9Xykp2Aez@rBMklk4RDE#?ZuA{<Ix5*C7&S9zLLcbfPuWaV9h
z)pckYJi23=TxgEe^L6S1Pg!>bU@+e+)Z^M9V<j_nsK3^B8&>qyjIS53xQ9kJ24voh
zpvjPsQ8g!wo^Vd;bXe){I8bv&Ii6m(gehnq=0VeHVqgq~4xUx->EhJ|;yv~DReq;z
z&KY&cb>OL&XL+k~DyFjAkP=>j(eLqN!5y`P92x$a+3PXx-(HT{{TY9!*av#lO?9j?
zf}vf|O^CtOGhuu);^1xvm2hEK%ASQ22jST*HQzyWlM1c;$$}gB`gSGGfVV!IiKTSa
zj|94wu#j91LS)X-GjC{VuR|7x((p%4Yqu?8uEGZWVKZ7FuJc!S8$y4~))Oj^AGDo1
zF|06ge2^b)1CQGuQ_Jw(H4a5)6L3!)M20U_KWFDpK>O6-6UB3s-mjXTR^?uF;dhAk
zLaDyu7dk<flF#emw5E(y`}edaKXBsJLrAB76%ykI!W)RLq&_e;Y>19$^$4NU3X9!-
z=%^wS<l%gB%w~UohqRGn)v#B{k^>gjV7AFA)_Uf_nMlV~dEelv8#H*?+5uSdG_EaG
zg7X<+uHt8Z&O7{k=ZTo@sy}9yLO%_W2Roxu-n^K&x;B|?zgzR|J4sQC?Afq?6MC<u
zx@r@eB`~b%;n|hJfnj)_JZ568lDGZaIYQc}>q+-l3EO8Tcl_`SJVqqK>Xqhr!BqdD
z4fjSjO8LP8rtRUj^L_`Fr*M^BSp;~Z6=Ah6;PMGNV|CSV!zv~;gjFW69XgfG`?_mS
z6p`6~3v7E*!`&FnCePde2$b$0XZd6%t>RWn5Y6Qk5VZ?qF{<!gHjNw-v5Y60eV!mI
zAi>%juF90t;>$w_DXGjQrljE{B%$@GPxt$L=dxb>CA3dem);;_LZr1P%{+qUd)lJv
zXK>u8cGk0*zdxR>ECvm)U(8Jb+3m2KlZ~%DCJ?1I4vdBk^4f;#^SN76g>k_ha)`cO
zC(^A5TO{O`AnjA`a#`8Apq1PSklGA2%0ToVBCksI+ulLz+#QLVu;0$JMNi5{y+_V=
zxPYfEo}Ddj1$|CjR0V_r>WrYep}~~jRJ}_s9*0L6l8ao8BpwJG!Qf+}um{SXv>Gb`
zATHdvPTsSH&4<juza-rGh)qAW69eAtZKoBohYgcXZ9k(f|FX^Ni?#sem}&==CAg)<
zG6cU3rrYwI*DDmIv&uALH@Tn3yzYa3DxEjf8R4^7$5_@M&hVGBp?h4*aRgeLxd=eP
zad_>XPOBSE(GE^uJIC+Q|II45`12ZoY*kBjqG8E3`<6=AqSttN1u1MR)p!+El1%j_
zzm11i;>$Fs2L@}Avexbl@lWj2+2(R$*4)q69E_uT@@+8kN}La-Rb9M=jfXFKi{1OS
z9oo2F1o5O4`6Qohth!gZ>c2DuL#U)xd6CmDe@)A>1AKqZ!+~ZHNXO9QsYN@f%5f%<
zWFCP?bLjc*zf?&9?Hf2-b^rqds2`q6HfBQLxiFUU)t4WAt`bTsPF+S&z1WXc8i~id
zjhy((2;0bCEbPaATbDLT+v;*W_N*Q3TbcV&eNB3tyL)fV<r#mA$<J|;AEWFY%{ZMP
z+-5kB2~7DdBJ5KUIn@1fRILKK#Oh!aMW_H2@UE3IU;6eljQO@$b)Hlon=iN^1f7l3
z%U&#@m8Bz;6o1|U(XIX{)+K0U`zc%tb)sB}4N*Z7T%bnZy>caowt1!1H2f{p@xXE%
z6xI=X{6Lqhb!Mdiz9Oxn*tV~qRTsZ!m)LpPWLR4*s98Dj?^B~A;4{G2EL@Kogc?ki
z9`jhd44#6X^1>219dy*GvY2JkOJ`a^7k=nVmY-Co^2dyPni{FUwm0L**mbBLTF*CA
zcEDeveC@d?R9$L6Nzq{*sWLs;8^J4_sCpwNQpKGHpA0Wn&Dv65H`t3vWpQnF^Jw^y
zOGF5ViaJ-UXPk`H(vQJJw>KH)*aa5t9IaFa3UM~nFRyrA;-HJA3wrmOpI6GCev|w5
z^E|c5%CK853Q7EQs;KkT%{~xuEHS%-b(FnTtGDK}+T7w#=p$`Om(75)qQtP0d()+6
zo-xGm9;kObAoR`h)uv6zq8(A1c1&oEsEP3nm;Y}PcrpCu){axSh`(7q)qhQ;a8WR~
zqbhDIwGfU@$RT^kaB+1#a>h5jw5Lh*{t1|$_A&n2Nz1A%>upufnK1s!2@hZ(MNZVE
z&hR~H`lJa^>4n`wf*-DEj}sqfVb$g2Aasr6cn>rfwfp01kCW0Fhz-Kc%eD-{8FZKh
z&V~z6Ii5z{og}TH<Swwed}tA!M**0~s(~%iL}KkC$F6*AT^FhA6r2&eq|o00FV3%j
z5K^gGnb`9VBg0)UNTNnCJmpS{{ElpdOV(NRdc|c$9oo@07aA@!R@?XTuluXK=z0dB
zl&p8?M>ca?#oY=>jUjZ>M<Mx^)XQ!m-cYe6wKU3b6wTLjiSuMbR?;o62h|Ri!_GJv
z7EMex3AA|K?v$_xi)PklWc6=|;SSleQ;MCWixgi?CaAvT4E+Fnk)>Tv^`cHk?Q0{=
zvAXM$f9HutxIJyA&-2ptBWEgqMwW$Ii6PKla?2U(r?^M9ZQNjNIwa`p+&dbOJh&w6
zWnQMa(ku7wGx4mo_B6{57$mCI)4M|*Z&1@p;24xV(B=N3`<w23+Ok7)P?7yXGi;(?
z23!%kXh*1U=6qD#`QVGxum>G9RIdM{D?&PQU5HFb9VoGUb~8KyG69x#-ZSzlV#<23
zOO1Wny6lYL>1`bX3|&gJMF^v9&R8b^lq*yl@z~f>Y$bO8>T75b*nVchIl$?~SJ&(v
zHW+)TPv3k+neANM^>_o3We3+ecDbHzs>yjbxS_a|yUG<?3ruP6>{#|$b2NW}`N8!}
zCD`5#s1!#|l{!*%-+cvyIt|v<&Pzhcg@;F<BD(wD`K)!q@Ls6SbsbFmPrQ#ER6Lxo
z2;N=;%{qTESv~^xxPFY@BKloVxs<rK`5AT5O<4|hd1<@(i~SqVONIf;*&6AxTrYAN
z;LRScpMrvp8jADW73i&GuDwv8BIt)NxE$GWrFYyu;b$Fe4!r&1xN&<w&^-5Q(!2s#
zisU%@qxl0v2&0Vbi<p0~j{%6Jd^A4s2lJQ@pEF&s`x6*B0I0&h_V6ay_k&L>;b^k?
zRDPlM0-)xS7_63kz^lEVwq}NyDUHWkOqumnDxaQA(EZKGG}hzaEw31UzE7S!;Rbq4
z#qe2B&DI@a?ep121mV#L5^~yP$?j_?HmS(ea7(Ec|44Ix7MX83Mo<u?RJu1K{#s>w
zD0%7?2qHZT;HLmn6iO}@_I|C|<=A_N)0&~*J;;8e_ajg%JkxgN*Y8}0x$WuW=oo$(
zbB$V4&a11dzN3X!;!nWz=TgFRmEs0<&96?vOf3}#&KC-x(f)s`EI|7y36WvulQyCw
zX(;k(L^CwHty+$-VLqI!CTPa{(92Q*<uWZDe*z!0eAC3j&&>C#?1uKsHeG{qQd)bT
z5si;ic^%?piROi{DL#$L20mj)e|z2n4#Vf5ZMnYCjnsWqbD2wKwb+=-sMGin7Pe2O
ztE<ZpMh6-`kh-$Zd4M(`7b5f^v9{qP;Q~dfJoDK8$hJ0t2P&%eU|L23$CGiOVl(_I
zhRTUH@mBbF?-hfx`g~R0=Tb{F$*3)dozdI|uxgDl1+T{rJKiNN6Tn!6`*KHg(j!hs
zmN3PO$pt;`JRJ34qWi3$DAF;4uhW4tzq9~8`=wk7TqhQu8gtlKGk`Dei@H*C^bz@^
z0|EVy&oogAcV#E?0Hrs&lGS6j(9Q6QNAbM|Lw}!<iYz<%c7%)Ul}C=u?NbgbE!EaM
z5udP6!fC(0W6E9EmgVIuWc7X+E*&yg=V=ET-zo$?*Bz)f><$p}v{GkC*WLbhFSv|L
zPTDCJQzb}q6=pG0jqP+euhR7OcY%1QW_5hq5Kz(Scl@gR&qJ-ECFa-+EO2Ck^5=K>
zbQ%%4A@@S5zwnX4qIxIQiSLm!|BbTJ;QxgxE~5#_)ONk-;}w)pAi@1eG23$JRs5pH
z><Zn<Y)SIP$kLI<>RgvKBHQk>_@ACrM&a`(tDsdmu?y=7SI|6@W)6O8n{A@(yLqz<
zKBrgh3aOijP|eRZD#FJMo|0`Lgc3k)p-71U^~!>_OHS&$8wbfW`hvK<U{$6q#F?h!
z;bEH*-zkhlEa(toy$^;ohkI>h|4<=r8c)}R^fqeu;fQR9x;We1I3&9W^k5$z!W^%5
zoYc9La|kjGkHG@j(cd8-n3_sr8<p0K_sw8wEtz*|3V+s2dL8R;$vPuq1az&Fc=bcH
zXWh#G=1XNFmQtT@g-*SHW~U&b!1ao)a&$_WPTn8r{N-*3pCo?8VgH5K{Qw+GqaH&Q
zLR`S;lVbOd*Pedp(u!XunOo&g3*5rar3VoGPF%dovx2lu>+-0=OXu>R?t@%DwNh7_
zjAUlcSw&OIenLVx*1=yK2nNLGTZ}wjUlXnjO%km}!U%wDCc<GfkYY6eqkAuzNZt?^
z0tmD4)%Um&&(zFJ?7x1@mIRKJxm4&o^66=*XX;q-6;k1M)#eM&py>1XL0Du&Xe=y1
z`Ss-1{?zDPX(HiBa?wAl$2Q_GX@9)j9vchlYBRet?@4tnTYXlChtw|N$Qr#>of*>?
ztyr2eV+zx~{-QpU%VDvD{M)*!&PqL$A`U{Ze{J1qwcS|LmV0SuI374|V%pJNvf30Q
zf0u^1I1okOorvjjIt}G>IC!F*ucGRo$ZU*k=N^-~MVbvjm3_AWCaVx?j<?Y|aetoH
zDjVw082kHU|8Oiwn>=ZOt31`L2K<Bari=|XdUWU+)wN+lWwAMUy47dMOTLF<X`*+%
zJ6N!01k&}C`8Oe042|$t1gsrNq3#9K&L@%WtE#+eh3Wih<GFkthMlRVqE_(->TCm`
z&HyaIZgY5%+CcCL+P479XuCOSo<tj;%~SGa%8ilqWP9TQay5ZGfw;2Vri%jw_hS$t
zkbCl67V{lA`++e#ORi&29?p?cH5&*^tt{=WrS{;u<#f-)M*;n%8Jk572(<p<E{yu=
zOS%Mr`+qQ~M|IrVVrg`Tl~!kkzvGOcjiWPiHVa#<AreRZ_Q7H?GloY=RD)Nbe81yP
zWmaxpbomgY4$%7xh;;eg(n0p7tG7oO99LHHW=fL;94f2b9cK3csfSUUbe784WIDgq
z+hc2{_f{8lDy3P3b=C@@g?MI{5gy+HgYSuJGz$Z5o?fg0&7DQ6+Ka@EAE>q#8*QD~
zr<xB+h9l7@22NmF)ta#C7VCxbL4E9okrwf7+RC98{fUpiG2|FKf+VEZFTAb#6f!?y
z;M^Z9xB|Qx!*78*tu#&U3)TKKN~H+fJr>Uu#T_meUvSTDYExZl<dRU;PXkJOv$g~T
z{Pph(O~GdkjvLQo3+0t&y?`9x5en<(Y4)#MkE-6MB6unjgC$ZPIP}i*@ISiQ8AO?(
zRd#SlBh#$I@mg1wpF?gCppb-^RfXonnG!5uTdsD7QMP%aU=T+xsU8TVgYR5vwV2bj
ziJbT8ZWv6Oo_SKwbOjT}+kY97Hh3z}>$>8-C(s*B_r3fY%{6=r$+;&HfI`L;E`sJ-
z{{o#ax7lF%ilNUc+YHBdx?Tx*fZue}GsWUtJj%TTt4Qrm6ivmHner46FYhi^Kq;@b
zPq8Fz%AIamCFvbe_daVByV{+;w5wm_<29{)GU3^NSFEjf@u_;H>&uIihUK-8?Xlk}
ziMToLf#D_GMSmTM1a8;^JrY^9b#Uu$g9#YkbFiuG8<gtA10ZovI=d5<yMQ%$D9)Mg
zWXzT}z^rBOpPjB~Lo@;&uePwLHVfcT1u%Kat^D#MaGEUnbpVO(kE54e^LTBZ=T}ka
zu)?ZV0!x|@I-A0Idy$w&T@!SZ`c03Yo&U`TwuiH%+oLC11!wDG0ZiZEUV4iy$pxQo
z4!ST}D(c782dT(G<$siIdmI5qupkD@>dgXB#>KQfYD3X?@QE0NUiN^RH|fRtfZ<EV
zw{e<gv&9XW<0rn%39YyvFM3Z)#FM)Qw7;I^4Sz(QR0(K54I`vBXi%hS)VK2>`(3^_
z)=GJ{1M<C_ZCa9L9yzYBVEMX-Y<J*gxmQK<VnkhjCd&e)NwgI>WXT3EtYlG}uKwAs
zwz(%WK;j0q9+ale&f2kByid65L%zEQbnoDFe%r15SAOrXK1R9#rHRPl{dfb<kwj$b
zp2AZ~v#xOjbhOMDYl9cu^|MX@UUM9Pmc<twJmTHCGUB(U7o>syD_J!I9t7RKF)7uK
z^n(dJ7tXU44&hkCZ9n+tCM7x^zu0ye?J8Yx&B^yc@&w3)TV{JK4$Dc|+%`{`|IbgI
z_j2icS%;!w*yMLk8XYm|seqhkGy)*?zE+!Rs4cEkh9z?=2Q_q>x|-1+!Ox;o%Y6_R
z8DAujP-gPQRlB^x0X$RU9a#JmIzsQ8^)AK&P3r4Ul}B}EAEhb&u-`j}J#6;MU!C4^
z#3Kp4ohp-YcXd)&oc8`nEtX*i$5^eiP4Gahfb>UcES+yHEw!61bN1GyVp-oj2o%!l
z5a?^-Hy9&Pc>y5;+j$C##blUAB&aSCUKADYP5M$>41E<G7QJ&$ch2b4pL5na+~x}{
zBtddkdFA|e&LjraBnNz1l0pN%!g?>uFte60X#g^^uT88}_{bR%{*;YI<mAh0(vzof
zAk<Iq3f>;e&2%&yliyEL=0K`pAqr~=euVjom~|C}rg9BJ-8BDko%i5c|4*h20n4LP
zqEx<GO*%(ge<M1lyg&oywR$wAeD!F=Y(^n*Q|Izh9C5yGS?QmA4+aL^8a9pBFzOc+
zw>tuxJZ|01`$_eC^uzn3Iq_TT4Y`bdv@tXyL#+jJ0Mr;m{B*4cV``XZ?Jw}CUIVk{
zByH7k=z!pQH<b<={Dx&4D7S<#6*^Z>sj}}&A-!vd67fO25g2dDTu^G?sC`JMHi4K=
zH5PDUsipf*n23-}&2asEfW%<{V|cRmtxYPfESpZ%M!amj4@arpO*ar?=L)I-r@sV@
zTEBSFHEgXA<Z;4|{_c)173`!^i*z*?0dj`C9V?69LJl)b3Yp*ra~u4OP^k2Y#a(~=
z8%R}&v>I>q@gMiHX);^V08Wvmptv%P__V-pLcyET(Mw#i!E@d8+4o{EUnYUp2qe=P
z(Ooqm0J3t(*8Zuf5Sp)j_A^Xp;OTP_?8`eK9u5k7CqQO}qUHFmJY5DAmABUFUH0t=
zY@q_JVRmzL&I56FAPw*Zxef%3_O+E-Ig+n%+qxi-)SHv+%aOv8p$X^jt<vU-D8u73
z*PV$0@aaIMOeD8w`wO0G*V+}YbKQ51Ker7}K~kqv!qqqeMQ^#ko$v7o8gTNT5Jam3
zJ+lHEA=Y9B6HNW_)C5C!XC@fWQJy^TlW{)-l}tW08OCAtk;EefTz<S<NZ^nXHJ8sb
zj`()qwm8!?8L77@c`Z?ceZH?IxA66XAo_4G1_FPbE)s80ZsQ7JEwKR<CHEB1Zo-M!
z(jbA~!oj3z+99vg6{<wf@_}}Gkfo=}RBK-5Mc&Zi4oOd}@1E(6;GXY)bC;CN=7Y#d
ztnQp|sL5FA$||G(mYuy!*<<7eY@6-kf|7l?>1QBe3fg8m*j*C(B0kp2XiZPU5DM^=
zq55Y%^NVxj$YUz0Y{@(qR~RIGVY2Cbd6WaV3}@Smebq93-&`Kuj{X+tZ#BgatXxC8
z`HFVylO>`50L|OF#ckQZu74W1L$H5|WzZ*%DZOKP)L>L4s)$P_SAU#7(}K$QhEm!Y
z;K?ryYB)83T(*BBQ==c?HX}g#>r2+*i8a;gbvjZkEq()&W-bFr>`L_SC~wQzcH5S}
zVHU@W)1I>8b$;>zA1TPJZ+(z4xl@_zQnBg)zv=Sr8#mi;3|0K1Q>Nnd_D@+JeH30(
zLY2j6x&v@1W<EgOg#PNSSfdUOWT@-!OXVi6HNj_$(3Q5GS+w?|PB%0Wf#JON>6PT0
zQfN`m!2_^5{6RKc)J@^F=x?k(0Q>S2prL`JuZXi%#{(kAo`RVT9!BE?=kFQrM4YUP
zI8|xyrIMy|uq)>UaR<T_4Olem6sj%L?U%7%<Qy(sYYr<8vt>G%WKgs>2aVWe1}3(Y
z3}y_+o;uqsDJa?ztE?7)eda0!_lvPAIz!(0-~?d*{z~R#YbSi-1`yxdIi`<@XIm0I
zaGu!Ry%^qKs!)izW^2;xzBX_kv;9f246XGRk0gKIDj^MmqAO%GE7K#1RTy+tgSs+(
z0AQ<6VPlYmyJx;EKwZk+O@xBROfmjozvFxOc38p&eGb;%w#g5!f#9-G^qcudDi<+?
z35YkZLys@t4weq3R=yqYW<hl;ME1U3I39clgxb#yQYsPX*PpLe8(Weec?MetB+hmO
z&xos|mbHp?E5e=qQ38&Gcx_3KSWs=num}-rs6rOfWc4n(F!P1J%TW0uQY$qY<8H}F
zusBQon(wYR5L}_#4{xn7Ol30>jC^psJ|~tWd$!#;wm8;v_NTSzkY;$vr46i11vG7=
zD)IAzXYjHw<X(~Em8f$r9S}`z&!}|l>xms|yZc6XsC=Hi0ipImsOtQ5f`!z~@tI=7
zn>6Vz7R}#*e<C)A=Hh0L0Eq)%6YXpi{iIARtKWF-k1QK{=fxJ>B{Tf_U1HC0s8P-G
zY%+qo+Z}-aF?wL<>5XO~t4G|b{y){P&dyoCf9n`UYsCaou5z}1XC(&Rf80^@v2aLm
zdb@-NDJL-ascv5p<xMwSSi+FKL|hsZ*})8l|H{Rs`05zH$aa(5V!ItAb^b<mz{~a_
zzFrPRwhlyq=7OP*8uC&A@mW^y_ub~^RTMdwtn}0gg*PRwFdpKxhH=%`hYf83e#RvI
z>f4wnpSACVwdqbCL~cL=;QOPl_y!-5-x;##Qgk?##D3T5E*ti$CKe{xH$$4v>yn<`
zcg|u@-AJyVUu@sQ@B7$@&(P~FNE|-vT%u4eAHYp&wD-cS)Johk%7PmV2plewyvLvd
zBsvqTq2+A_%1GW)LqWqLIUBNks$J+qn!xISF9^^4MHR&0dg<M@5$5X}BLs9W&KFH4
z8QjCZVz(`lT&IyO2k9-c@q7>aJQKio7q8oOa>TI(NIdtRm&8reX=kF|-mHCK`RMAC
zu)*g-HX5GgKRZ-w6aN9@9{|<gFcs-5?0mJ7cYJO)2|%77UiKf%u6`lt^SI3CMpEOi
zE26Nqrm26j<)q?Pb%7iLaj3Gtxw~?|@OB_QYDeS79rQf<McQ#eu1A&NS%!@L<}c*y
z5%T<dy;p-xi7zuB2-b%*6;&M5#af5*jn&xx-Jrx;0S=Vw1lXaAn%mv4RX|E0fvU|T
z$V}3BKp^?z!SCw_0kW?1I=1(50h7-3vw7CHsNT@s!A0t4$nfFqA>H~Ipil#uiP-LZ
zD~Hj*NsgMq4Ug4AMR43rMU;#0Q3AG4fubMlFzzq)hd21o3)Kg?)_P8YrHfYdq3fc(
z6Mce!{dz(Ils~a!BiiSaH_BfDFY=SGO)BEDjK|oF8_^>;-dA#W*pD9lbpU$%1Z&WB
zs6<fcU*>Q*3-_p6FHP0@3=P#q|9VR`=*h!V1M)QD$Ecev2XWJQ!1zH#?*zQ`_+2{3
zjc-KPsBa~~bIpq)VXp!KD38zp%J*vT!6E*KOYp<{2mmpxlOo26R;W+qA)mztf^ZBJ
zjK2rKPY&EbfZXj1`opyS^U@LhIqnSw050I}dudtRf2{=$WYUC-Bu#w{EYwYz3YS56
zX#&|TK*Yz8Llp-RTfQegD45%$ky(x#J5DEO$2ot@6cxH1&1m8hWN<P5@nZkwu}K|q
z6Ux6}%3K<j%@I6yjhoy0$i51QcuhwZkpQTWzCVV=Js>x<^B-UO`TQH-HO6Q%mra4*
zU9(Ci8U4RLt>EkT%Ycx@I04fK6P*$5;f^04?0`&UjBPu^=Qo>HB<;U`<DYZoW%$HZ
zPB-s1&zcuwd0D#jW#9)n#Cwe4UxfeFxc@f%WhE+L=gD)su-ku_o})-KLFW5N8$sq7
zVP=w-q$$t-o#Fh`g8s)3M_->jY;lj$y}SrG%c#FSdC1ZN4pFv%;dt7v$FchAE#fdD
z|1W?1<HL_%UtS6_ANpMoi#&N4Vi~Z3HmlA*`|bxA2HD$`|8a=_<v*ZOB7+$c>Sipl
z2ERv{Jnni>)_%j3edK+G88)xzk2R?I%kSqu?d$*RgO2!vF}8mBYf6}!A+P>=wSvnO
z55A3J$xE;DyB_~*LGFJw;s4iLET26L{Nn8FEJW{aV_@oZXUGEd6Pw&OFJPr(?yA7Y
zWCUqzq3vGrPj6)3$cQR*&gxLW?NfL<II9<%LOx}>qIYR&<e+(`9Y`|RzU%0D#UyJP
zL`37Qjs+6HxGzh92)NbTzLHos-2AM5rB(eQGLS5(!TE6Uca;~xNlaThiAW%k#6g?;
zby!*(>Z$6nR^P}QLfM{>2Fdigm79)+PC*isYv5_pIUjt%^_?*D;lc$<&R_B6|8-6O
z<xBa`e?(35%6kgu{DFSa`w~7dY5jwt>3l}}M>uy7A&4qRHZi0yj!t&v*OdjVEuA~K
zbg5BTTazn0I}peGuG!({^r=RRKHb9Ib?YXHNWjvI^&ugnV7&JvveU~LL_9)tT$Wj4
zAN5AUd^&N-uiq+5D($?I$VoqL`yQS?nsMk!*6tfcDJ!n6!NLA4vZt`vO}@@ty+4|w
z%B-FNbTL-xq`A>ht@}QUGt^?>7T1Jv^be1ecV{3F)PuKSpIg6>A?Uxd?>G04goNUY
z?<KHIrH{n$<8c&S)GWSum?6^T7+|@}9=n}J1B>NU)9cB9^oIXj@c-?HX6nZe?2gMj
zyuqqVK7|`@oQ{q>x$V^)i_^`8wis4*@}1G*Rw{_|`{x4C19BOH)swpW*$=XVuVZMT
z<c+TPWZG>W!Ha16uI=EN?cE^CeP)}*itj4LOH{@Im|}_Jc{!%Pv&LdAxVHNz2wAl{
zG?YI`b+be4E|*7AT}`hVtzPL2YTauLK3U2$WD6qTf<)K?vqf%n()p)Cy@gbN+OV_U
zEU9-%nwdm6hVGVt=F2>cNq4k{u+H!2Jx_&gtIYW9tF`+~Xl#0s_Z9H=<bSyc4WwSe
zkw0%0rQ{m<Q9t;Ugom9VB<SK&i20E3;tA#7;mUuung9MTw&4#J^)6k%)jsjp=VC#f
z{hf4_=8VH`*-S5jvI4QWZlJ@P8+2IumB$7`25~iY^-=FW?Cpz4*GZ;v^KG!(X@W-z
ztJpB9ZtEu@TIKiY;GU|E3lhGxGy!y=d%@n*L(n-<c2^PSZvvVq`RiP#n(9Bp`Dkog
z2Q6&{=2xrLrW;hW+Uz8;bUN~>leLA#fvY_^$<Ft={HaMw&D<5$@MeeoO)JDo{7lRT
zA#fuU_AU`^lPy<9h~e#@KdZObhi&Ze3nRzVKTz5v0WM`4&Ch8{R}HiYT&z>9KQSIA
zO6@)1Aw~2^xVe$xB(J$E|CdY8?jO$A1>z57J3cRdI<Pf*T=fxIH?Y!3lIcfc;4c`X
zj>L6XN~UDa3#DW4`@jRdjpVw+v1y4a8n;VZ_EVs!eJ#S(b1CnKfw6O1i@SVyEp7h%
z$(C2N2~$-47l7f5U1$J(yySPgag<DDrQs-44@88f2v!(=%4^luu&7!tLM<$&d=ATz
znLEd_p^Kw0mL1s7#3M9?wRW5keYX=~9>HePZ6bU2WH9GTpg<mD$=lxQ&mLHVQbd<P
zLf<kH4l14Z)gKPgNL^o4l86*o)z^z1yj0yk9q>0~DF5Hy=x@t9B7InH0{t)HS)OUK
za_Rhe{HdCX#R=&WZpN8M`i6O93)h&Yw&9$o>Zhi;3Chj<#7HL5p73*qvp44yEnjbC
zpYI3b^->@o^5@!}rO|O&N3UKK8mL^58$d2d@`is5sM;vz;h%jF8S6x3WS^`%tohd8
zR&6Pm3f9%G?-C}A%+(#{-}fGOvUPKnD#dyvHjEmz-;{uy&DMPrW0<WicPL8(Q~NQ!
zp-ppMNDup(ASsaRIIc`6`HE);h4lP!6{?G<N!<CB*Bf%W|K%*8LjN+4>uV^){|ew>
z<qOv(C=;pWkhVIvt4<{YW{YAOWM|k+Mg!i6tc)P(psrlYz2eaLf+#g{Wk|7uT?kB$
z9{BVW+)ZuJs7^9%Y`1(58(+oS-LAnZ6$^it*eaduKb9v;bEha@Z+qAMUR)Y1C+v|R
z4lK2te=L=)e|Vo5CRLR}<%Vi)BIU_e^1Yjl-L2J)-9MH3==~8?IWL_rFU^t~^qy|?
zN2Q&t_kP69y+5eb^BCGBuJ#zvjbRcqE>x~5mX_Oq73!s#RB;8}@cfvcY0aKyG3;eO
zCV5y<^&cN5P!lsrm@s^S^j<tttHH7i6Mo+Hf;N$d<(4(0bt)e3>0jA7|BLA~`D;hN
zd<i!u=<&8ryW(3Qps5}gRk%D$cHX+yHC8yuPFI5AqgUH@r-sf!#tTE|3ZyG;KG&)}
z-apNvmfHw9cEuq2!F6~SdlyOWpB3c??`uA*8rE(6>eDTgDiw&+ne}czska;`L6qAr
zAf4G8Nj@5(v;TisdkdgC|7BY+xLa_y;4TU7?(QBe1Og$ry9Ws_!6CRiY&=MCcXxN!
z`QU%<o2jY$&V45{DJm)K%icffUcI_|H2@D3WOU-<%xkvm&l5_rtqgu;cGnd3F~^uO
z<&1ALsuYR8|Fb+iooUDq!YLWaFf+y7?h1R;=)4Ji$mi}m(>loE;J?H7gE#NYPK~(?
zbE15_#e(pTOl)NZs*{G`wO^mc2dL^^_BeQ}cKmK>m&G{1b(A-36M~38gF>J-tBe%}
zd4jds<>W7y&PP%3U%-EOh}l3Jb`~L6Yi<^}V&bp^W#g4KDZ7_N922?&eWjx3z<OGu
z)lNsTV6c3I#GA^C>C|~|J}N!ub%F7|Krf)uGwFjQr~LLpZjt@Ngci5`LG@3EmQPO$
zs<~E53<tiZmb+yTJ=BqjKFy-5W$e$k<69$D=1e;&+-fv{GfZx!r9;@tmIxDv5D(9D
z5{?zfH|MGFkbsbQlpW0y%k^2D9|`E6CV=0nfpp+e$`;RpHqdyh8*SM_D*!abK%JZ9
z{nTRnd^#!rP+vh4y#n{j2bR9rFPD}j+bWLn6N@4m_lZv!q|z8?VW^EuLC5;dSsKIX
z<NM|c1x{6G6BS0b8aCvwHNO8AF8uc(!+ZMeOH9YKKt-|=z>ot+uhSGzdoU*v*N=h4
z*0^0G^K^1L&TiKZ-xp2#-b1A>nb({Wp7^~d_af+?<MMbe`eV;`ql7?ioZIm-`~4*W
z_6!}mP|S6<%`c739@j+SY0Q4kv2DSgdcA<a%aHK3O;C7lLfKMsw~>Me*R5t;9Mt)#
zKdi@6^yD|Q8)$=sygHlZP~7clgjEmyLd{C%RP2wBaN}N7X=<%<>vIID@;@5{RkrDW
z+}F@0#Ls_S?Nk~Qg`?5`sd=XPoZdGKbRyx}dAQENyo3xIaQ+nSyawksbWY>tG?u%o
z>*l3oCxu^G1j3}3YpG?BXrDOh`-|X%JO2B%`5%|lTkK!P(95~~A$;EH)5UNVbqheP
z&KER@ex!sqI0;I;eOzIojpcw*D^nzcZ5-cb8sC^jpwXV_WzR8pb9wr`i|~>1HYS!)
zPP#9ZK_!aQuQmO}*iDMw^oZS9*g<sdcOh(4AUq%3vXS}=NUc7&ZyuZ~kx4{vt7*jn
zhHH?R!-43<#x23NKm3T<mP!SBb%ql^K-GLw9A{Lhf`}uAJU6pn0S?xR6u6Nb^KkJ}
zi-!chV`|p9#__0S1+C<#ud9y_)DD%-s)d5kXV~|zoYMaz%>F-(QBc)kowb>VfAa4j
zo<BcXX5Y$ajJA;H`M2>xOqMArEzz+l-7K~qkJnq+?cAOxsMc61(Ng=Ldp={s>o<7D
zP!4NLf-xDWEEbwlD@4$<rsCK6<9MynhobS(I#?+!TTk7RQw@!MUrtauz!@#@s+(ec
z_!l}+ZKzI!Yt49+y&+gh&_V!u?&wsDlxg}Bcv8M+_Z5ns9&p(oU?|07Uz8<Q@C!ZE
zPgJ;g;9~i@gn+%YiTNvo8!0gpOWQz&{#|qiP&v`B5lhNomGA9Mg|X6r=IG|&s+Pxd
z%d<C;fQ!5mnOKH;_-CcD-*B5;6v7-sS)Pa8U+!G)cwKMr7{tD>DEx_jmjxu($Fr%1
zO+fGz2ugoC3}zP}Xj&O^0NkXK1G`Fn2+ZOD%B1YKkG*y}Hur&=2-T{O88?r)sPotO
zr|8XCn|sSO6kQRxos5M1Gj2OLgF21z%9JuWAuDQHm%g`h^G@S^Nb{x-+-iM_OFw<U
zp8(YiDwzi^vF|vHlDPY7WrFEqVbcE!xRgLMEHq{Vf?IcO09eiI`?v!3TH;?X{RWVA
zkRpBk<Zo_{H_xl*J3qfHHq`eTT@^JuUF**L4Y#gr%aY>u;A~qxF70m(kow;J)7B$<
zgFL$(T}3AMUf(%|7xb$I<!Pg+g5m?`R+ZjZ)*WO)2p@PpkE-mJoG}_?p_<AjNZ%du
z+3N<cPAjsK0;4(#GefQGJWki*FeY2k*m|z_7kt-XSsH1J^qHS`{;1&bx{}=nooBc6
zal;z9IVZ_W!fzeI|Ki!1&ZX!I!4yFs*q5I@^!z~vS7W0+J%j@D8o_-BBDkTQmA_ts
zw)+>eyR^K#%;tN0-Tbxc#%8G{S0XY^aijMKb?A*<7Zhy!eGHWXwe`=L-`NoVs<zXm
z0wDf=G3wj@J>T;W>+`?+yN&w=#JaFLzOWRZ*BtjLL=j)1ix0C5K!Py4S=t)?pI-O>
zmxWlt{MWAf87|QsvBQJC@O1i;z*%7e(NMpA!Bc<n;ZOQvV%ca1n27_4aCG5cp5gxv
zpcq7=DaT%kp}#<0sLZdc-_rx*>q2f%@DCpe`PSQzNCEtBUgXRB@}`0VjGs-_EJ@;(
zar^v#X#resAc@YstSD+SK)ewr9~1Q<|K9}Wf3(y~3cy+(w@OfxzAl0mK(z(U>VzTu
zU7YvAsJ-xz2003XZ3rnEx(xs97|Dv-3xQfV@AJ1_Q81DGO}l$yQ*J%U%ih590nbC>
zyN0I#WCs6zkpAC)*JlJcM7JZ((~4%V&m(_%9y!O`gx3@HA1&cOKddkPf*y&9iO*hm
z?DMgGiHiTCnSD?w5}$(;f{S0$5`Xo<&+1ce`_Zi!vZbX3Akn`wzI`D<eH7(afQsK3
zN-2y!smz<dc+vm-$`NWC;`x!H2*K-0`k;~mD;;boO7_<eM1}=O);EZtf8H<e%Mlx9
z6G#5b=bg~JW(a2QAR$5J9(_^&aL#YQw}36<*akQFtNnjjz9>@Qtb!sVQ2?IYt|;ms
zGr;$91Df4J>HgLZ*pR(Eb<hm3SSi+=ec&$_b4e6f0-HvBYJ|VE1pa)l7K`P@!q%1t
zA!|Us-uIIhU=6$se1lQ`^7@mke1Cx$ug8j~35@eKQb=cgNsMeZMOwZh-oIGi;g=m-
zGOGgEwcGh%f|o;2Vh@-?e)}bkSiHZy1i}a}ZYIg^#kA;r0`vX$uk--tOL~BFs`npi
z{6D{6{I7u9IPg~Cw4meti{17P1D4eZ4a4_eDY*aK$<&Me%Nh(YA5WzUy?a^18%W?<
zJi{%R=#u^ADR38kIR(HgjdZsA@&4r@&O9%~_#<+r`(Iuz)W#PNb9{Upgu5kjP3}AP
z`u?|HE-+WE<bUNP|6{A=-3u7Q0p`d&#MjMkBL!Y2VOBfbU!0}aU-3bG@hhORGA1C!
z<#X@<?)6B?zJ(3*y``9!AN`3Gw0kk>B|OO|lTMF3$rKk}h&_Z_*caaM&msAbL4r5i
z%Tn7d@q>XeSq;Ja*!{D<>6AX@?-E-buUU|iZ>bKsJsDJ&2Og55$Gp3{s4X6bg)bd4
zPX2N$+Fqf~^>vUTQ6%2$3GwE7`QL1~&mt9>;x(K?#Lio<iVKk|{?_Ly%DkLPXg^@9
z57&KsU$@#E&L6Y=A^J;R{_sS2TEL}`3h^B1of^~6Rfz4-ga3Hr|G9o7CjSe!pv>w7
zPQ32c0qP5ZI;LkfHt81GITVhj5lz2jUhOHn&g>vpkMmbY!$;wjg7@?U+@hCj<Yb;p
z7a$1~l*a2KJ(?|%?QFYV54pN`iGQ(mi62TVz$g}mH<`-`3khx%A_z3x<P`}p(l25i
zY7Y(U<{uiv{H<jof3ZxDkB_8@DB&p3eOBRbm~s_!)gc<~Z}GzMK12aUqg%@0enFAH
z#AGy-FM+b*mAXZ}P(MKu)cBXHw&;Wops*GJYQn#=41y;wN5`D7;?*>sh`F?)+AM)G
zJz$Xkh?0p03vyMNd$dA!egY(|;z!QZ_6y|tDOK~^G>A87U8XJpCG9_;v&}&{etv$&
z&3=^O_bd?iK<U`-?08-*<Co9UDU|PlSdLWkA<|awPS|R;C5+qtP>#j8J7cgY0bo>D
zFY<PQj06x+$&4}Cu8GFdOMPqrdb_y_C(CgIuve!`G$n1<f7gZuL7>9!1E%%*hzGG9
z<g`p2``_lq|3?!};{0+s?{9BCaM~Zzb(|D?jyyInt4Q1c{jOMMA>S1^XX@XFJWe~S
z*?Ac2Ri7?gIwCcY*EccgbmBBKv`K7;?o1y(ty@GA0D}^~;{meU<NTm|g*8(cUpqjW
zDwoIudbGLqxdNdNMKuL$S@E3m^3ea<Z2I!*P>0)Tweov9x7ryAnPZdx@_B~Qd9D3T
zukB~u)(;McGu@0e;a=9+KFi@*RKgd-rCRII6M%d-gX|$R!_Gz$o6tken;9@4X4x0m
z-O>Pnx$8%v-M_nLzEm$*J7L9dfO)w_Ltw7lCB?A|&?`X&-?*DQ4O-geafW0tXb7Z@
zXOQcJhJn8ou*V%Z)2XvXC|N9*f^Vua{bPdl?)PIc{MNM9jI0MVA_W$RN)|P}((EqU
z-NVCT_{r}@YfP&J-c)+@gw&&^GFcBBMVnf!;um6-<Lq%P=jgWfP1J%>I}^gyEW^#A
zMqd<T&4SnM8D==nIXc6waW2Mn5IO{uepnppci-DtJFmP^0r{MbKhYz7U3R9r4=~{A
z@Gl<hUjF}w)GqIAQxDWRkVMJOGA$e_nl3Al37TTx$}^xg4b7=`U;X)VF8u4@xA^QE
z<YQ`R6U(&9Xj1u|(xfq&WJO@Evw^I)<!<D&DV|&szYbBELB+`K!6VRS+xmG>e2>o%
zRxA=L+!0U*>w44`RGUg<F&-)RSswE@_?0sB&TDVLrEoH%0Q4)o2usQL=5&+)2?FT;
z1Y-Inj|5WS%-{Qs{T-fwRCqDlDT7-s?GIy{MHX#N<TPrbChT^5khHp$tdExW37+Zi
z<5<lk@%=k~7*hp{Ezm?$<YomRj0jv4kJJ)+jb7r{QR~Dr(P%_iVQ_uRAvwMI=y*6Q
zV?L~(^U`}!JX2Ai*aC_r^}u5|xWwnMSWln-bZ{e;Y_NS*LjBSIM73^e8jxlKc|HaL
zb(r$^$OOL<S+Z4@bh&8M`Zm6O_~s#K?D9NU73p|1Cjy7wop<)}*QI8~$G(+1>t(d6
z1DjkrjWVUV34>tEeqvGgLAHwJMvoL$uOy#uX2XTU;xfk9OAz*_YZTH^Bt)3BQ3?a@
zY3!1mS1Y&^95%B;38lKZ-rK{w=b~`=sug4}eFIG=>X7G7M@zZUn4f!Z5X=;+jQi7=
zx-x=~nqd?L1>d~S*NF+m7+~teE3>>UytH52kh=3YWp!zBoeYg-w<Y_d>D79(F{o1)
zlBD0_s>h2il@C<b2-W`)C3u)NU-_zC;mQDXp`~{}GwUK;uKUy2uT5CseaJ@v`W=Ek
zb9^$QO?<vy_9_qzf&UF55O{GcrbZh-J_ck>0ojw6YfTtvxYTrvBK-=f|6@pi%Im{S
znrJiCNPdW!bsp$osdPQ`rQpA8jpDuK-e`>oD!j_CXG*i@G---3%&dW=mK<RAMl`q^
zCbLT51-t1QPADEl=vh|Lbg9a*=klm6srQG*Z@JPVz*XKHSeth``c<3ihUcgFeV9L{
zDzXSYrPd027b!ELOrM6SL5@sxk&QCE3O%*x42wb8TRBgb!b~$gw+jxNk$@ppzz=Al
z7F)bW{AE6zX0Z)4iiojMKATWE+dK(em4eHEUPoxnVi1GJpq96#Ir>`96LfD|-_+Ek
zW9#(tCr?otidr#a;_A7Di}Ky<!ID{nAI}rpLxgPiIYr8V+j%nwAS^eEPF0}v*f>#Z
zYFt9!d(1HB04RD6eYObpzokc1D^vDqbogB4A}_&>hzN~HDA)RMM<-u{`au?FZ!Ysa
zP|m9*Qzeqv;}Bb@DKbGg)`}fRr>AS#qxaigFZ!o->9}8+NW|gg{`8BAp%HH;)Aj9k
zy2`#8QojD7x9!e(@!DqLgc*6jJz&8R3JtdPQhA)bGJc1={Z#*lC8<Ip1$aHVfWnR9
zW~ga_!7!uxVm^C78&!xm*+9_2d?D;P>HSmwC=DbAI6PQ@x3C~-2C5<~^<R7{xB?5w
zVMIiJa{%<mM6?C1>4l_wJq3g&6j8z+lLU2I-hl#SEGBMfFxbQq=bBAx#5LpjB*E|M
zq~4Bp21U+fJJASPEj8LP0gZuD7)6>bh)4&7g6^;9H{O5^nDC895lpNQm4*I0Qbwb6
zF@t7&dt}+`S&ndyo$9&qJ={8%>l)%EF0(56D$3q`44EjRLT)G~)|Yf{kBH>jBT1VX
z9oL})t%6UP?ic$u3Kshjss8xUKbr@JQ~5)(#KLI%_IvJu0UL!{gBrTy$(JdRO8EYd
z<J&`a%{i*|Q7DV`wqYNvmgK$4r=6+=?D{lac1<Yb$sve_=I!_Xyt@&>0E$#uhJYz`
zqg`PM7Q2Nt7sCS2iZRfa`G8JW7NK)xnQAtFvkB8NSCy&RL!a_Q{tt`kmd9$>L&{ZB
zuhoO&0Bkqaa*@O!Y_H|L%blrIw+qu8$%*KYeaybtwX5vl7QILF7DgOK-4@qWN`(}P
zLiR73>4x8<R-4%U?@L>^-W{m52+t~GFzM_1Iz2kze?aeMF`7WFfbc2eH+3C)pxD8T
zIhH^<ROkxBivA-n;pBhY-q{0db93w5<4dzH!8xf02k(<1xU!W>ywkmS&zM51Ms3&w
zodD%aDuTA<2R1=sr40OwDmxkb|KX(k*C}(yfE4C4(vM!x_QDLmveuyr-nb@ykj(Y4
zgcoczKdV5AiMkYeJM!a$<8Knm;_d0mrb|4@l-fho4WI-pKKNo8XtjC2&oMrGj$L4L
zEssGiZeQ|HFEws41q#@Rp`-E;u+52IvTS1(0x@b7LL%XgsK`j<NbdG^u<`INMB?&G
z_Pd>3I2Gzv@jqVOz)cqK$?!E+W4qj)mg=)6D8Eyn9rJR(i8<*;{^qnLyK8Y&9g=L@
zmQzsm(&mJ*8^*NLyTqW~n4}pIs9riN_!#s(=cPG1YgUEkOLA<M$3q=3_I6c@pFidg
zN2&I^z6CSZ`#ZV$oon+}m1Uw-C?S3I{Kbq0X6{eRg}CoeiYTHFQMZ&<xzV3ibDz=h
ziAfA~aoKXR-5czbD#)N{lsaz6^q$iv9Ud=selY(MY+$fVfH#KGGVe;hWH;=k4!xHn
z(B^f*YsYUzT&Eh&NV3CLJkYH8wEZhCa6iU$<8-rMBeuv;$`<~i%Ipty)z63{*mD*0
zA@q$W_5$UxvjDc#y+X)<wtKR2(_zxN#{G<WGi{DysXwi98?~~E=CmE|isX3Jhcq4T
zBWnfPD*x6>oFMxcYaES-^b5=tE)-VUe(6;=Rnz<*jmu3AD(t2I?dKZ&vABJX{7M_H
zy`GIPxSyvig|W+Yb6F`uN6UqpO)EL2!CkBKm3G^Pkf4Px(mY^h=Uq{hj!upSF({->
zMD)%>-u?2^ZMHn8Wthh_B3haS1UD)B4j1a9*M5hTObVIohEB3O|K^lVC4(x_Bv>KT
zi@+utqX;ojFVrp~)oZr(<E!AvG6M!Sn>4!IBfEXRM&F*FV#;&2ZAG)C`{*+4DU$T2
zHNc%NHWREF9JJRTxT5!bgmO(|5&awbr%B6GaHX7%LxwTcFwWOHnM8>cCjAE?g!s}7
z0OPzxgt*8A0K!CphYV%4R|$oVUII@C2(<Nq0Z+yFxlx-ZnAh#<r+a8Tro}u5y}7c-
z8^=Il8-)`HS{0f$P6%kI5Oj)aTFS8nw5?nt@KTHEtx3jtMO=6=8#HgH+mI^o@7}sK
zN|nJV9-o-bLz$2Fto^^+izTAqUJHc_|C=pndu9WVQ76omvW#$nY6qpoQJdpUySkO(
zsm1+|-oZyPNboEAmcac1+uf@JSP|TsN^MfD(0(K3zO_*i%O;^-k^&_YKOW2yvvWQy
zkk_m;J(ge~K6dsFj8Ejw{y^!`je!u24{T2Mlh?_*$XwO&8@(o%pd$fi!RsV?q)IAb
zU^vlC=c6`Sk5?(|IRFeYBNp%9@~#~(R|wHDk)M1ts53%<$NxZ2xY!ieL;PdIdDYZo
zm44mX^7ef$LPDA1bVNyke0X6c?il*{<<ewH@Fr%_WUkJ^`xc39N7X8Aijwd)GMxR<
z^}L;_!+F`y&q+rM%@ST9cbdXDdi7v&<Xxt<CDg4;55EVmn_iZ=Mq^^VdV47o3WY0%
z!E_cawom1aj86V8E`y)wHLk4gjzk}JLSoi99XcfYQh4%IT4bH??%DbbihpwIRXBgZ
z=YE%<^=gF0tO%H`E<~l%*x_FKG73ti6=5Nvz>h!!UWk>vrBZ;&T^oWnzz=06cAqJX
z$NaahnpcFxA@wv3vzj`N+`&D0xhPaDLR$IXUe*_f|CEjjYu(|V$ZX^r$t+;hC!5Sd
z<*iGwRmF@!X@zsR^a$*kw!2~ak!po5&EWze*dlPUzH)xr>9wu4-_#Z+AO-TXvFsKf
zL-Dw14+ZRJj5{9w<?tCpMoBgk0C;l&W^;Bzdu$C75=tCSYJ~*qR+76B@ddj=F)%!u
z?vHQJu_r1;G`QW4vZ$epf;A0#a$^5Pqrq+@l<MbZyc^i>`L;5m^m#cKyZLsXX>TkO
zbFu_?rDU1WNME0AF5;pK`;HOuG)<33@s^bW(PAqG6wp6%j?F~P{H>X%<6$Ob{L|Hg
zm}<QtKc2w1@&*KlQdC%0$YRNJ;xPKiFlB!iw>m7M3e*Q^uf$Yp45Ou`N2T0<zu3N5
zFJ{iNk(p;{?NWa?E`sjUamZ)6e{;!RoF6J4+RIv(yClNcHme5gU92laLLRMl203*+
zAGbbZS)7pY8~5QbEWfUDtIIv(-dvS{*b4t#t(7bwjF8D$VH|Q*doUxX=X!CT$n5o<
zuae{QY#Nz(uwW006_qB&PG>v0M1e~RBM?ZLaD&{?!33Swk>EQ(2J7mOOea8t;jiu|
zhs(~2?<hFj(dxxZKnY@3mUZf!BIDHoaX?QP^Vb<_?Uv8Y)Bd+j*Pf`5b7fg#*%*If
zw6B&MRh;IUj-xVBn*47Y!?j^MypF923$!=k;~$-qHH$piuH3zn?yh!Z)!ZRKgF2HA
z5{buCmLy;1YW?sgisTM;IBE(@$1uQ!0=?7NpIQE#)su)NUO&|C0X^pU)zJ|KkE7>(
z`thn^A^PBXg}A8B4;yeucpu^ceQuE_&l*G*(%lVQd`M&*?&JspJ|RFIKFcipAzy3#
z4iMd@Nd92QIGL{<a(2IgCE|H;&Sd}C&2aZYip*#MC%RN5T<m}C4Jo0Iz%nRvok~8;
zi1P6R3xF<%*GZoTmJNHC1^Dg)Sj}!C#&V@79Cz%d-|YS5ck@A7e9o}aVtsq(U)nYP
z^%AI--AphLI|aU^lp|Rhex$S$DWDHeh_JT&J4B8~<(-JCKQPE)%)kq3r_e+jko^E6
zVhjvESN5cwi1at$Jql@=91q3Y{VDs|dPv=hMV=~4ag~_+_u!5@6DVe56I$%nW9-_^
z_Kc=Cj3xa2tVC~1|9mqfra^1mCGU|R1A3EwBj@e5%7|Df=iZQH3oXy=0^)b)7)efQ
zgUMVFU8~oF_krm|kFr$qskuF%?9aZCr@d4P@^>BK*=QF*PItJTJ<_+-cE2u?(`F`}
zPtth3PFWZ0T~eY?ty6#o8rX})yX4en0$%s;M7++DEVH&USH(%xM;x}g4w<>n1INcI
zdBdX!M{IW8$FNQD$(N_vt958Ldx`U~aNBJ+7|X--5AG`|7RYrj*Gn)0PbTtHLox5<
zC4nxZks$#yQM4_+?B}~-fnCVf<Lq)jD&F-{a8HpN4~a0mt}~afYR4)vPI=jt+1T)(
zb)P=MD9sFVxn7h}^X(6-{u85QqJhyIZ*6j!Xrez0dGRHR_;va;m>Hh4dNeCA@LNrY
zre*WzdGa+yC2d!l&NC*nIFT-{ybn%f`8aZ?hTzX8;pE^8PfT$Qg&AE)2t+?5IV2}*
zkplip;Ol<?DR2)WmaP8FKQ>y1XD40#8oPgD@?t|wnK|b@dO>14K>(EKa$VYBoR<iU
z9n3%<iX%^<rn?+o&Xtp6`6!BQk=Ey$RUZCax>zqI@cd9TQm{Rk+FALF<Brtk;=^&a
zj-NbGUcP^UZ?6frUgfu(6YD>HxXjV(mT5z!TmQBATxM6<i|IJ71$nLGl(`Ja9|?cz
zC&iGdf%>)HMC4_SL}Rzi126y9HX5n<Rq;!aADYv9#vcXuDBK?ko;#bDy-xC-<trk5
zy>GRxh-5(Z%ghOvGJ1m<;j|5$pH4+BM{M=iFH72%EPO7%UxHefhL$1d@U_oG7>tM@
zZBU!hwq#S<!qSp{G8+I=+n4yfzAGM{_ko*p9X>qZjhIHBy}=dLCS7>6%G3hk_$<96
z!@rNsSu;Iadi-77zk9$Z<USKTj}H7Xrrw@M$*{7Y={>FfbW1xH^RO7sK@EGJ-7WXa
zB`iLqE2LqZ3J)uSSin;_n@V;Qba7zO{BAY-P^VMD{h*0Wt3};mUHum@j|?LQ$%b!$
zNvk$A@H^fx{8DeV+c}>8*KcXXs`=_c*2}j(c#~yxh&bM<dL0kJ6)~UM*EUs4RpIbh
zGxGcm2u_urR@)<EXF8#L0RCmPy9B5z4f)7!rD!9fbB7KDLu9#hqfEe5=SMe(Txra{
zouYzz;guM1L9{Kt)@H!naj6%Y^a>je1`bX%xCvx>bGlif2<0P&Wa@5m+i%V}=<`PO
z{jRksu;{!~W%knFTXG{Q(X8@0+Zqr$H<NoS60~Y~%@0vvcOS1i#MH|K)3Gz2*Q&B6
z3b!jm*_QuL;C%s`@8nN}go*M6R`ADSVEBs70*E|tDO*M7vtp}bM#Aadq~+dN6*15a
z*Q1EleXr6TnX$kHfrWjML}Cl*7^Pkv@Z~F*Z5o0n^EvqTylZnzb%jeJ4!<}Y4cVK5
zpV=K6$v-mL`U%AjAdVl(1s`$oSn|u_Q<@BEjM$4QcF1Oo%C)lZRGa(maWD6iRYxO(
z-(2vb5Iu-a4-wyf%Esw8x%nd-YS8)-EZ21XtzG`^bfVOd)6Q=p^B|(FN=_8GX_NP*
zkw2g-UH7l}cJ{*Y1CL}d7$ma;ucon*5R-)Lzok3GKgsEgFS?;1GGNh0B~V7-ZaD%)
zOYQcoMtz9M+;&9xmk+s{-apyu4LE4E>oejh$w$(Waag4fdTCRqNSMSgcGxo%G#u@f
zHL)fm^4T1^bvvqV0WQE|*QnD!SN<?X2hTBMq?GSIUt&2EbaO3Qgzl3%+SZGUY*-B5
z4Q!s*;UhzTj^q==U?T6-m}Y+pcjaP~<8Q`VC>d3Z&b~xa!V+!X9*bbY#;eTBlv?iG
zet*Z3WaT0=q|IFzK3@{AwX?{H!f)QAKgb4}0-vuIn^Zwo?_XxjmT2)0n+ip7NLND8
zY7G1Jho)-=@({)mHY+N2g7+Zui}fj|{hYOUD*hw12>Pt>>W$n{A#*@(tH1f{&Q}R;
zrAK0bW|p&EzX2Xt5_^v*u)qv?Pxl*iOll&Md!|$Y5uEG()x(*ZgygzIGWqdbc{zZ~
z%#|_@ifQ7mv{odDTfoMkF8lyMcAqH!Hu?{Oc-)_TamG&CJqjxE`Qsnrg}gw(P?K<H
zs}`bX$}c-@tJ&4=qx5~zEPOsUy0yv-`qOfPO&`iWU~~NJ1p5-%;+K!XvzN;0nBN<7
zw~aeMO0U``k>f(UkBjGI2hNB1(_A)<JLT!|*r4Lc{b)u%56|&Z<Wn1db9i0j`(maG
zLiV4AE2hYr)5lX4;a}qoht4l_mk^51mMe{YK8nFB<vB7SihG^uYfbw2i0@6%<XZ;S
z9z2j{X9gei@3mx;NbbQnT7Q+Qm%!aQJ;R`tYZY*dP?>A`Qu6Ek8waD(&7s#k2V-82
zRCI7v*TC!n+t+%2oiIPnbS4|?&!fK$IFCnIeW~B7eq$jJeYoAmmyY4i^?Ak<?L<@?
zEMBgU<F?=Lj7UjQ>i>lVB655BxVd|}o@c*%0ai8-Yk}#P!W_B(_#OKLp^(R_Utstz
z)1s*m?B5aLbVy9(v(t807~16~Vn(?OnR0e#WjZP*4dfX*Xj|J1y3*O*3YilJr<SLn
zg5)@+*zZUwb?Cx`Sg0p!KZM>^Dw*GAB?S^2olm9iu8bOEq?g!i4JPKG-Ch%Mihkj_
z!Z5kh*W)=Mv+!1)Uv&2KWd^u=uFo^Y3|<(|*^Ue;(O%8T;0n%sok6biLwpB53}`R&
zC3GeF9Tz`6XLhRk^-Ra~&~yTWa|);uBzTtIZW%2q7h7R=fWz~foxF*Rd;@;8E!lzs
zNMpX;Cb>2rBsdYOARBl-J)<xZ_G9+kFnkfw30`jnxJ>3hEqum<VLZ)E%3a@bYj|B+
zS2wLMqq(dDTvfH}?V*siyS_R<&(wWMUDdY?|MnZx=xOVaXG3RE0plgm5itLAIjO2k
zdLl)h0ehadtPj9F0y;HT6Vj8jO}gX`qPg*kO^4lRF_Ed2rHHMgMdEzwVS(t1+>7qX
zu$l&<O44#B?Z!~rcqX~>6Y&@1{7gzdTW$k2n8fdMwh2c98yqp|^-5oQqbVN4UgG$x
zL&lfrN&vKHme<p5P&AbsZSb!&)UD^oYXfkf-Mc}ZjTj#6+ju51mXG4t-FGBTp54z|
zgFj6)4FmPFO1;>)htgCLFfTIU58jZxb&~>QWvKg4=mMM)FhLn;0{RPrtFfV$7_uqc
zm?Z`cZC_H~ZWfJ}%sYwUYWTb0EQ-Nmm#eJFT-`K2kDyf`5MeRi*&mBuer}@LY$EjT
zLqvo1hm025)PAymeiGrX^(u-fg%_vRI>X4!3OIv13!usf@V7iO`Pr_wwL5OEnyIa~
z%16(^BV3?e06H<NaUbM%Wd4?Lw%spM)k=&_-&sGr1aPij1_C)+e;6F@K`Iz}m4l$b
zcb*`Ex;p098pczPoDBVvSj_qNKTyF{Hrd>=F33aAfxe)8Sx;44y@0ygCzxf$PyTU^
zhI6lKjHsL|+Z`6St*NdpF`OolXMrwJd7cCw$n9~5lG}9<3ym=R<X{;_*koOyZ$DRj
z>o3MqWYZC%vYk(Ki~%3S2}CGaV-)aJ`q#WAo0iZ%Eiyss6FEM%Fi`FsKpv9`t86?^
zrXN`)R0-q5_oZr67{ZUK?y^@?wGl{C8_1P7IUEj%*w`KNcxRW#>ow4j8juz^gKrGn
zW6JSMxlGK4pK-_Y*r>ds&L<qY!#uYxi$%G{-@Ow{bV6#<eFJR3G|sM_?r#3UUcki{
zXffXWU@##TtjWMv#_|LUOo~<2-(?up-&o+l7m{4DIq&gG&vhJ_RsQLBl&5OQ^t+38
zHA0W1>u|b;V-GadOCSRDi3${KkgnO~m?8$5=xK^C8QHcU&@cv3x0+IqRNH#&Ez|~>
zYOxs+1>}Go(QdhG9iCC*pIOd?A`|jhkEBRGR$<z5Gixc-?jHpcYVz3c%k;?q%wnfe
zDNh5$!k)xLS<$zeM^Rj|>rU0{0$cFvKJ_$~Cv?oac&6*V$bsF(xdh^K9HZ_deHDc<
zX18(jiM`Gep9}>Bo|brHrqz_`Hj|$Ck?Zb&2VEQ&>@Mf%Mx+Ar5tC!qT}-X~zxor(
zMpxIV{QbgqV<aq_;4`9LENj1b@r5NTO3&cHxYc+;P`rs)VoyCDXtVz_l*13{md)SR
z_L9;5E}V5cQx!GTmv~JwX*>#f!@8*40>xDWo0m8^VUVV<v<>y&Z5TS_;WdVdkSihx
z{N8dneWB?9S=##orc<xf?<aF)*Q79o$E@%c?xYdQw%+V`L(xbwU&7&{Q?N3nf_PEl
z!}pa4Z)>r{*3Ngd^sMdu19hMPnA&)coAqJ)s}3>gXy#1k-DJ3PP5&>WjBR(=eb+WE
zA#w=j9!z&$?epH#He=fKSKt}PGxsnU4>P}@G97FBCQ9sd0H)}u8y~~p<)XrMk<ut2
z;6`IKONm<_vc+>h{=^-N)ZICm)w+HQ$qNa6Dpw4x*8cH>Em@=E;jfdv<ezn1?O{DS
z9lUqxt)FPZjmoYxSH#=;@qNioz<v;A0t2XCa^`a0)no(Nx`VEAJ8N-89c%Ezf+c%#
z?B75OK5sV5CDW4Y<XXI*C2S3%rjklJ_9jbx^5@@>2}nB5d^8(9IHvIn3xL${znwkD
zsxr?l$RgS+%0RvG5`Kl8^Z!839N{)ba6pVUOWaCQqsi5DZ#dB22MXZx5J}_8fMg9M
z6?k;UukW9I(M=~E70JCB@GV(<2+tllKYS8!*<%kU;OL4busCviZYQ7c4u6orWD-Uf
zM;XN!rKW237nb6)7i22g1IXfn&xg<*s9twDqsd2apjH-f<k5<Qle8fkgH?5nZPz+B
z>8h=7-KDRmg5@=2MHSMU1SdapV4OYPA|&);8ZCtilI(k;Q+*&@s2N?T=0-7vb+?KJ
zbF3eT&r7^n{Eq*=7p@tAe2M_W7=Rw4%?oq&&iw$ea^H!w5Q8^01?lxb)N(j%qWfoq
zDXsa=4TT-&<c^pOH&f(^>Ljpa<1?tZ$MWa$8qBp|LU(WQm+Rdmw2;8KcZDh3;ntVS
zKa(EU#>vt_Lu7mUiK9wxTgDGgjt!@__BNhD$CBvtYO{JJJJ<Egg1jE_YI0^OjK`)N
z`fCCT1QHQr$-Ur0A1|k?T@K%dV(cPl1sK9AR@<9~5<lYuiK_7U2+7>!C;w}UR(-vE
z`EXk8C4j~K{gJ&kX{qW<_{^i4ne}2zinhZJB}jiT2}=+Z??UKuUF9HKd)zzZkX$7}
zj|(aw-w&)_2fT6qm%KF9;;)`_6>hCE9lRhBBZS+qJmGjJYPxSAwPdP#1#O2|$`UTh
zP<_1{>*lVQ#?0LBx``;?MKgH^np(3RFNKeEs?zaQf4{lsE5dvAdL%ojQSU_PTr`%$
z&X~(2I=L9PTbbRVpEpEcD6Ty|{Z@N%j)Gsw-W=ieR*g`#-M%p~K@DB6u+u5>w!yt1
z2NZ8|+yr<Hjqh(``#M$&fY=WCyahUvK*GUNJ-3CAN9R4$jT3)BKajFg0+Jqs$wQ)h
z=_SGAK7U-}36tLL-_&JfQ^|)qoTTZ^tNhXpn03+RgfLpde?)EkvCP2Zif?0Y$?Vx(
zYBA%}P-&xu$6p?~O509Bz+zT8GTRkG2uvW?M$5O;6@jo(C_W0Hzn)*GQtdB;TQoy1
zNb4m^1QK44W_x4V#1t~g{<S3rj45_9i3yfyU!mEJ$8bs_xRhIM@wxl_A7USV0*Ug$
zu})B`x#Zg|zyxL<rH1S38iIbLD%qPvZqD3d1H$H>#9J(`u0*Qe0L0TOqKme*Y-AJx
z1!ON<6G*5Aj*TO^6kW;b6W<50n%)e#>&<ZihI=8qjI(DdTk)>x72zr2>d!P?<G#~x
z;Y8_&Ji=3Rr$KQ$vzTouLe;z=+EOy3v^n%`5zG;vsdOx;y@cW|Fs4J-{7Q<<#07}Y
zVy6u!zrSFkf766-qlmV}!jHN-ZM`6j&8Uyo4JPRalYCW@Y>~F`Be2}$_A`s8rZuVP
zR)P^#Z7C2#6uTfShcQQ9MVx-TyZOVmvvoL+=Xqie!DRp5g|tj~_AT`<D8Qt+2`p^i
zfADA2ZG6`kPp22n(7dFj(T<N+o5tt03bY_LZ8Gzc8;#~jW<F@&`-la8$B~hl5mD|s
zGyRl-kd+E#O$4IGTHeFWZ$xY{qyVaf7@8Wi1^|d7eFbsyFCeZcgF58P(dv&2V6y3j
z1JGX2DEIm7Pt3UK_|22g&#wsq+a}ADs|@?+4Qggt9s}k?PZw;ahL%@k2eW8_Ml+KX
zI#UD5VvNCzH(Qk7iPNRysMjW*``+Wb<fTweWau-<<;Mq<Lt)pF^L#saCuU~(S+i>U
zPn@2aWl!@xa^;VOFH5uC34CRqj4kc?=p5DrjOlXozA{A_VZ3fnzVia4TT(3964>Wt
zx{>^vdVaEgrXL)=+a0sq604tfwhd_L@F};pY(Ivv7G<=Smd&ym>bEc@F8eTF)9E;H
zT$NcSN@&%PjswzZQrk@Wl=R>GO6FHGQNfyq4HNLGRlb%1;-FbBkg(sGQFM`sx#aU^
z=kR#oZ_5*IHvWJYkC-m2OAP3oAb!VTlQJ=;vrY$b(Lmw9>tncyLYp~<i_Dw>+YSQ~
zA&oV~d=tLz&X;#ctL;QO(FHF=fWJF1x14Nanf$%*G%Uf|@fxVB|I<xI3kILIYIKf*
zg5>_p*yYF%bkzX9)Ev2(K0s8dL2Fj#gJZ~Stx-Tchv^-`hu_a>;>d>*EscbmiYr0)
zDEVItq>0>o;-$asz=_+X)D)>@J$ZoJD{BYYkdNS(Xf~&n_mke$i6ly(V-`+i%V?C1
zrIlFH82LJHZB4qsioUTMH>Oe;A2rT%-uA`u%?Rs4p#v;D!(C(@Z}-Ciz-4`W3cD@x
zL_^XqMIq)BN|?RvjL91YL;-Ua%;f#3tP~7qS}d7rKFtR>7&hl?Z=T7kK_lXdozG^k
z9x)UF2~NnshbULM#25pRyPC6IkX`gz7rb^KZQE?S{^<S*_$I*R@2q4R^KQ3x97o0q
z6ZyJRbt+G7X39?XVRki1{pu%&1!P(YQIBzU8Td4OqII`XD%wn+Qmq#%Q|BCxHbs9W
z9PUOgT`)990a{>77PcDJyI(eK^_I)HkU`~f4ugd)?BzC2A|HMx#h#Xs@@^Xop$vcM
zsMb3Fv@!E%qRNivY}#e$ZPG)!JGMNofNv<!mKN<pfwfp!1+t`=kH0Ko_&G)}+az`X
z?khc00@397P9fg^Lx~pc#c5VW-Seec<mE_DGPbGZq)p#&-}|X9CfhkFNY@(+5RVkN
zW7=4T=a&*Lo4wvXSKP_egTpT_TEj8qY1_cOcX*KsQv@^EJP~!GEnAy$v%db;XXk3;
zaax7sCqvWX-cxmpG(<_jl4WiHu%Sernz<R$)idv2s-rRe!9F6~AS1}-@=hT$%-fi@
zxT*o((c#O|PCjT7VYkOh1Lopl)@};-v~ITp^HiT<01}oH?wm$BJ_9CMz_PN%1ykcS
zf0POBb4@xRL+I|A&KsM2`!=DBc{ObN*{IW9T&v3D!vS?3%x{%jDW<U1`^w`LBiEA^
zswFWR^35%$W9$Q(NwxC(w4Q~Nja@tY#A(frKqL{|v0Sr7PkujAfxC{xrH9+R#F#Z6
zW*`V>fo%9NQd}V*7Jil+H7$)rM}KzVAnJQ0V6&Bz)>qkRt*ZLUocPm128Jj1f|{Y&
zfr5;?!&8;LDL3zxn)k-Xr|MwKtekDB>}J&OKhFxCY^u}$+`K@pBOCC$24{WHFc8b`
zbo&68SGvW&1&nov2nxr7^xR=JiMrcfAsgVZo=v0Gpzq;r@jjNCqvx0Rcd@w;S=##o
z8ZD7a<__zYOBQdaG|z5eqvSj#dlx@)Y&f|5Sx+$D)~UJ?`|fPTY=!Idfk9-WBjO4M
zq<EslW0omx1se3Z0`k#_eU!S#pV}2(Se{HH4(~^vDJ25ON@L^|jka0)w4Yo%Wvx#b
z3s`h0=R#tM36K5TI1AD{@vGEx)+geO$g&*tn{HeQpO+hxoQDujtTS9c3Vi=qYrQPS
zp?Q3BH%aHaelSK6s*Jdm>WrRqL{3wuQvFqEuEC87P&)tVG$Sjy>9TD+dxX@IFf!{$
z3?C#*kw}cUzn>Vd=PMI>>E~C>bF-c9)y0^-oGXJKjNFyvRSj_GOL|!-U}5oc_?(xU
zyS&))97N|l7h}5+@?ZR?{8uOkAYMGDmuz{aYLAFFjLtD!&t&4t>UM&GSMG39Ippx6
zIv5A(=ZRj%^O8MCb393Pl7}wSvYXLc<0IM?82GVnuV*ez&9LJ$zm38cs@=9@{#JT_
zC$B3L;ty7u3WZ#8?FjJb`1JW&HK)@CUgL*u*VIoO%ZjnoKT`K#;@=STsTGjdmM#7X
zLmW+fvm(Xmd_(<y8%oxB)=wy4a)#GJB2Ebwpap=e-Z@Vmz(N>bwonMM?+7@*!&h!b
zLw9#SMwNb{DT7ehQ5!P-f2$t{C9#*Hj5;@6>o4+fqE(Nm2Qhkl>Wu$#w<e3%+l#e5
z*%hyK2S<lRLb|ijpOP|=b~++>OY0C&b8@?Wk9htTwI47!a%Ebpg($aLBsg64kv;><
z1rlD`{o;02EyNOhcgRK}Ee6%Jt2a$NE(^?*7uX|XCMNU<xyx+0NXwr+-pCsVqL4Y?
ziIg`&C#jd(!wFrySrsP!X3{TPl_$q+82*5eP^!2H&G1{@vJ%iRTK)8UrG?#TRe9Cr
z<nA_GJ`_P~%AJ7wn=kVPTi&`mgInZdL;&V1%(Q~|{UgZ^>r9^Ox$hm8e#cqq`^kKX
z1V`(DZayo}NFpZl)*C;Nk_b4WAfE?6FfV|{aj^XXT$IkP%?`@PYI;jec-MMJWBUbH
z_KFBLlM65LDUqKMfN{PZVG^7t9cbEzvV&OO^AtYiG`o3IvXc&yqrQOsK_>Q1ne5|g
zv-@PDYM~}tGC(S-_o#`|mR4A18f2@l>3Amcy=iBbBmNrBg%JDJH5SZDa=F}vXWrkX
zfK$NEgoB6jMtK<&8YBp5=&S|g`+bARammW7f>=7C%dt<Se7$WCAJCG-6zSI+4(79~
zwqW1Av<=_&GAcpq+|{l#*c;V{d3Qngq8L;}Sg_Z@ZMGoJSYsoIAwBLZZo-?IR5~8;
zeC1^L`0cFaaQ`Q4C$(y&@cXO8OAdT<oMsoV0n0IHn@~Z=PqU>dQEswY@qL~v-vj)G
zJen$FVvdqkP$vR}4x(Mgscp0TvuJuf5aNqh+{XTlja1Vyd6%pOlxIS?o;&t$LN@Tr
z9FfH)U}tR&!ZUxHjD)LHYAn8`zO9q`)VU|79Y6V4InRODS#?E>578DD!zHO;R$AJn
ztDlBKz@5CspiNm@G!##fEjtx4_GZ_OvK8A+#?xlBmW}D;AbT^+%%Xcq8!Cccry;`i
z3jbgO&cHyN7-p14XX&H=m#Rx1tAiD>cRO-M{u9F6NcvMyXa(ZU-5VNB+?Pj7O7A+y
zH398R-VdR|6o4yYnfcMI)MM>38<{7ug8V=gPDtq(HkekIuelOLPU_K?_1R|)Q<uO0
zu9BGBS}dYY`rJe}l=&H%0$^fn?1j_zC~}VStp2PW(32q{5%LMm3*nH55z=8X7;uW%
zu~JA_YD@>ZF73UzqCXXLlVA*n#x+8n-FWumC!U<{iZ&H=HDm)aCX-5l!G{fp1)&(}
z@6Ee89JZb3KHB>u6<-J`NXP6tZcx#Lh2wJtC)e(oXd1v0^YhB#axAQri(eUC^P%+c
zmhjj+X(#xA?R@{Uju?3Ax`uWEw_C+i)^11;0Kc)>XxtTb;jn>YTg}r`O?SO}uWb8T
z4T-9a>K)OYC&}g7<v+6yQ(Gaw`F@j8GulBI4lzRGV%pCJ7Zhw<(jZjj*r7$#B6qnz
zHG)k}*TD;Kc-;#0Ho*CMwm-NaIeb+Pa1!O~=Q#)R3OaUUf%XMn$c!BzEe;z1M~e$=
zgfBq{J}vD`0fVXKfst34lQP@z=KgJiw7MV7@#me6vjMV5@y}X7Noc)X72sgtzwvcY
zIWY<?NTj`MXd?gBZ!S_MQ?(~ks|Jz;>r3QMov|1L$z&0{<m4*J*LH<%8muPqPOUs(
z0Yalpw?BO-wN<nqYrq6%0CyvbmwPTQjBgUDDf&29AKR}}w*;7UJ+S^b$UGH{MmAP0
zmA$|{!mc`!D!B+VmC_P{>4!z{xjh4C3H4PNJa5zk8rirru(djQWtK6SZL-{sinV<?
z|8QBC^XCM-9V8D5gCT_5<55PhQ;z_x!7q$UBIW_*AZzoq{m;mS#0H<jU^tBU5eY<@
z!R9lcFrd@#*hUKVIA9bq2*Tn^FK%3pC$iJ?*^IB;Blq3+I1BghpItRh)YaRc4zeRx
zkPALX+Cg3}|BjO&kYIXVX+!%mO;|77g!tPuxkXknQfU9=nflxPke)=P{VXBZdBWF&
zCAYSAe@GYv{)nwF+#weQY+E=ZhC<>wPW$iM+R^o36p9HB-Vgua(lC-JL~J0SkHzh)
z(oj}vQ69XDkkfJGbne*KZ1Swi7QHP*PWu$fOWE?tVFsd55}14#9{(#cwn$fE!}uqw
z?#Ah_;rQkDv;qQ<BIBJQQyj8;-q$Y-^A116x_;E<VDCbOs(rlxCXDGG12v3<fJ6B9
z?wK)&Ty6^#u}mcJVWPbb`Ab}h>U_nwL-C$$2>~8pw%m$gWDptQmp(%WBvvGkEk@0`
z_Nfx^rT`gr?$Edb`Z*kS_wQE11TI1b?rbW*hBplnzV&PtO?PR|@_3W$VG+Zi(~I&^
z>fr1(@VHz(G(a5o?SqMP_7KM;iK^+tVjaq-a%ouh(IO>Prs7@VaXB8$k$;`7^hjuf
zbFS#BnF>_f7#3I#Zb_**qQ3k6*r}QJ@Fa^-ckVuvT%}muu0A2J$5J7>F<H1gK%+qM
zQb<gS4R#p;+i)!&KEMy2sIodAd>mJ|db&=9tZ#yPxYD$5VK_XOg&bqTS2$K{te`}6
z-pJT|7j{$Vkn(e{?-s13+0B_KWPg9*eDNnN=8Ri}<aPjF-d!S91~OAO=VpO_RM4Aa
z<lI3y7o!f_%{e3(w;=~Z<bF{Yi9iA<g2cK#h#2Rt1#V#KUjz$!9(P1K@4g`fa!GJ3
zgX{Uvhp9uJ2%wM@yRySc>zu3d9>eM3v`41IYS1;j>s-0zn;wH4F^%%vv{JP_g-0}&
z`M2`?{@>aRNIxPy<O174eC<CM>cl-*^dHi^*_evCW{jgCDj_}DqB<|YI3c_qmdu8A
zHtOxR)BO1EIrrXw+V#gZp{fSE9UwSa98Ap4s83g3@*VIy18UUSv8RU+;)-|L_|^lo
z7zXz|XAgBO2guG)`UOEE0pwzLKO=x-jdtwUR7frKY5(mGT0woW7JVXL#6b2UC(^m7
zZ%ihAZQ$KY=55TQL`*|?q1g%-Ro0zYB8|N5Y+>%rpzq6=V>2W|y6D}C<<3y2yye$k
zFdJ-kC%=&A%IVzZ8ElBm4YzL?1Osgr3jL_zx!!7O@-3ewD>;sovqW^{x_2EzFRQty
z9QIE7g!fzXU+5~g25|ZUq}8ExD&E|^Y9}Dc_1mLVvnFj`#$-ypa^k<V02IvPhyC<Y
zqX?V*Cmsa_pccnsEvg8C!Pnn@a=R_H2kL#~wK`z3x4CQYKhDf+{7?{fDlV~Eq7S<s
z_vl&(v6lMud*O{MGbL;}(SeU&cow0R3C$M9O><=oEFT7K>1)NhFedoXhTda<U~N0k
z@n8yvc4cfHOHa?jEie`d+1;)jxh;oVDNSls+eLKax&!?djum_g_1gv=>BgOLj{?^T
zQYyb&nx>4;gJGJ)yvMLHA>2M|eG34RV7VZtNgPlUZT`H6`A%#soiYofM9S0a02e~u
zk|gPOBm(V0m}KS@u^YZXb+0V(kK0H_<pf3%+;~<WkLlpo>h^SV*Q-Sx8#+o-wTMI+
zXKZ)gYZC8qSToE8T4kev&NEcfS&0e2-Jgpu9F(6Ct$h)J;*m;FDtRfwGQY>ktApsq
zU&OP|X+vH>czh5Nc*+RXSw!%dKO?%vXBU>a+R)zwqL^Mk*T+&dgGz=S%fw)Y3tk|d
z&Ax*>%5o8r$YI0?rf1Rh*%O?6;)hTzW@3wAe2>zQ7eM@!DL978B&DU&aRW1t%jvM^
zN0DT1iFgTlnVgOvNj#grF+hU|Hdb$Ys`?{-K*2!Y$*lx0b9>%9`b~HkmckGc;8TWr
zZXWv)M#2)ZIcJWvrt!PAkLHW<u!!^JK|ii(G3l2U)*siyIBOU^zOh@INIHXkiqs0C
zyDV3KAm1VO4oLIz_uTNfQcX8{4<p8t$py)wfwm79%3OvB?VE~PBsukL@XpeqRUq}A
zaDkYVmo77onF$+;<xd-UdJ=OaJMINS&^IL(>WIq6=e+fUhOpl`Xy}?AZT`@|8D+nk
zwh8l4CK5JY#!1bg`6F)Z!u?T34OEVI(irI@1NVXIQ=KrfG-ObaFTaF*!w^HR?tiO{
z`8l{&ka83T79){58wFL?Bq}UheWSS00Wb87#N&^5h2H~&Pe(C{VUZ?`Tao=l>9Q_5
zb#bZCFC%)*>PeV_HgCf`6lPYob@KCjK*{(l>Ugk&AB$QETNKPLs?YV2%_y$B2^CI=
zup0$b6rPC-o2PgnG7@cqF9J3m0!n)fT6!E(`aN_GM;@e#YlqO)lveEL_>R={($&0@
z_)P7k{7Lu&_#Poz<uNdZ*BsVaCb0(u*6o!zE*JtwF2Q5sLLcg<2%nqnnK`$ZpSy+^
zwoF3)ap;X$7ME(#yyS+FJ~oaK5yIUK!+M#{u}?&0OO1aA`fuiQ-j0PxZWLTtZ&0{7
zn2C$sn<P9J=cx;@P}7{wwkZN;1Bf3)URwdgy;vj+`{_tazUruLC23v*e4{8>jK$!H
z`ae*z)jV!yrgMnHzWY@pS5|8kM7lQ!n(8P1;Pm^RkD?jX;RbOnCP3A5jN)vFCPq9%
z2a@bLR)!u(SDO0FTZz~kL7kltr@P3+<I#Ur5)qT+AIiUoc3ZMXiWFw8`PG&}Lh54;
z5e$uh(9-)>nRMP;y(oWXB6`s#c;|%9U{cF8vMeuD3!$`Wn2QicX6Pbs7Ll#?_r2vt
z=O2_{Hr(9Fzkbog@h63t>mY`ey<3qZoTz&-er3eQhPJ(HUH$542uo+Pb`ps_$I@$H
zdXO77^mF~}MQ->rIKH$7W$V$6EJf@JcPjq3PSjB1iPx%BCK61U(~mn2wBJ-oN>`FP
zd1RrR8f!B~lrn8@_0LtAHo}o%O`zTVRwjgrPf9xP!89jMZAyp#3t|?&u=i5Z-`+a|
z#lr(ggO?KFC|`wt>x<M-9`-3Hi=Ws`O@(}|weQkCMebfug|=BbX9n+VT97@ENMUa2
zY0|f0J`8n!hZJ~umQIkMM%ZL0YqP;W+saM*(#GR6;_t2d9H=h`%}LwYG#57{>)HRV
z0M}I@7N$Xs7~sBH>Vm9MzSZ8kQC_aP5_wyx?4=7(zL57(9IwQ^avFn5MZ7=#OoaNi
zup@LT!v%#i<&@1FWen6XghgraZepkArq1R6#oAkj<+W^Cqru&R1$TD|1oz+)+?_y>
z5Zs**++72~-QC^YJ;;l@`(0%B={~1V_xIg>pZkX=LDsugt*V+e#~5==3d!U1B)`zW
z#vkGMbN3>Uz27B%fRXs}bn@2I*fMmw`=_fDkw<YecQ!vV>><Hi9@Pgg#f7v?APsRP
zX_yY^ZhyDK+yxr}1I}PmmXJn_rVfk_M3FZ_i*qmqRM2B$M1aZOQ^#Hy{~P)26awii
zMA(~ti<#CG)gHX(D9#J*BCdRnKn2`8RBbV_L?HJ7zKnUhLQk{l-yymOMktt33?IOq
zCmQvO3EScC+(WhhBpw{%7{7ke`e1wLpJ>(@60}g%h=U-b%tG@XeaeJO9o~<aVPKFr
z`{$!S4Vy7q*C+U6S0N3#az2XTF5h>A+v{j+v=YCe(v^%OpEO;LQrNsI-c_Zec4}n>
zvr`wA_$HYdyq?kGYe8?KA)9-;8r9?z-=OJaKV3vL1aD4^wFR<(>Dj%=eP?)k$QY`L
z2FipLf3X8GRqS^BHe1Vy=>M@Z(GKpfQf)#xyyU_^@nacB$eI}JH#5*Asx$g-=3veT
zNo<?$^@xS~dc^YK6hj)|0JrsNFa6<yx_TBC>qVR*T<{Rl^VrTyO`TG4i(F<~+6<d?
zu&zy8DwHVxh6L^D7avYGsn*-Qih3Vb^}tz}hF#LWGJ(z_6kgARmiFC)Lg#+rHy^Wz
zH<B?=-sPko0Jm9!v2#9Xe*YeA49PLeHG>$ANY&W28o`&e7cAoaJ!*8Bq<|dGTB}_|
zyEG%>fW2e@i`$Y=>+*o4e0%RBL7Q0B83ZpEiH;tYEym>Xk-|iyhtsEz)|L!?pZOQ}
zmbBH<H(h)X1EH`Q*y4sSwt(^^^$&KKUsvHzb&*i|S=*Q1VuAUHp|27kyfYAj4FH>G
zK|CUncjZpFx)cw^F*$`X<Y`49UOIq)ZSL=Trww)a{ks{CV1PJ5bp(syZwcsSba$A@
zh#hfg>;3t-mZSK-dE&ecJk#eY&H0#+TUVE90s}&5()r&=W0jt0L<o+j{V1XO-KQ+R
zm|Uy0BQX_wS0?GPC}AdB_}w!=*#@N~v-d<M|NIQx!i04HNv1{{*~1S`PF@RV&LMrZ
zIV=or+Dj`nCSx@i$dmSZ)eni~@QP#EuotSkKp`F=Ijtrp-qv|q?leCH%5hYof6jlw
zI#IY_#DC3b$#!?H?<)*AF+Ma$bsW19ZaEGM{PymrRWH$~Cna1U8FpjqyZm@u)kqna
z``00e6<qzL8<%hOh?zM7>_qm1Qag76zYb`~I*EK(deh$h$K^dYusEv82)-0A)vIvO
zg%i7NYJqVL;AcPI8NL073gKfN^jo%LAM&V!GYAxjgWn(lwU21`jjA>-OaT$;)Tuk|
zKFFz0KE?D-O+EOcCqdeS+wY80kol?wVq<u=w`i1m%hSDE|43DJi|o(!XT1i~9Lb|}
z_xCO>5bkXZELFYU`SCkTB_^;|C&89l58<PjH_XR<od<|yUc#q_WwidmiLlmG743a~
z<{xY@yR+U+DowU&l5MTt1fmr&zR!2jR)+j=1hgL{Se?5BDtX4l^h!Y`w)mN6@0PX2
zJ{;a55_(EP{W*-i@+pa^`b>ft0Lqy={gY3ODCli3%Hl`alAKbu)!4V}c_r?4ibaDB
z%N!hEW<DiXgA$imS3m3O%+D?rX4VqQgZk?<Jpda}c(FiKANbp?Ec}H^h0I6(SaM0y
zE{B<O3*kQbw4AqM2#P@c1d_`KgEDnetF>zf44~l@E|({~Yzj*PWdz=+13Xt;2EQAB
z*gLkM#Ts*|lH~Uocl6T=nbEDWfLtw^ZRC!NPA`X1r`0uVlxR&niqu0$JUlJC5lJhs
zF((+?W*@@D<y<_@V`%c!$3xUJkMQZs(Y<W7`I+Tl;%^=if^=r3soAuG3NOC>#frFo
zJf1JOvgzC*l;MO@IZ_{P49vXci%UCbW%cBB=X#W2b}s_a4BRD?Y%#NdMwC+lDhO9%
zHO{lVVnLF)_D_$WT8Rv*?d3`Thz}SRW4u<9fkvKgB5{~SoTzl1`GAmhx;itXze>u;
z7rdeZ!ULfHO-2(}$D!r6E|?7^1PYZ~tCd>$GhZU3s`by{li57Lw}&o{3G{dFMBV81
zl>jY3fomK*d%d3gM9*={16N55iR@Zk@Si=6=ygxKyO9WE{sx&lk}6HsC!0x_wy5ZL
zUjtEgS_|3wy%>_}8d@0Wa-CO!o;LyXL@oHNqK7+Q*EHnl`Fw|6s9Oie=YAOo=u6GH
zu<cZm;>N0N4jeU`-1$8cINn#7s^GGk^S&?CO8_c#843-MsX(^YZ5PGNxxEZL3OT_h
zX5BwqHK!U7;z|3dV4SS7nObj!vtMpbyzDnY42#t!JPewxn*EFbjDqOMC5aasJpa)f
zb2gSnoJ1=9P;0UJbA^%zZyru1_D@c)Ckjw*rQkow3zLjLd|jzX0We}Q%QwQ38rS_N
zF+Xf~hNbvjY?ZnL(GX2m(oQ=Ot=4LO$Pq3|Mv-}ap$@M2%@z7E!dd-!L7RaoTW<=m
z#W0&o_p^`lI=MN1k+?Zo%j3B@Mla1Xt`KJba`^2?bNM%~^R0Svl|I}^Dr-DEXpC;3
z*W*6)9D{L$RSSQy;Y&??e3Jr=)H?yjqxotn3%7&omFYqePV?1lFbB&i8R<FkL~;?+
zQQe=L4|ShH-%VU;$l36C@Th<w`@Lk0u`AaH#j0o|H~dw5mUH6@)zbhigm{AbH9Qf2
zv(f^@kBDfm7!KvUkC^*&MIrGo0MAsovzA(_-Ikd{@|NkCbGk?i#(bg{VWw0!31}B-
z-k(6#+%EzYUG<!tTU1;2a4(jd;N?iCCC4+S%IUd3H&FNL#+m(|jAM7Y7kwt!idCs0
zW1{{9P&AKPGQwK3jOcq8*bI4KBH}?DwZ&Rea2tJ7gJh&@W0*q;nE;@@I<`7p@p|5i
zs2DVbv+)Q7`p2emH!Dd49T^$p3Y1eOv*je|utz4h43>W#x`b4wW`u7)acSPQlbV$|
zH<-T``Eq;eYw7p+@xIK*J#2A)Sg-p~W=b)bL`kBN<1$&HYkFO<U;lM&`$44^H%C4t
zV3s~(=PecoZ)P-RArBvlql2*XiEANeOe4{*?Xm|`+dVBV!F+>I=t^lR1GT;K?tH0k
ze<^Yx9M;xaHPTFpN*qv3b7-G2-vF*sx+mXYXZ#DQD(}N~5#(Q~CN65^`SEx32X>b^
z^JU9Z3HfyXoS{6F;P>xhD<<oP8f7#wEFf?u^M1`pua0~<?3a&319<pAx$@9gGI^oe
z(X!oc{|N?p>X;#N06lW$hWCU}_zJhip66wT+YQf#qE30^q{HQzF_o{ePcoftu7aoU
zQuUZELMQEYodV*x@OGeiYk^1|zjBSD3oiH11cUm+U2mX1No*~GNC>FzV&59DUT83K
z+Z$pc3u*=wrJqXfWvM9-oNKMrg(k8-qPf1^m5#4MOz)|tbbs8!VO)#-4|OBeV!guy
zV;r?!Smoydi6PJ!^JNfvfmb?<3nC`%I@vj2+*K;>1u<A-?CI|=v{EJLSC($~m8DxT
zA<&;-jiV82cCL1M(Bv|<>DCk)L_C?DH2ECe4ad%xA#<@seezvJ;}ivO$(B>13`K4H
zpz(2)&gCn=CjlFD$+{_pf$wbq{X)Ww2a_@}6QC83|M_58$=Bk36^wkeKo4RWOK<xL
zB-u)-AM~b5M~e2U#`ul6Rw953ZDF^%k{NpgTWy*cDkIN9W|6gXa>Z;33@S%@7b%&;
zTz-fjN+NCC(=B#*3@i8sJLs=^{4U&}hS0l5k1a!<#^0>1HM@&pDfU-~2JqO7sV?sz
zTjrkq#CN&N2A11iBEPOQ^c~2y1>1TwI%T=m6miYiBoI3gsk)~Z3?t$8;FHjKN@%Pt
z+F$h|HQItA#|J8XkWKnOMP4<*nH@B4$LpMbO}F2jx8bgKi>bF>J&iaVwPQiOz@N7L
zmPsF#Rt$N7i|?5LlpGEc!oS!4Gu2KrQ5F2}+M^uBljoQop;n`x-e&9@8tO|3mM_+u
zz{qBB>B%UXxS%G81F{2Db5wYYGQs8<F8Pl}L!|M2I5FZ%i|hsYc4N=gpI0a~c};1z
z`_p?0=-pzn2t8n0unj!7lf$M<Zr)7PHrZ?sr^odoo-hqA=-|(k8XdE9Q1&0%6M!J;
zNM7UDm`vgiRy_1Gd=0jV4VNh(Y}Gdt5rr@_*>rd>8>}@~5X}^5sNmJ9bYtRRnE)Kt
zCoFP|>u?e4)kiV$8!I#fRAL3I)z%oOiv^iOPF#tf;qZUBEb&(^>zPlH3=tp98twuV
zUoo!*Na77p>us(K0n7e|23Wl5mY>O2$*@pnW1~m?Yi03DI8JbiHVkkV^69)38Clza
zQ*FO6%K+||!M?Snxw4mRvd5P16&d8ljX<#gDJmi^M*xUX+njmYj*}zq#s;<iWt{}C
zMm1Y|p=zR&Yc`wXx>2~frGTN6w-nk+KIMJFto8E8LnLW!{n-Af0=1iP<p$v-L8f<h
zJ@|Lh<8?CidKKT|mF|k>tb^BNs(PQN3ji-40dhU`P(_3Cp(gpDJIhYUGk+nWPJg&B
z*Ue%lvWYOTwiWi6=-*gb(O}4}=<glA&iN*D6qfxaKcmyjB_C1(vrUM<<A|<f2CaF)
z`$5^I&otzDq#WoryT_S7aQ^aoxk~_zCW<aNPt2r@XIYtYl+X8t1QyZ5-84(%oE>9N
z7g@j*>eU5gBJ|?`b#A#pAecBA^ThUFDU72-bxY2RKWeP}BxJ|Ic*;3#<Iu@Ngz7fJ
zddcS0p=fA5)p?8ku^mK=Efa!GBM4NuU@W*T=og^j(KnE$84d$lMJ(H=XM%&4QX{qN
zS}j5d2(W#enAH&y_uF#iYz43=#B*CK-9UknkGK|U^vv!sEfmAQegoA#LDmNbx}jkN
z2NoBozE{h^_||ct0pd&7DtVPYhn-_STGd+G9Lc!J96vC9iZ#6?b(A*{csPgq{t9DC
zuh1prb<5+?8M;9=#JSJ(QT<erKB8P>?G2FV^ELUqG;tH(A)75#!qt3Th1J0Ycgz0O
znM2#)?t}whg#OoFEsWN$lwZyKRlv@kQz*a&GkX(H5?Pqb8ulW8r{K}Q=DVIce^a-A
zb~)ClqjMjoW}N{WLlUQ7rRhk1$@Whar#13|gM<^87B=!}2W)M$h(lD6N!xDU%7<;&
z$U57MrUM0+zZ8Mwq;G(>fQx8ANvPSojg+?4K)V)3A*^!JVX`v$m&|JC9^69J241AS
zwU97_rAZ$VaeBCm$SIb(oir2;wPqF6RF@l<&b4;_mHf{&Qk6VM)K_Dw-Fxk!ziK{O
ziWb9OtnU73o>-Dtm=6Cci|hXMu+|peYyFL%6yiiiB+h&~?_@IDfNy{|39#&54WUnB
zQ!sGM4@70uR+k!Kb)t0SHFK2nb(fTZA@RJbbn+nFFhw2x^p;9W5U8?uBDEfBEk14{
zAO7`3Le_^skWX$W-IAkw0t#og-oZJKWnRm)Aku96LWk$?WZ3m>3>IX&YN*CoTZHE*
zmiTfpf@i+eKy|d(LR21nXPyNKN9_`veK`iG26C-<Bn;`{oo_RyJ(`&ebVsMO_t;rd
zk#!zekG0sv6BRiPet3}|{N!`G5a${b<5Ig&-TFR@x(pPwA*^G@)?F)m!9!dj=9>!g
zLG0r&^FwsBjKH0KB<dhgoFUwS9Tl)7u|mGL%JD0*w##^l*g0&Ou5f*#6xUeOG;AWb
zL}GxbP3XgtqCXuZuM=+=d5GRFVi-cgd;h7rFUFIBXsPcP%7x>vO2LWAI8pxEOQCxE
zyTT83i;c>&EJWMaOQvHw%%)t9$E$RUUGv8Jiop_EjfN#Mwr;UY3NzM|AL&fva!qWr
zfoilY6fEx=W6PQ3_hU^~pK1`p*Y7LB2+AuLSC#c<X&LK~jG~j3YL~Ix_J<oZ(^YWY
zQZS#&mdeHGcC513*3q&`o_?fyJ=}Aw@MTn{x|fzS;M8{YsQUE`sl+Yp=fCRHgkSY(
z7_02>jj14WM-$0f9jZX|_JdU^%-?p+CgNw7A(u{6OShTM#lv1!zfNT}FXLWy=Fn++
zB=x3C;Ll%U*rDovm^iNpqn+fwIn2u;A+5V|s1bYGrkfLO`N*(@w_gww`TY$#6akJM
zhW!>mbJ^<Gw<V_JN@Pq$TALmy>h9W<*J;4S)b>0wIOOt%Q^|XBR+~Eb?qG}&x&>DZ
zI!YvM^;e+(QIyS}znfD6C=ZyJa=-*!uf<bjtHyk8<Qv2Bw_bOmBZKEM6h*@J>n7Ou
z`|oYDWip1&`pFN3_&Zu^77eklvb7Zpaxbu&`|IG-uS?2?(j)OBBNR=BkLJ5hQf}ay
zMFJ=&D@QWPr~=(7V+OMYBi7_mocl!5FWC?0Ys4?Rx?M`(kGYN$bO~ozxqL0e`D+K_
ze*?S|X&4{l0C^W$Tgm0ZInR7mLHw~SK~rVj%K73tc#yuuH~lwUC`(NTFXbzo=chmH
z8`7MJWrHnwH-WvPwJU~$kHPNp93?p%$p#VtBp0U+MtNz7aEJ5{jxQGwK1>>q9^77x
zaWXRb1O;xSU+;5vEA*Di^(!RFFYf`IJXQG#g}or_{7enh_i%WRA*YHwSCZE)%;R&V
zf3tGer)#~wwgwWNv_ED*0E#I1)LYV17tm7DgkP(DLamxxnHd__s)OZxwt+HHTEz8X
z5Q<Vj=wtgbXf(~OQlksa$|(Kiu?HdQ>kS{1iOZAr?6^-)5M6`VXxFzDkbbEVK$(;*
zn-c!u{!3j(f&=ELPh!vQd@=`+ho8!Xq`Qdh`TMITYa~|~PQDt}i@FmL&#h~9KpzOV
ze#FZgP3Me_p&B0|$w)&D%mxs9*rYHgsRS`Z@dAqgIgJ1<C-6%=%%a&CNg+r7$3zlw
zFcG)Eb}i>3EeJL6MCe=#&2r}k>bXiC?5-;pS3?IT@S=lb-GLLps%R)RxdNcmbLM_a
zv|!G1p%!1pJIi^a#MISz8f!VGX96CH!H%!oNsUps{>XQ@X}PDQp`@{vs8>icp;TQd
z6zTr0NBcc0v+uIUD=P^SV=X`X(Vx=Rf5$(-S{kl+leyE`U#TeGXud+3lueLX)a5*1
z)hyBFT)D-#;mtp$lCM4@-@LYUA3c4w^qXiQZO4!v#Fbxk_C5D<9Ynj)O554YilqRJ
zzK^5uigeOv_^dy}deHj2pl)1cyFB@3B+=_Rt;1UxOr)CL@UqLA`PvqvW{-evVZe^6
zD<{P43`~6vk)*eN`ohRKI?~CG(UW-DsF<u;gh%}I0PZ5OU&O4(m){@7!&?EV1K&!j
zlNY0Fuk!W-F|0ZiZ02FoM5Kw64MwNHy?sr8oyC}ECVgbL!=K}s05x5wyWi&{(Kc0b
z+sJ7a%EtlEt0O3^1caD$0O_PTl~3iSyN8LIp-s$yDPm<EA;6iP+EJ>d_-?jr%3IWK
zc7N!?szvZxd7}{M?JDlynUWiD=<iL?$s61CUHYz3d;Ti`{ob}F?Z76A3rPl96G`-~
zLKoD}qJy@Zk+ZA#Ap(N<8TVnYfVww8%E!1UoI&ev2?_Yf&>zpFHGvt+J(&T`VJOcJ
z--0qlpPrH~Iv3W_HbvdkPvPkM*RVjjs$k^tCzYTnjI(=IlC$J3a56W}NfedtIRN<n
z#=_*?ptRmZIxO<B(-0EN&C~5s{T+|sb2+@2)I+dmNub~+r7XHjvt6Q!$`Ct`$1ku|
z4{3VE^}9}<O^>d|Fs+_Mi~ILB=KBLDW8K0?TXL6l5Ljc*RCGUd9phXgl@`cS$gF>}
z`qq<AQOTxJtZtVghHm?U`fZeqF(;_*dkxWg4Ux~2dfxY+f=2K@tx5%aOxmP^*y3o(
z{LblcIJoLKG;{!W2xvXhb&3RbnX^+v-FNYgy@fusmM|+b!|Y<~hx$B5p#3Eq4V5hu
zxX5-lW0)#;@oqH+$_W{nGBpmuH(chM9r7|mb<$92-3k*T8;N*-+>5z!y?M7m{7M?J
z4jBA}Z`yzTgKzp<^LnZ=zljO?y(ng9eCh9maC2|}59uhJ4^Gui$c-ydg`$J(Hu~6;
zg}7zrQ4S=i?f@RibB=Bd>29Z5x<Z{Y6R!Tyu^i=uHZ^(Jy2CQ(m-_vN7ZeYA;{g`R
zcZKY$J-`sHz5{2ln!=TvDzX%1GBWpT^p8!4pv1>F$eO34PB(nMa@Z!rjU2$GwVAdU
zroq18a6@(Lpn*<SAB48LXo5piuGCx+bN+#O3aJ^ZS^FJa1Gp#5k9Pc<eyLW`CSo+e
zb<Vc*Ql5H;QGEr$X*+5sJdtq@ZT+@$7_<C!bD$djh2q}k^FDO@CptUN@|}Xe%PtEG
zhdv^oU)p+@_F>p7ph?&$ABq<)G3?_shvA|cfCQ=p*%drE>vi%jURhx1dz+hV!KJ+i
zr4TO;5oa**Jd!nCXkTuduhRCR;YM_fsQ7!Tpn)(y%|=rf@mk^WS<&%g5WYl=34ZhP
z7e+VGeY>%Owi>m=s8^e*Cs8dOJ(qwIhMsamz(yI9NNv4PJ2W1vtvu(};w$J2Wk%1N
z0>wrxSb>_0{h1ij=Uc?}i0+%58piYCYzUfp2K7o|JamZ%VuPQ&&*TP#P~=|_L#*z-
zxlw!Bc4!aZ1c^g8h5R~ISN*9DHNn(>cK^nfgMP9K#84PEASF>QHC1OMmiXg`J*+n>
zbp)XRO+PkqXNN0+NA6&xbm*QDKyVxelzTsXy>5lw=3w^gd;~-wi#gy-&LaMpRs8+m
z6?w7m0cdb~u1K-T=X7+fRhq~LowxlTg820Y*WvC0-}*eF5?Arv35B!qU~lrPWWHf7
zz8j$B$x<gb4yqv|xRKB>)a4f0Fidu5gGgO#a>p-D=K;q{fLbdOB!{HIu<JOFJHSo8
z4q!%+pS4vZqq7B6c@F0jXm1uUF22!6?;$C&F!fdW@bdV(I7|Qdv0E8u&NIAfy$*+P
zw8ux?kSyN0^wtxFSS}GF5Kp1-fz!fb^z9C?N346m%!S{0^S773Y2(>S!p2{rIR&QN
z1V`Ya8Hz5*X1Q{O8h!AYq5|(m%Jrw{>Z^ap18j&|ea8LzzUKgI`ZW?OiepIUZL#A_
z<k14xM#Gy10;_#EQRjeiJDka@E!*m_8%*BQ&7>ZOA@ADLQ85D4tt+r5Tw;P%(cc=%
zMCA%lzHiTe7swK2yCdAGy=WU1Q%6*!NJ>sBy_M*`=Z^4v7CV5+ruR6_4aZN(dp&8~
zpShs_ID`u=cI1sr-#f#9xnD9Waao_)VyI|5Y5%RsO<J06ME~4{p7zWWbdKWbzWa{l
zYo#<e*q}O8iyXr1$)l(dRQ-b8*?dWeQkk)k2xEtJr;FZ8^+-4Y)5J}};|f>s&|w$&
z{Yy(LG&gI3)?}OY(f*>Zus9Siu=%!3fJutTU6kUC!*yste^Vp`UCHPD!GAN6z=koI
z1-c(B7wJuZFfd>HBNN$1dwPJ+eMw-pR`c`?^|mpv>ae_pashX76>$StQ7i6C)T8!w
z4I*N)!7Jn^?YX#R!yn8Mo`<6>Em04bbH6tJN{+J0-f&@`IH(yrhUyJ=JMZlK0W9U9
zq=>O|3QBPV!12TLMNRu1T)E!!qb1z$L`c3$^!zJ^P5=Q*7-!@A{@Qt#H}wg{3L}y?
z(BcTJMDr;QV(*HmI`(xTRpq0XbzE!{Dt~Ht8P6nGN{_J!y#Tr$tT{#(vZm`pHblC5
zAhzNW@OTcA?C^XW)OWl#dlwmk9`rrWwt}<KU@!Zv`o2hl?h{l1C{3+G3H6rExt5>9
z!1H(X8<dyv?LCL&dgL$pKj&iHx&+QY0~)&3!amOG9>0_#SdSS~V*2P;B;zlSJ!X>j
z5ZnKS^)P(7-0!T-n#@)a|1z0ubd9%;d*P~@mHOpvaH9|xWf?TO6dl0__t?jj>dbyU
zPf4*5jBNV?rSb35YF}PDy1KIwai{BeX7cxobXI`6wm`lTrO@38nhg1`QVFzBD^I`q
zOEjCJp4~43{$d|6CI&OO?b7$z%@{{7wg!bXSab3=`{bu8V)F982@x%}S`gJ(%*1NG
zx5%H-Xz^roI9kYXj+PvVp~yVcU`3}>-2<$VvH(NZDWKAL_wmdFgJu#tYxDqc&{cf`
z@g5Jw@>zTwj3eXujzW~~c)TFL!=(LMVmrQwc|l`2U!LXu-`J88JyG@fEa27w(>2%W
z8Y4P}2sk9=5;?N_&275Dr1uEh12JiYfDzDqBVIr>U=u=AsGS)~J=P1UoS)6K4M@I0
zG6=UN>N#J+?6TeC02}T7_l?f`Z(dzv;(Nf^uZUQsQpJPtlK^W3f#Va*_g@qu9FJDy
z0khehgPn+1s;HVfT{LlBE=;rf)xomBbnZHUw)s>>1|xIyNK0`lz>{>076}JDp)m~T
z>n1>By^0^pVE57Wd4r-vqb|tvc^kV>=@<Of!Hk$io9C}t`_o;PUOs|N0deUaD2T$f
z>>6i*czWH$R_O%Q^)EMfu}J6fUfuB%8`a-3-Pt`h%#w1#Ur{euG4G(Z*pa+?=f2-7
zeom2y`vfFW3Vq|D?bS(kL2y~qf4Ps;)?=uR@!`3C+5{2oPR<lz0PuZm*p9HCSctG%
znNA*h-q@#ZSTwWg@n?VQT*P8_at>jPJpKk-#l%yv3&JF(h?qX)UrhWj+Uc5vOAh;D
zcy(X%YKC^EoW3YonB<P7%gdl*?A*3)@-RWfl;+zEAuIofJ&6n@<vjXU3@=yJh5PnV
zqI39bfuQ}vDjzuXtEucn7qlY4m{hyczCA}>7sEB5tz|n}wex=48zJ5kjFr`P_k1+p
z60!45@8aQsVx_@JZ&-GFcfpN|&+{>sF^!)%22oshIFpTcOn%I+O&IDtxZzkRULKIh
zk{d4qE{k8rzR&Q!J%@=Qp|MWKe=Ru_S^B^Ql%&mA&3B$QO<}_a&H1l+RaC0%UL6P&
z1Y2vo+L5ocJV1;+p(t!gMC}e<;calTy%I8t|3=6Z%?LprVQsgfW_ev<60BB9_J1N3
zx*=jxRp`n++8wXh6jr6_wIxH3+3P=x5&mp3Q4Qu`wj!hE*T3(%hv2;E#L!0h+QE;c
z?DIhMr!{{p`BY;5tD^-Co*VMcUa4tdfp^yA0A431CS0HUN}n!o2hfAjc{l(8w%<ly
zh=o}&+*vo_)gSB{=RKLng{=0g`CiNICW_Ayxo6wH2^X(kTI0<xzzF5lu`jE+p;F2H
z`Ka7fn%na{H1R_4_;4~a$4trbdb2AdpL<AM#xbu9Fka94elayLWx59{X~JOC{*cUJ
zgMrzfAdZDCuKmOM>fZi)8#>@RW~jkO)#Ci@3s^P}upUYmsukg0?M>{p9Q+~YIT6Q0
zfM!tXis6qGsavw_-ybG2rHRfwLU72Sw@1=q)|h_d{6dEuw%h6dIF%R5;!dW+*Jn9S
zX^-RVc$yw9w2ymwwAyCWB7=PCd^qTFj@PUii$Ke#7CwFU#k0(5ZBGye4IW`QxhXOr
zJel|-GM`y4BF^s3&e$%!m)d;2_%1d8b4nB_l5=XOHOr^(`ycMU=FT3A?3Z|L^87mu
zvJ;)(ceja{%wP`knW@f;bkba%PR!oL=;$mx?B|a+=(M2j&(DDU=G17&6<B#W%e*cD
zT1gWgaea%lp^-S?u*7O>0qC5cE|>t70<6V+QE!5kQ&(Xs!{~Z-wt-YGJ`X~E(pLj;
zPuI(;#I`W}$%w%?#;^7KYWI#9hNP$_gDQcn+4AB=3C&ZPOHmobWa~{aoKDEPWDPQ6
z>f(fKpJjmJpNK>?VSzT|WA@<odng>>T-~ERR)(Wf@BV!<TZ#r$qTZ(7W<ba1d>dJK
zAO9;8!fgmN5Vx!t)P||v$K_^^A{PFbqe_TY#O=6~xZ3X#Ae8?fh^8-Ez2_!Y+;xd0
z+(yr@mZiBye45#1g!p{wt+gY(1f@xGNl}f0CO#+2vT>b6yxSxPbc#VW>_(_920iwW
zN@E#oM#|9ydOg_|7({fN-K6lt75Y{`)$cjaF1=eU#psu4Vqe!<qybqLI`>Z*oZ^Q-
zOdiTG{71PP%b8jgO@Q|+zJM36m-{1<ELrU>{fe~NU59^x=uU<9^I{;G#&4Vf@R3y7
z-3Cm&2VDhbP2JJjQ&6F-9!+1<eZ~_^<F)rgJ6xD;wpZM7WtwWc13)pdq|HV*mPzq_
zw3QGiuhF@BNeQR*a~AJ+DfE*=>e7eyQX~x3z8|M0ASw_sK=kB57F&x%TKU{;?BfVG
z9P2EaHG(^CiFiOm?`nA1?g(@6nc}2NZVOunUH~C<s<S}}RvW3Qqx3aHaK7{}xO}=?
z*hp@dr%|MCTOTeL3U>BnKGtlGN2gMi0b~cXR%;arYdALF(;MV(<dn-C-)kjMI1srq
zhFa?Hhc>XAKVsl^T&ziLOAi^_&>v`}l&;nbsg2^Z?*4o@cQZn36WH)X7ayhqY?j;Y
zW?Q<EC0-56**!1yA+UQ1Uh-x3-U`p@gI*y9%@H9aY;<^eZ_{sfn3x9q82s<d`~RFL
z)<uZDC9Qy@WBdo{u$vPnMbKK)VrCtd8$H!EB`H?<mI}G?q|mDY_=gyhVFLgxs<xcr
z=C(WbCFUX#Sf~qf=_o_L+Zy=7INI&k!fv-ps$1RMPoC(Nv`ZM|`fVvn{oBEK2}+Hr
zt(Y{W#x8_E`f90i<X6Gbu`z#d<dPJ{I$emp(+YIxPTqZ?`FC87Z+Fr#I{7CBRo?`)
zNcV9-ldK(YP%jF9umd`NC$Xf2XMAA5SeNK>aI&16^p1&()Q=0eXRQYS@E3CQ&2mAv
z=pfRHq)@=9i?C3k6oZbs(8Ioyx7X=;!^F@U%>J+&hoqVmDL8T#NU+nARS?04WB2UL
z9<%qR``f~O5JR{XvWvBwgs4wrC}d@{<`~3T7XX$C1_1-d4ofsPSMD7NmSIoO{j0+h
z>;&wz^>RR1*66tZgr9n*QaiKiRXB5drkpSdxGIpM1{CcO!v97yqMZCnnPo)igZf?y
zW3at@Bm78<d5=0wBIc#$>slH>s8Y!55RT!m5ab)G(Uy+*yF@N~1jpulv-Ed1Uc(aM
z@j(M!LHK6s8B*5ffS?>Al`|u2EFSZ$<$DD1!I?1#K3G;0F9;or_D3<Wg%Q2?Pp;l=
zhyFRYw|Gak=nbw!?`OtqcKc4%(0T@on3xP>@I(aS!2x}&*>c#N&}AJJ?}fukq@~G$
zyp4Ot<kQiI=(vk1b;-6bBZgLJqC@U@a9`&94Rl&OV;1dqdqa2y%(@t~DnGn8SNK7z
zT115fPZ>^7xZTjT00^v*rY|k%5u*?03WQo39mW^g#Ra8sx<Z&j5=wG8y;{%~i0wqe
zi-wFX?aCYVK&<JPBZMq_zzHy=2zOLybfMfllVl_Y9W@6K8!}0NDtSY#+#J7(1ID<q
zk^y9HE?EHBP=W6#PcP-!h2Tjs?+jVV)_<sK0O$s)?H6zXPhXC+V?^KB*Z`!NgXv<x
z?IaXIyprFoAh(084-Nv8-khu*wHfaQVlqah-O1>%`wQT7M@xe8-GnTs`io+PkC>2o
zXKx_!eTpA|xAd>>j(v5xcz2ZgiwQs+7DjLAV@fsae2xJFxaeqdIl;U0t<Nn&77!YQ
zNkBTaOFPf@Zl+LoK))EQ>!=mt$EQ163Z!16N^3Q7pm6`jhIwL;ld7f=zkK|la7~^h
zjqhd>=tIA^{5_=88EOvlSLv_}F~BobY+EnjrA6ks!nGXdIo(`O7wR}QdS1kP<8IRG
zRx=A&lpuyYo&(CXnwAIv;dKQHyZLyyiDP$kxXiliCGBI8oagZ}62(=El+$;rN~i(l
zY-heL;7mqc==;Yk2et-Q8zB6)!(C*e+lW*9*M)x)jm5GM%#>(^omXv=*qsJ2TZ?-}
zvv!_AEX@a2q2R3(VnF)?=RqlAzpLHF@Bvf3lpiJ!d?<V!-)432x!qGe@2=D)R$q&6
zKYG@<AZv~h9}KZ1Ar&6I1x*C4aOLVWjKRH&`^ySXm>T@sS8yt-&s3tSU2(3JpTnLC
zl$JnQ68iow7@F1gm{$ZCg4B-Ui9deZmV)O%I<+4vjPMc`c-4{)rwr|nk*FOR_*Sp1
z2Qx=FHve(gsVLHlnS)&!X%>_2@pz*_L}KV47|Y^;J2=q$B8zv2ga4u5HJz~JSWMr6
zf@KAOZmwMFIDnQVcq&EO=|KAgisWhl_5tLWzdGA9f88x6L_H^ABAs~w%Du|aqRlL>
zHFQKIQ~+wwAmnZZOj<vYf`(#Ez&Q|!a>&FrdPgTpwJp^+hY6>@Oja*cn;akuv6kty
zuwI?4s34-b#<W6+o8cqBldd(}U`n;W+!u(wuk=HrTPbZim^$FkzL3yZ#p~onWXzme
zt}$f-j5@{Hp*(cJGMW$9D{DI1m995~z5E}b`{V#sJ<mNNz+NqQnejru`dZ)telcP4
z0k~CvUhM4~SnAG4p2({$dwOJ7^lT@WX%#|Hi_o|_j8yNB!z*%|EJ$eZ*ox^UHdwRf
zBWel>)G@)&E^3|c+<FO*J@2;Fq~h6w6k-io#xV_aXGPPf4^_I6gWzK>Uy0$jXAbiP
zR1b)U{aWTz?<p%pBc3sRhz-PeVT;3l_Kzv$BR&m)kMEH+nRUkEY%rBO%Hz*>Y=&d0
zvy=hg#Wvu}c&Rd-pPW;#B7(ZO>{9z(tq({VIweo5AKW#sN&xFvKywoD3JX8FWq*8k
z2@83>Z1f3#twR(J-M!jHd|a=_oQ0k24LB3VlO9_KDK|RfDyP1uM?%Y#7ghkZWR@u7
z&M9bZ5U@`$1FYh!Js{kA?>T~|n9IMN2RiX_S2~3#rE`&FYsYwMpHg2=$w%yJaZG;i
zkdc5rHGW?25D9MAjro1mmqu^gs@K8yy!bq_5O@>2^!3%vC}ob3CD!HsGU=3_NMMzd
z&~3BR?GERppOQ}<2iM-lm*D;S7dC^(TWBUJ#^4ZR`rPN+Q?w4U#yng6bd&z>NHxAI
z_ib4M#PQNYtGZ?$%T-R4n<plY=SbaA?V6o^uG*C2LXT_!dLC*<Pk=z&S*{_usLVr}
zw^1x(igC#}N4pOMtg$}<MlJLMUP2B>K6@0Wp(#%Ik4abhWee-{lF_1sNL{6+M@D=3
zyfa_}A<qvdZ42La8Qm&nijN4%E~Z}#EfrwhrC@ot?jG<~;SRJs*Pzr+MLk(#+}HJ?
zc|5Zv(x)fC4e_crow!W@*coM}pEhXek7Frl$oTo8j;#;Tyn%_jw`}n*k5+iF2Uzl#
z(ZwY1)||$}{Pxjs|G!w6`H7OfG8mgvN>8@~UN-mJQ;?<2af#<}B}<%Hkayi!hEBsg
z-b(p$g`xm<*W(W1!Ky)bI{jW<JZnSUoH5+E8@ZucNSnsXVZrFku)uk?g*B)ly&7+F
z=(P>STp7^W;)zCK^DmovA~-OyL@$_T&y+o<g4LeYzJvHyalRnEjM9w`KW{4kyY)RT
z`)YWKYoJ`RVs56;pJC-n=xc>qmYGm8?^j4IGwZyo6mTkVz~^*+-AZpQ_YXw%pE%2(
zatw6vZQ7aKys`9&4jsI-fT!4jVXh0zyh@;#N#gIPv~!itydQ6Pb9CA~yN<s1MBpXd
zU+r(yh7Kyjx|=})UhV>y>dIaxKfD3=yeCcNn*TJOUMB$m+}Z3@lCSxnp9h-+%l>tN
zf856aW=Qk!%fkx;^^^MP+L`>>-2+A$&25JN_>2f($8M0A344)wkfiWS<&S{_5h5@Q
zoWcYcTA~NoSYahg0!sca4~Z@ENPv4<#412X7u<Lobn<9E%#P3iroPT0X9?9e?IfBt
zpCLMgorlZ8lv^z&Z;%T9(gXdqP5;ST+NlEDS3O{8Ttj!8p=`MGiXaT04;L;DUHDl}
ze#VW{==~`L1lFyuw{96`>?nos;MJ2r7|>PXCF8iZQS~o*L?s%aFN*Z=n%@0$(SJ0G
zcx51o-ueJ811}LR4{z+U?s1tt9feS#p6I~geTlO$!0-qPCV60CC*4j6_FB|vCV8ad
zNM)0~*~OrsATd$#sEL1KXtlaAu62{ASlU4}4e{_t4-BVWr&zMu?JV1&lfzQzKRc!?
z)P8>h4%<xu1`aa1Ss>MazD_3s2a#Q;bD8?cBy&i!FEs-gLNqxmpjY+X=KJ(c{0$f+
zs^EWpAx4HbE@dNGbR$3?pw4Qs!Mc1)tiKxK#|ca9{RZ4g!Q1<eCvYqm?Z5sc&;+~#
zIZ-~5nFQ>j;xM%eu>ABEEJh>N=buf5Z{rbeZ`O<dDa&ihnoaa@o^33V5ndeen_92g
zSrXafJ}H&oPE}Y$m||)Qhe8Wvx@8a}8w2*Qw*=hWMs52R=7aHh;nM^^?0!|2EcP#i
z)p{4D>!TNmXeuxDO4FgYzYac|{JBY3Q8E2Bp9rAH^Cda~VJmFVFjnlp9`KEiGd1d=
zw@bp1Si3v#<MKC&*ZU2HMP();3l-9WLwV=-aVYqop6@@O6dd+Yz)=;M@QJ^Dxjn|t
zM3&5@G8;+To9nMneI1{F{@1rTct{?7ej#5-$l<k`3`S&p;IRS)fdPc|K0dVs2c4Y4
z>0kWwU;MWV{QG}jG>GTHE*kwv=1O&(o_6?5p#J>%nH+G@c@HVL#E6xhA1xyP^sxUn
zlK=d!Uw<!9{q>S0BqWf-;_kTAKEN|9r-4Hb_Z?rzwYwkk3mg*s%TxXPP5sLg2zI|t
z2B!w?|KBbLT*y)s?sbm(5W@j4iG2Q@CIi?73*><Le}9($d{h6^4~`QB%OOBl?ZTxx
zO~;K!;{5@C-mziH8(`XAPtOyO>GL~g5M3kxUx)0UK8Dy3SZHJ%S&*+|Bp3+^n~3t(
z60s!S`|h2u@%w)nnSY%e|2~XPGOtVP<Je!f1q-~&j6aL`&fw&KdYu3Dd!$&fj_vLe
z5`q5OO^z#=XQc|@uTQl86&+ZSju|$u8^iy%Ynqu+gI%CyKui7E3GxKp;S$G`J+jFq
zQa|XXb+=is#>Naa_7oXy=>M-b_dosMnBPYqW;n*+`S?M`ru%gqv!OPm+ucEhBBICA
zxO<!7=ul-ZjD2dC!RSqca-{!0bpMBOMwI|YRghKY&o&3!_<GOQT>6=oT#sqwGSTF_
zpX-buymZ<aDQtNel^$jq2vUsj{tuV?A3hsW_RpH!{Ie#Zj$qYU{>+6`%s?iv3pW%m
zvKelfm<K}F52G+6FCG`UkDkA=HCS4|Zw;Lpr#@L$Z2rBE%YU84BErJ3i95d>oe*}3
z7KpqaNeUEmB8??uJ_eovn_fR>-srro{AXujVG$8B?EoMisQBEzWiES02U*7%u+2$l
zWe<>_J>5wAb_Z=vf0+=xOKE#y^m=quapj<)Iy%6NP<j{}{d)twF8?|Vj0qv$E?%cH
zO+1jE+)i?X%B2*H=#Xt+j#wq*SjDoDn>&ljhW6M@O#mM-#nMZ<D9r$2*lsbOTMXdt
z5N40#GOev5r4zhDLh?iiU6~6m%~e0{tM+44-DISF{5#v4V7uC%*U}PcF<08;&iSaf
zrdR*%6M(4Te10z(O&*oUW)hoC*;LkMFt9|owc?PHt#T2dn6Ez!38~w1pMw8z?(cqe
z#Ysubont(5Ud?;G`|Fv5C@<IJ<_X0Xv{c1G=Nf*vU}(Aaa(}?I0JM9ND3h<M?Ay8~
zYx(_-8mPx3*C;nm!l2O>qzog(`W&X`;UP7eCSaXsIuflxc)#Z7=>D9Q!wTSD1F1AI
z^jf@h!?rSl#I3O1b>1#~OkPh{b(X7k%5v#kOkR&qPN^SMg5Hux%E)KOMnhFe3A2s<
z4^#2KN1%WD6+w5j*KNVf%<LODsP1H$;i&QQ+>P)x^6E6QPi8vU(dbr3swEkk6b3?@
zVGXB<=gQ%3zh^46e!kt5$KkatF4nzBH>33!BbiddF<$N`ITu~*<D=>;IIH{26e+1>
zDlv+`VEntdfTi}NO}CYvsZEh&@?a>Pp@=@6hhcKtNV<bgtyC)Lylk-MV9sRlHtO8g
zr}<dtq0cxq<9t>-iN&q;ar3@U&dcKb-9Q3W0zup5fr(3wrOMsrm_UzRqZ?ExF{(V|
zh7l08x!&VL|DCAx2K-F;bvodR6UHK5q=Q}D+3rM-N20n3k3PBUw%&uP3FP&&u3)YX
zC@=@(?K6tQv}%U}Moy&t0Hyi`S5;G<IN^Gt%s;#U9JYGHQYOnawC*0~Z6x(8&suNY
zkzGhvHqW;QthYj#!UxuXd81L8&1!W1VIcl0DZi9oH5Ns+{m~j&X9SI{za2so7@ugV
zTJIO-hMp!b-WuZaedvnWo02U1N|07(19AXNnkGxsyj+MiSQoCIH791txF2t)<R_29
ze9rewGo&{}gSJ3KUh{jcK4(_kSFveL*AhU#+idHx(ptn9V$?Mt6h&B@#%>DztyM$p
z2nU>5bR#%+!7gBKnwf5r+l@@e{q|=qyxnac>v?1LXf#@#YuV^}b?dy!#evEnnj1<v
z`YForcx=7?J>5EJZ&i;HA2Z4;p!vYydMn@Z#m1yWIXLJE=R-R8$$BY+?MX|}6K06g
z)IAao3DB%Ef%H3ke>O|k@`G;K7mK^CDYEG8J(<Zid6WW;x{9<NJmxn2vn5vB<&@~_
zGxqb<LW<*U93f)<*P}qjC}p4T|1GZm%l0aGhz=}+N2>wm6Fla!;S;M>TENhiIcZSD
zcx?8HW2s4Q4)H?Z@%Go2Ge=SLWv3nYfW__az6|4&=ZLN0I@4{anD@^;J9bi)*^(`T
zyD9vBAN%*;ALN`4K^dRVd--Li`5tgKGttcz$Gz~~dWYih_a|BEz2|wFJ!;xYnKIo<
z9;i*{9{HtMsg5QYN1LP8V7D_mbT6CBBDf){*aRv%zbcqIU+pb92OPpA0XHXdzk%k`
zt{RIulc(Mh+sAH67j_j|nn=!w*G*}zk)Q9e0ssE89Pm%nl)_*l6^}@Z^nekFUh`_B
zyt~+n-m&GkVB2<M#Q4<S%mMr1+i9e`>lT8`;Y94Y@M!A9XfDyG_Q$N8AsNbR0jsh%
z&#urPY|bqfTAbQOHgwAzksg3Hyoz^y#`jEmx!L3`FP;mvMs+OQBsdu|Om{$OfijJf
zGhyl6EzxJK4EOt_L%wek$4yK@#v`ec@LNMh0`j_0T`o$EhDdj-?&*yVmJALSbM^_v
zQ}sDp{mEk7wH7phxp~4CjrQQ^1yZ7b>ti-gqUThy6Zw@<MB`isEclri5WjD2DY=mU
zB}@6gPHMxv*EsoJ_o>!2QEi_=%Sj@S&||xmT+;X?9ErnQGmq11W&k>v^NWJoV%^um
zn8Tk!hb7$haehQz`!bbfaKa)vVpSg}vuyav_FC?dqiXOtBpa*07_S8PL?LIdHXMlH
ze6S2neYrC&yV`SXbTX%_F;}&dpL=ryw8xv*fB6mZAYp393-}<}j}gu1HEp?`xm2yK
zY)$W3uS}tnOArIiBof~Cz&GV_b(}z5Y{vmzWcwr0Hn)i81di`;d0Wk{mCJs5m?oui
zRStA&D6N<{7;hy8Rqh_e=^l*7=v27l?5)(akh2_r!XbrEJXtKtusV!9=-Dy8t`0I#
zE#ZT=oUc?l-*Wx*Sq{f^M<Agt|MBT&jn(8)0!P55G4*!eqHH^v^D8mXN9jB{*Sh+X
zSO%C#OR+;E2kpDXwz`qq(vvPccG!CLB-+}3zz%F%1D*H;aq*PIDB$wCgu@XQh}a#^
zcOmg{Yh^kyz~f3au$Fx&TF3NpCKGITZ{~`_hy8n7bcN#U7VSjd^~i+HC{=X5vNfMT
zmF+qMKUrt0#@X8D?SdrpbuOpwaJfdD&~ulBMky=Ncrf-8|8kvPZF2DzuKh}#scBWI
z)bW*>LJhRdLF7)(PL9q2h{K|#$vXpWL|5;s2AboIW<r5>W;5@ppyEQ~1%yU}YYS4N
zo|*6L`-c`}AmsseR&s}Z@f@H_?Q4iLxtKk&UH>I-x$X$cV_Vd}GgqPQk1J{$NUp)N
zRK0LRr>aGQdP^x|Hn$DgmM0S>%=mO)gh3xE4xcP@nJ1UV;saXR>g)-L=2D_e;<T$A
z$uC9V8oGrZ9@8in?UhTVMIo1_1X|k0r7lzrL;;~Ac;;Z3Upua`rcjy_{gEh+B+L7b
zkJ8OO#8HQWom`otObZl8pj)+tO{1gnb-A9T3;HtZ+(dd_mIv(Oi=x11wvhyyyWoNL
zjLy%=bBFib&hc|ML`3&8$u)cAUdi;&K!B@E+8s+1U@DqxHBGBB8Kn=|k+tJ&A2)eK
z(!+mJ)GhKV66zh5JsIpm5!fnAJR%@gXm4gzX!xizRn?BOXIweKS*$g5!kri>XbjcL
zeN~dm>%pOa#wvyYnTlPE133&M9e?%rPLJN+e{yAmPRNciX1!)J5=m5C!?9f^Y^H&V
zO)9af;yGrpV=FBVEGjc?gj<9}y;k!Q#CP0-@mlO|$*)_XPQo*r)vUXV-J(p@v%*59
z=l5)9@&>on(@*He6FhXwCq%MwisxINlEK)F)KKT!QKCV|He*v!)-vlCK%dmDxuG^G
zz#F@za<XkTKL?-x{JXv7lrYeX$11@N9CRgH#(1={uv3F6oHSTAa3k<&7Gbv(ph7wR
z;^mn11cM?8lmQ>!W^qj|cihOGHjU=1v;<%7&rZZoc!lGZaffO41C3;9R=8{98*3~U
zT}D}fGl*#`A04J{iBa9d>=p}0S4$NslDYLvYm-OQecD|#i3hi-s(%?8)Ud^`0H8O+
z((q&YLq47A)aug@iOFn9lctLLo7HYdH(<(6KAa?&gnS;@{G!-&^UE%RKlgWsTuO`A
z*sN9<rv2x$N|g}~PnH%G_83Z}{raH{9w*(xIV;lFBZ!BaL)5+sZR5@z-b6a&qW!)>
z8vjDm$bq(7JPK1+bG*f5Wy>LF7}@@8slli$-k2DUII$EsUhPR#n3mIzCYhz)nymuF
zsFx-rCzGgD$#!@0OzMEY6_Ve8PrUs{Og`x+Vg=jE(W9Xq!JSJGj}|y&++fmgb$T(N
z+;#O+E>M<(ZndFXU(yhSsL`WQlV#7h+t|%ioQCXjLw-PUCl84)iPdSk8PKDoYhW{@
zypglg`m-&?fVY}MKY%EU8lXQW(5VOqpd1?wxk3-OwS8^KW(B(&Wwsp_)hM@b*c!OX
z8ct;$O`?a_tyiYNo9D~7Mv3WZEl%5kY_kZsZsFmmuj=PPxW-`@RxQ&wsqrwy8S}oI
zq4e{}@aZDgJJvp*O)*OCSt%=<{YtKv{wM`~bHETcm|!a(VMd<i?V{uPxK(EiK=$XB
z@xztI&sxVSwU$dNjw!2e%$19%JzVW=<ek7l@7bC@o8908In*fh`a$&-U4jG<eMH^f
z06pOY%p9LRcsLjJoyJT)hNe>^tm!hwh3@Ga;jON-caB42E&e1KNBz|94z&8-ZW%do
zOG^+uFysdR4QJ+fCs`HmuO=#m%|u<tGsFva@jLzP=fAmB+r2PeQ;B@ZVM0S+U!4~l
zfiC)1kDaey=5i9!N*9LFSM2Cg9!65U`ho3iaJT`%>i$ti-Xs!eku?N?LSAL^1U0Ny
z`bn*oV_^+2K_sp*S4OHT0c`As0E6e`&`k$f&{?hl=)ix?^F;^Q^RWOZLD8!Hx<rvs
zrd_cO6j)Qv&?ekyf~LAMhFT$rhUV7XjVik{VwCd6=C^AU_TGw_Opk-rHk-CLf2O$^
zjumj+P)@4S55izjRG<vU-LH9`q}+XQLx1FJhkQ|cANI!noA25bfBMH&EldtG$KR7C
ztcJtnE|bOyo;PXVb%&gxhf#1?RO1=-taf%ruA)7z9!=LeA`X{6Ug;);Tcx;-!aMP@
zf?Xu9w7S>K9l53w-ymQ!E*779r34_Q<6PB5qB9HFx8o^hS`IKTjp-E^YXb@9mFmsN
ziFLv#-@}6KZvw4r%LU`J<pP7*9WH~R+O)|6H=>k|=Ps)gm(g?F2x|RSkGa)KtG-g^
z7I5bhe@<9YMdD`q3nx-_U8fZ9JBf7OV3L2z_WoZiK*4HAUjpVb9?VPcJ3qJ81UGbw
zbMV_9NJX_`-9Bj18$f(js8(XU^MH^D&|R_GO`bZv$VAi>!PsY-5v_YOPJzWM<&uL5
zj5J-)Eoh%xPau&xk7v9B4{!A&cq8eP4p$rHgoTB-2IGn*fp&{`msMj&q};M>kpgKf
zzqIeKDuH~$c^m>%WjbW;+md&8Tv_a99ddcdDG^O6OY2s*27l`4d&ma?(sJ4*Av(Mp
zXY>MKYlGQM8EU1%dNU)Re&i^)#5so<tI5Ipny(Y0n(U=iA+o(U29y^MO7gi0D%N8+
zi>biSJ8VeMBr=uF@p>qgnlmirXKCeeDAuVWCDnZ^2u)}1iAOk@SIm(jv4~$WS4RDu
z^CIxOd!Q^w^C;jtt!*r?N?R1{q6V*;9Z9e?k}z#)@Sse^32PJ6#|#KW$!$s<=dP##
zM){yzN&NTDJFudEa?)gsr*O#OgNnMNNhQa_Wip^qb~GSf(n9tEy8z^BXd|H2QWd2y
zi{)S6)h;4w&KF<l@Ki^;mbFoGJ~L|^Mz|XcnRrshkh2MaTDvOH^(4dQ@D>JewbOtI
z0-RA}0S8r8#asyzpf7YxbAz5e6OY-gnG4Wy`6tXUm2|xFqX};YyF>hdFmPCRX8bXn
z!m@B&*XDf}r1W_(l<Oi#CTN4zcDKaxu(gjc?IsH8AF)@8)pU@22y5)^&NA0duiX+5
zhn&zYb^EC19{~(1R+}jyw(aFv>vJoY+<Bs1#n>h3`1B>^sl++JruS-TT=LCf$DJMI
zf_+Ty%<0*-4T?cpTRR8B9X6Ae%IM2u2qgUdO`TjW32KzL>G)$BV*K0_xjuhZRge4M
z%LGtwnO-63IgchX002PMDKtdF3%zp<GoSngI7MtR>3d$@a+<7W)mfF_F4s{mSe_#9
z16f(lW6^7xkH-<I4Kes~w?jk&^l#E`wwDCb1xi`mX`A3Cz1OlF9k;6(x8nwJM=K4w
zo3;OkwfBx{a{bmtm!PmLh{_TcMJy<&ARtvbh$u(^l_o8K^xla{C?X09A_CHzB2|P)
z7eWY%NKfdY2LwV1Nq`Vy2!Z>>{oD8MGtTeaJ=Pw_zZ?wxNWS-d=R4=~JoA~6`DW0H
z763T9vf}Y{(F+$gVrOw@Rng~Kei-Z`P*XQmT%s2D)L7Llm!8>rysF^oB7EqvHREUo
zzRD}HmNaZSSQr7Cv8lTSAa}VVV>n97zK$r6xzrZjGK=Zt>fPUFQbxhpj_ylAMNJ-W
zPdwV5V}<lwYCIfF7s+|T0N9QcU<mqSOtKw(+o1e-gWN0y7Fn@N`O59%ckobLdW{ZQ
z*g__?W2kW3nlQ!4CqY55eHM6#69p}@RUB{u_`ItKi?Z2<hmU~-1rs5$SUy_c!<ama
zmUO<r5x|D1Z-jmuv-@XD@bfqHuJ|<+IPbh+pAE<;I@mCB=wNp~b0w!2$b&6Df!#`s
zgw#NB&9<$tfsnKRD+OB^5Wl_Ia9D)W-_)q^$+Cy*sXY)kgV$#6Y@gkIIH<l|`YFOK
zYTWn{QdGjG+0~meU6Jzkn)wvh1n~exF|(U_OvG0{dg)&`y7W+!E-%9Y8@oACo>~N<
z8;54?)kMrQ2a$LOBnxmG?=F4Mxu)I+LkJFs{Bou!A<k_9mMjxaQr3m<Kq896X#smz
ze1wjK?a!OY%_fi^)ICs98$TR@Q#Ntcm#8T*u024=atz;DW604eRO+XO4~wx&2yo9r
zZ;}x|Cd;#g1!Gj3eFS5b_)Bf8a*l<4$VNtemB>Gn1X#7`KRtNZdB!H?l2=*@NiK;Y
zQ4Q>sN^p2==LApoMZd~)XW+*9o*$J4B%>rbJ2icy`N{)(T7PH5jI1Xew%3a1S|1HP
zX%)=D#=3sa*9d>Q%ox#$h6yWpi2*YOKLk^zj6DIJyVR-mIy)S=I=sX8idFMxHay|i
zxXwXHZ?1U|^IFI+ngQ{RPzKE({J*f=03*p0(Hi!cQ1{U?Nz`rv8J&>(WEn_6v)0y)
zrsFHaAgC?jFv+8huELR<T@nlHNgvptN0;tC{2qUA)&-M7L!vbBvb7A5#;C<#T`8ei
zTx%szsZ;<5gEoe;nsU=74vw1$$%FDRZwFfJ>s(P=XM(+iWz_R^<<ygmTXr`kRkjxo
zL$A)K0Jt3DX`bU=*(*VS72JDMgJ)eHuT~e!YTxZ1DG%Kj8iCuX*8BK&(9TM9&HzI+
zO3rFT3@XUFOJtGkDgp_QM_=uW=Z6K}+6!QbJvW+v)>WKz(=4X+U@t}Mu|A-vnFX_M
zIoa0sS8$yqzjXb6I77x_!3Drd(l18-ax}>Nd6HPMxWxj>=!L2~XG3H{7rV_p`kNDS
zc30nCG=AGDVxvUOdRTk?iKySlw^y7;CaD*#25q9Y$cI?3*5r94vg%j7qsb8OFw0Yy
znj}DFz>?Y2lddA^r1T#&qJFGW-#4kAg9m>`w~~%zB=TB_aQ@S)$mCqRSl5RJhl^=<
zGi2vTJQ=t(0${k3;+6-y3;38^JKdAIInk$mfNHJJIbn&IJa<P^OFS|QMB~+5f3gs<
zqT(_5E)Va$qU<~M_B!9pTOj_7zanE|6iRm(IoP{c=`#y+v1bFtCoTJgGy}Si35Qki
zC1<q~rAaoKe{7#+XT&<Z8Mr^z*}zG<C~Gl(zJsJ$WSITKSw}`3sQf~erTPV<I0zwm
zuIPNEdzpx8@Iz_)#)6bjmMm4pqWh=`rJm;8zq=v}0HVWcx5w<GN8ee4z0b|)i062c
z$^q(-L_*rUL`yPYmE4^mth_Mu{pDhjKwi2<pYYvnZ>w)>bBz4Rq{DugH;KIAKQ$3e
zz+hFqLa!2~dO&dSoC8$)pe8Sj*5@HOh=ycf3#3n7cGzQ{jd)v~YGlG)+}`zL#PE{&
z$F~RSTb%*A8Xy$|n7dW<{{?;gZ_~2xhoT&~dcC}ZUK~CW+J5Lyx3h@sV;fq#!5G&k
zygWQ1;;~E^ZPicQhG}Jxq8jq-z(^dMi`c|!Ne?)L_?Vwq`)a?=Y&S&5iF#!XC+fke
zFe&?dRUi3EFWsm~#o^MS@2+uv_m&h_yoE%52?IAqgLq<67&K6j61lLISyPa?PeCbH
zq4mCjm;mazU^3LB4fvg)g!rCa`P<>!rn#3(YyW+5S*>gU)K}Cl`<wy{fx8;SFO?Kn
zbhi^2&-snt;RwgZt=Z5+y+p{hf4U2&!a4AHEbvo7S;S%dylrb(*zVszv7cDp!5E*z
z78%c5oDw>9l_H%jvy!jBM86ltNnr6G*}O%1{_ghlk4+{8=R7*RaezJ&q`bGs^c&zh
zz-A)m@9=D7AHvtD&;R+|1)x;tH^-gu|Bm1PcjV-M{OkpbokCc$`Pi>Z=QI!Y0;V|+
zjk9}qC+jK6J(iXFMMqp*{PCg(LY#D4!&-Bl0CwUb@UI!?{(mT$f43X7We)*a`Poya
zZnlQWnm9P)&fowPlL&i%>hvNIskYx7CG<$Paih-jYW~vJ=HMW34$5*yJ!B(ppHxn-
z{X@iU<2T~Q=Ij__>s>0$X?oxfXE&2Hg|da-4R7zUqRXUcuHLh|%WrI1BnWh~YirYa
zN8*-^(=+9@aiskgXT~)ze&})}Z;a(z=%45OV*%0ut-J2c|4%6NKcbMgfV2X+a4RSS
zI4#=Ve*rwTQr_w9!~g6lzr@(8j?^QKp`<3sy*B|De;>W;mw;CTGN=~)XBo?hbqVd(
zX06l3zpJV#eqb&Aj>-%FGcski^7J`}y-E$5$PFMI`!5{=-VSx?iN=4?5B#?{_6hBC
znn&3(l8YB_{Z=l-VPA*{v!lEA7MtS96E^&(h2H|Z@H;CcbhkBZ!T3-Su*0K}ChQfU
z<OH$l_kXu9{|`T#GX58JADU<MAHt*S>;pD-*a`9v5112Ma#F?jgUkjaHVoLHf3T7Y
z|36!`NBO@c9xrs+5|6m>Sd8d@ET0GPp(tB|4$Ob{?Y{f5zg_IJX8_fN*19Re7Q&ne
z2cGr8uOs=NJ?h+vD)vXSlNR`26%@xZ?5n7yQd7GxMbxN<IjUt=d5>?cz6}F^JdF`5
z+0M@WufnDO{ydyhXMbX1{qGlW#7`n4mc4NPkR#tqo-q8dc4-HK8oKht@IO{ktj@tz
zS8(q#3JqxvIhw~qMgRM!|JTiW`ajrYKoAl({5wYO9%cWIA7U2m3<v0vlt=&WC$f1?
zL-Riamrl5`;~yok5!l)_`Nu=qlBqwd*{Tipd)msYy3}di0HNt-rM>ZdUNbY3P_6h6
zx5#g~Qxo#HTBChEqDGbd|DztCJ7Ld3Fbv6(bi>%c=5|}a>ps4)7+vk*9UUnl`_BMP
zZ4ov;rY=aBpN)NL$5t))rvKK;*t&fqT|ib$s<eD&`Amxn|0A82_POH!yc%K{8JZrS
zc!5{*Lgu$pOCG>o|A$H~iMFusOHWP#ySdd)5(t%RnzY~AueO<g6jp9Y0l}B?>@eRO
zN6nu@+HASjESVk1L-PSN^M5Ef0$!n*Cih!*xFlNx$IgjfCh<SgX#GCMF)_*i7e8Aw
zS*H_VW$jK<j$Hb^|H(?fKcV3N{1ZxmGTuC4yfEQpKQIbu3dF#%@R|R)rmu<HIV16x
z`fvHy7fImqNt`apWj`}wOzoc>ny455I+Kqy9l)GYg1^7+Q<*nElNNNQ|2#m|S!7`)
zB^>s&_^LVn&2yvvJ~0-#_DMv2C;aW`aIy8w<<t^c_67F8-znei*()WXe?o|QfVx2s
z_IGCQ%W3u%zNU%)KkrLO^#7|4RUL++%J1e$d3>moI{NRou=eh6DGcBw2fSOYvjVRV
zvQLr~d-+D?i*dJsd?CJC^WS}w(%;h9kMUo6mM}TD3FwWFObxMr`%Ty}7r3=&76VVp
zMnWQLZ+HUF`<Ga7Q|i57RdA`6bJ5bmy97SjvkKN0um1O!aqh(7C{_oiiTJG``Pz)U
zq(+Es(v#wUpW$uTvZ>R<r!E2~E-y0XhC2JVO#rdsP98>H*aG#nXR&pIB8K)?Fx-^A
zp5;F$6*@b6o-M2aFbeg#w>ywgfOGABGdF+n&bHLxXD}(!?f;8<-_J(@Ic~RGtX86b
zBAZ8J7u@Aj`Gkp;<qf{T1?q?7t1d^nGUu(>l`cXqDLjZg1y$KvIoTLUQ--cQ&)Ia2
zk+=x_nQ9No6tfpeJsYX&*N}UyN4_A{F6m4`APd6!!K3nPK*G@?SISDRD_JFFD*Hx2
z1{CxnmxH?(+6<)@H`|`0oSD>_j-BAiG6Z_`3O(9jj@wR~wN`Qwo55C%!Igk!!z+W)
z!uP1{I)glv8-}oYv<*1Qw(RV@oq|(P$*ggy<i$)-gG+kwWQlQpQsVJ5X@zvWgp6js
z?t@GUc3<w+BC;DFipkx#($w6_{GIe_F4b(B{Wx|?NJyx7Ida@MID&T%P<%0dE(fT1
zN9gA1r(3XL(~Cy1$PCtIj(^)ODdJItq;bx!HPF&3fz?X4OTJ{ZYW3Y~w<pEE>+?yz
zh0lzNesX9>qL36Iq1e1iwU0DxwjfXmbUdP~BR@>M1e=rUZ6$BG?VWk)e!(rxqGr4(
zpqysdX^1QLQeNkkhe5${>-2s&PXqnT0csQ~*NYov(T_%Hx6z2W#o3Ph?r4B#!O2H;
zx6@aEfvj)8T4U4thHFOXm2N}Ck*KyGoq*7NaiY#^u)rYPW1u!FEOg;$re;uOvjyto
zUsp3^F5imW-H2UNTdz{z>fi6h`=`D0j!tFY<zM;7AhTkO`9!UvC(!MrR&2<-ns8Li
zC{Z>1_D>3I;EDj=J~lDWxiS}_zdtj*kOwDks7~=@*LS~aJi1ueC~CB~-d63}&H-)R
z9gS^xg*&p>CQN4Taf-%Y0A%BTec74x+ZMHlNJA<GzE#+VMDz@5C0Ps>g{#kQg!!%t
zN`sp(Vl&~gtcX3JLiJ|d`)GD$AroYB$ky2H2Ho}LscA825Zbv%RBIzON11jNn+4yA
zJsZ(!9KVLjyC(8HviA7=RAasmD>N#sktNNTH(6R^%|Ex7?wn67sYj0k+Q1E)(ah40
zI%XSda~h(hzj-Iwuu>pDr9;$cv3HxfW4}6T96?JEk;fj37zhVt-_FDQDg*|;-`EfF
z$2?zx)mBRM$eUy{>$o)}kR7=}i+St&Vpm>8YZCw5lKMKHhNf1Q>pSK}-72oUPee&)
zU_Ts(2BI#%<imgDJ5p<3|E@y|R+&RBU)qbFX09!n<>xNH!+GtfivyaN+Yd_!RTGyJ
z1MNjzs{a(|-<go<qZ{7Bdz`FTMh`FDt|hA}Y5}1DX8SwAnJ(jWM*a>^RhGbY(wQ#|
zsFnRrXB+Zgy?<ZY_RB?kk%`k~)3z<1xm(Nf_sH_f@AKCt`PXBvK9G#RdA>sZ27DWC
zkhkk7oWY-|N8?%@EVB1G@r@<!9{pRRf9?iH7@n&mwT{bDTXNV_+56<&ZD8c2#E01J
zp!CTa`V#=s9y<8NKEz}wDQ>a5^Tk)cXVB6$^UnDMF0FdflxaO>jC9=`q&GJ&2cNiw
z=G6w-r3DkG?Uj7T$#t)|jEpm72e|}beSfZtU&Te@b2P7A>cOoei=T<>YXLe$7ytdd
zWO=v}+9l&}_`$gJ3Qy4!tjqSIGw_a3&z!?C0LI*ou&URt&WaIj(FF{9jkMRVsC<D3
z6>^xfql9Q%E)4N?)kkeR8L**-k#3e*#&s?`a!&DPHoN}l&#u9T%kX43D1IHlLo2G>
z=Q!j%*4F*c?!vCkQpK<0&GX_tKbzw6IGv||^yQ`W(apIsHwZVN>PDW3m4Rt?tOzCV
z+?xnlxg>Otd~D|p!YKa7Ai(ChB{R*>4j&g$wPv%5(O+@|d9}9Q99x^TyPJNQ018C!
zISZMme!ADjg)3I<*zw<tbtYubPxIb)T5b4_(#cO!p$bg4mZA3<lNxu<j+%(b5Buqc
zhd-Psx??}SwRao>J;PR&f<%;W<$>~NymoS79}aACCq~Hle4O?SzSSBwD?ewe=8VnK
zvp~tqIOzCHnKnHz;*-iZvXIK-`)nJQU*$=H6V%GltjgWs{m{wIb``>rk=4#B8Iz3L
zhj=sI#T*-K4&c1<p!CVsn!J8mg|+0N&4n~*jksF7)0R2f@Cd&Qpb%R~X4K5Q8VIS8
z18$_*(8CLo4{mQ|;*+A)+EAhxR^XM!$1BMq8ntTQZbvkD;r-~LE&FqKuGm&5Pp=I!
z<h`RK+|Jf}PoKXw390d8OI19EG{sXo65gz*1*9dsv?Mbh-AoE$qXwrkT!hZ?2x|<G
z2Vb0L6<QYs9)MsO*M?N*0rI?wGcjDiee6^2+KzvIbB%ji^BZ}j`)m;7V_l#8W`_$A
zE*TyVM@71|3$2X!eSUl8zO8tIu<KID@@7nhC9tLsuULP1m&-p6*FdDkQVD>V<D^mE
z2BCJmAmq;-sr?$3+Bd1|0IZp*6qM(2kRA)qQ<@PPM8`Hi`1AsvwbTh%CH7tCk=L0N
zm`<rXk5;<5ZMk3YyuhZRIBJu{m3YEuc2RAaWs`^@c|ZCC4^0ZE<Q$D$l+TFy3m{xm
zrO#MHM~YOJy76*Ze@N6AJR3rp!iQd*E3rK3X0wMu@(-V**-;QY%9^*Zrh5f0i?|-k
zwI+zSHK{WGs2^G#;!JIVOwn}W@!<2}+zIPBBvG7d9h)q&=o6Y)I71e^u5ikf-j2^v
z^*MEGO5yN}yw@XL=O4YeHZ}6es^PwBCam?fkBvT&knruA@J#RW=u%7rMomKoh%{NH
z0D7bro;I$@u8s}aY3A<B^A4Ju7FCVTW-{WD^5cwROqRrWjdR-Ir8dnR-q9*wSR}HR
z+&}F+=y}<0qT$uBE7!3zmyYtwq^S5Ay-la$8$nq~6IMsq`CGulCzQz>VVmTicDQa#
zLUse!Ut=ECX=@WTmaC&5rCBgY-J+(#xQ1|@yPw?9r8fYa+Z`lc)9m`ns@c1!@6o5z
zv+^acj(#zA`++AoYTNOBifnZ@zXp&xW>+mIlx_oUsQFU1O|}X{J#tikF{9Ov9K8j=
zriY&=OLb!e_dwPjT=t;q70=V*S8Y43t!5!z&6z1EQBS16w&2TdTE6MaigAe0NW~&}
zs4-uLz0eD9yF@?n$`e`?Ri>n>$%h0Roj9t_cfJD%<>HfTyw&^B367%2-A_=CGU9tA
z_3Z1v3M56v@pSx^$vPIAX_zi;SR@qUv;8?tobMqZ=_Nsi)XHZR$G;mJzE7w2td-42
zR|~rtrB!ByWM^p?+86E-74_t!SgudMD*my>$tP0DJHw9+m+WP{?!~YZ8ms&WOC^u-
z0nLjTK#gs7+4N>|ruGm`xV|$loN1)g8@pgP<e&@Z4v1OymQY1=1HG5^QMV_4HA7Qi
z$$e9%k??IbHdh`NzWS=xdsJVwf$H12XzK)A$qB=<OSH@q`7G|w`CZkil<q}IOXr=!
z`wyDk9hdH{5eHq$7ZMJ%6#@ei<N)&_1oS$?=4ai{{YWZdYh2EEP=U!b2Zq9Cr^0&b
zd7XPkNlLSkF^q&Q(qciCioF_yl=RA^xS=ECXVM+##={5q{P%UT8Kh|l0a-K7m?V(0
z(i$-bk!Al%`JX>wv~FVRIDwQXL4C=cGwX`{(p{yLGoQUzET?LW^Y<*kSN1<T1EaP^
zD{R+BE}L?y@L#h#pDLMFCwO-HX#1=_=n&WUS?Q{)?DV;t!}tx*(U$bV=JT&JlWHkk
zd@$Du%2-9>r*OZNS0WSkAG7eH*z^5zc`kdz8}#sf^EZnpwa?WbHY?p}+I_^)7^xiM
zsA9w$f7I3F@RxXuUnal1FD!d?q9qky-2xCPogPn+k2co);k1wVF9~bok*(#g&o{TO
zydcwd$?veYNVH1R#E9zs*$%cMx){S0Zd5k-DSLn_Pv}htj27a>kC#3=HMs!09^2gD
zf%KlJHe%CLR98^il#B+YZX3|Diqo<({@8qT?}~XrDZq{PI+tikl^fZma`i)q!?&{(
zH^~gSrVy{DisA~@jHb_cpL*)eL)0wrfuL@zc>Hz~y?*RFzcr*XVc<ea<}^`zZ$BYO
z8e9&x%7e*8=kCNB@CU5@G9W_smh8RlX8RAIrfGhd@W#;<<x2ZW)C9HIcz=07X0eTv
z+vfwRVMb)0Y_5G&W%39h9(CCr(OU_2d+ayQRI++Tow09irqpnie4<*9410L^1*_gT
zK-~cq-&v{;od_Yl+^A^_Tuu?Ij{p%T2w84o6Av$n$7VFiNLv=wyPF*8&|>wMCxwB?
zUba>M#ukM&W6OW99|iu(%8Ul8tEmxoIkdM0)LYQ<F<Uv+uLmGM9|MRi->Nqsy8z62
z!q=<ES=0%=e|7ulE)8e@pkS(e6SdM5I-gZU_7=}I+QveR+IJQL+ECRyo}+KO6;}c3
zRl^2n0HmO88l5JZOxus>nNHU~!+{nC1oyy@Yj5fRU$H)*9W1&ZjhiMi9Oz)-Pxi&m
z0og^CH99w<Q!>q>onv{z+A>Af6@diDcoFuF`#fgPGlo?q#&vK?T%O$AntNQXU-SdG
z+y3U3yn4jetn9hT(6wY&KraPYTNj1)c{&o9+5RPoU3ksummWK__s*V6yT*tEiKq>u
zjsl)9j&cc>4Vh=%vR*mp?P-Z+AhnOZ0x9d{efVLLRC&fGySIZj?KLdrDD-CqPol!C
zO7_Y(wU4@HE#)~OepAgxY)xQ|VP9s1Wb1h5Qdlg+7dLpYL^)X8Ft~pHljK!2H>S-C
z&piUDvr-37d%eg*M8oSdZd<(%#cQhVHky@B>x-J?TBr5qlSh2M?7bfL8?=5<43ZYc
zhj$Piv#HPw1=ozXSInovb5u{Ipf7<XmHcWAUHb0s^zVx*pmQl-&U$;QNZ8nYZHD%8
z_8O4&AYq^H0Gz8k=bAFYj*xl<@a+O`&JgHD2GLD}A9^ad3&@B3s4vj7k0XaJ)Yzn0
zuBCL9Z%-C<2-GL`UI?fJ-NGHm97uAUNm}1u-3@Q{jo{<X!2g)k_-^LVN}BPjXQQT%
zkKE9SIoJ#Tcq_cwvmz$&SEoSzT#f4%YMPTC-e8kMI{yS9YZTlqqTPti+aHZI-zD@a
zzPkbB=sVM&_R>7Ub>jZ&TI_AWXI}h+3RImY&#w@NRc;6p>RNN4@h+XE8{or^VFJTr
z8Bg20dpN~!Kq;^3Q?#RVhm5&DN^ILf9#e=4-j|riBQC<wLrC}?sI=epA^jWgEnAzp
z8U(JHw~OvioIYxVuo0XtA1;(<aVIM9&}zCrHY_!j5MNM{Bl`)yqvM&-p9{G9lR7`Y
zzjS66n~RryL!&*6?e3bbj@E9}Y-bf~$Xb>^0N*~gO7!k-@$?5WJiiH5B%tf>W)jn%
zPtGUczKQzn<{ow1W~;JEJADhnL$ed|Z!`*+o2gziDZZ$k$%RANpfj)Ke@&(>HN6(m
zaOL|0m@_eIb+Okgx|rmgf4DPpBFs2Zbbm0SC3i+t19uvn7@Q{=!a)$mA;dJ0_0*h8
zp3RtxUCZ8bX<jnTfE=01q|epe`)lU=aQO8D)cpcJ*?q)w%HId5Ef<=9xAJ}Q`HgO5
z0Y!~X`z-?!0bKJ&RN3yjR`RZ6c0wh9YJkf}v%N__HL!*<&pfVFP7ksL*P_?QC)8`6
zJm%td4{gmwYQ3ejFb8UXV6HGg4Lt^+cw6ioK(iGH5(kS7_y}{zw4o>0NrB!#_s7LD
zkL$TZ&fva$<@BYi%|B?j31b_4)o@BgqyL=c<RvSWl>5XMrmv4B=csG8^faIi@|AR{
zqxml#zqYu?B&Xx-sb}?r0JgSRjZPwnZ&@@9PlN}5<$zu^{UI?u{bR-0-QgRcXY5)k
zz7*o_{$gd5b>#}6BB1NS`T`sM%Nn78YNpHv8H0;Z^HZ3e{q-_MDH;{}p`8t+O&M_{
zv04(Am0wXNkt?Qr%CBjpMao^uo^D}5*RE#hcWt^cuxG}d{WT?GjUZ&}DzeJ4Gm1K{
zSeuJ{w|P(YeH5ONU93=%1GJKYil5MCWwW`tMm0PFlBSBF+wP>>q1c(|&5vD`$%;Ml
z;BuT-mVl9~Z=ZHk*Flln3Xj42(6kX^b3-~p?sVUUk#h62SkbUnv-<qB<V7!iAf%;(
za32{*((A{w0D%cEDC8CX`~j3Get+Qnc*DNakj>XNCI5%=%FLs3{cE-R8PbU~YfD5|
zL-y<lP?20Hu{@-4uus2Yyf#r(O<F+4E(v6!;W3)oA*l;-J|03HJu~<*Tv<?cmZ$7~
z#iI;8uH$E}QH^f5`3PIwZK_R#_a#<z6w<-@XEl6l8ohpOCSQvCB0Tn3^oc4GG+M4&
z+;N1ZHi>dWi|p-YFl-_wW+Ycwx$?`XG(hvimAir|=gRP%Z0y-Xsb#iPv(P{zTO?n2
zYwGsKu<?CnlW&{rN<S?@_Ujh-`QE-!a6QTSJky~kOO_Xsd(I;=6S?byhh!~5%$>>R
zAq)V$nq(q*%F`dy2H#T^-ocwzlI8=3;IVGeg+TuG5zP(L+Pm5ElMtca=#Bq!7t-P7
z&#`VPl_{oD<5oj0&d!^@od7q5K}hF#G^(Rij&851jX7u8ivh!5-X^!lztCLUZFk;*
zkfZY>rIBwhTRbEiyy-`Uf%ejFFz1>*1y**@HCmY9@Db)-RZ4LW%?sx(u1w;x<CeG_
zv0M7}K?}%0t&edB3%xS*M*HkzPsCr4z;yu;il4RfcG43@WGcs@UWzR0dd{yM;WCEj
z=^;)mO5ADYyiLc}m{VCVgkTtfb_=OEIUVFK=+j)ckeezlX%92qH`Uja{~Bp66HMCS
zu|a%@R5t!_`Wi)TdFg>LN3K%TRYCc}bjvu@+G*!G8!%#EJ8R~Y=H7z5fv?;Jf-=f~
zL00gh2De*&4oqn}zb*glX+WZ~qj+WuZWh~3Xu9qacgNecNt+gFZQQ_|o8b)Xbe=MF
z;_y3?1s2Hf&d_mVoY{hrbxma;zdElA%iizZdQwOWI24~QP+^*_1q`9-xqgzJ1&}!Q
zFFDLWM}bbzh_2n*!@pErIa+#YksMT!xpsj(-Z7+&GbLZ0(tZJ6L416N1_x70G*!1U
zSH3QZ8N4}X7U<mLotM(QHuBgWSHTRX{@{UEtf{9DtYBzG+j~syY9@(gy>hBOI1MKk
z`m{sqez?V7sZ7npKG`_n7=OPKHTOZH3(!n^%M_sjd`4sEn1V)mgPg`E<#o8oj!o#u
zFasp22Fj`>JLe(YQe2L@J!c%J3&>Iqw(VmTy!ZW?FsksIbG=H0YhgBAJZGIadlXxz
zfEJ;g*WRCNYBcdUz%BG{UH9oJ1CQ#Kd$OR`<~?beu=-6;bHs({9om-l^X*yd%5JZE
zH@ynpp(c|vEqjF83d6@&onTgIPmc^HQnUC@%cWv+pK^w#YKT`#Nni3tN{Qi&txVUH
zAm4NX&)Vz9yB|W#VSY;#t0#A=o_yHDJa?M|goNYR`$I9bLimym{q@O_72+o1ZMmnA
zW5%zPX`8j6KXM6vHkc-b!*Scsictr`J}=s#4WfU;0f6$dF|pU@(QV(cG5$zF0;h&o
zfB5>DZ$~pA-KzOcr1$rUX&Na!DlQj*nRDR*w?f)5EL707kt&~~Ocfb#7$?p9S3$y~
zTIGcl0<}EE4G=cTYlt<UB8dv*!eS))VBjkjw`TD5x}lMewE?(sRFeuD+iERqGYFEd
z!|Wj`k)OMa@1h<IZ%25$?d;AA4p9N6+9ddPeqY+9UVO&VBWsfnw|78B#G7&1c`nM{
z6P~d2Wl7J0Ca4(pXQ+BLt}&0+=xA~3js&~A(yCMT>>VwUH6?b%><#b^Vlp6ri?7)8
zGT>48Th{sQ)b4ySsug$i!5QF}-um(CZ)arhAic+;GBq!p`*|0+gc`vF%0g9Sse1OM
z_)lOZ6N&M!jTt!_;mrzuL+zo0gkI!Q9^AS6*GaGrK}ZCsgcZ?(%&j?iY-RXDQ<)h}
z<Va@x-hJJj80d>q0X#z4+e2OymKM1l#SOIf>HwQxvoV6z<cwXMZf{N-N!u2BJLlJ5
zNzTr?%ZYzqz4Fm#t3M*N+Lh=vT@~xz<ACxA1m#Cu{Q%0n@c=-?N7E#28q@mtk&d(n
z!XgWRes5)Her#tZPBu!T#RZzk-s#FwoniRf+w2SL*Y?T_BrrGRIn8>hBp)-mwkbHM
zHK&<Tp9|~eG7VttH7zF3m?^=IS4=<@Q{&ZGTufNn(1vhv&pn>JX5a?@W_Ed1_ZQGO
zbvN@=yUXAg$Cmh=@W_RDrw2u@EZGBl5l6FMVrY1Q*wDuK<+?|xVjpi#J?t!~<fi()
zOZ6!(?R23b6tKI>pKy(h_)OhZXiJiJcUT>p<22%5@2YoPOOK_i)~vbdXvMQ&A$3-b
zAwM{~lDpocY<vVsgAIVw@%CJdv43UuzMGKgtLwz!?r=8%;iu``pN|P)Ls1xKx))kU
z%z0o^@|Lhg;q?POExIdrvmBXN*{|Orn;BvB0VpDsRiU=^*(y2515=Lfj$maEaUYIm
zhA7j|X^`+}Q!wY*^xkZ8%YHwz<&a@oX3$`}--l^3L1*;{^_=%ut7b8B@rcqFFlW`#
z4DS0>*J)4LwNEzoibL>v0sFKPxx(~1Nr6T;hMN8T>H12Lme<6gdM-ugabxis?T()|
zGjtTy?({g^yl<JdDS7&v!i`Nk1ch1ZdnY|{l@c}M=SiPB+}GxTzrE7b;_9Q;Q%^#E
zr?w0+>^6Fjm$>A9^_W_8rXwD~R0lxzEzx_UBATDuAb}b5`>bmlc2P>*Dv^5vlciGC
zyyA7jI|$?4G#SmA(*#F!CEnxB#zw3SN^X?tt2Rbq9qM3a^JlUE>5P35AUL#x@w^%F
z8twU1HeY0keqUVG1Et^GQQji_nj@SqhiKe)rl@Q&ZHNItFM@~YsB4m=lXw#`I#}$A
zY2h0PKjwr4Gq=W(XV&WxtnXL<K{WihbtLUJ*4R-<+cPsj-2c%>kBepaw!G-k#e_50
z$EJS`j+X$?7#~T{X{_|6oY%}vtlrdoxl!U7Y?i3nxAOg=7$x~7skdmO=o@bR3w$&%
z;ymF0_b1<t&#ej;!s=l;me9V48;|_Ydh~w+j7pAQKmf;F;?SO9Ycti3d7Exr9m3?U
z#woaOil|2q=B(Urj2!g3hY}cyiB5t_&wGn~#8W5!Fhtme=a0Len|r0)0ayGIQW;-Y
zd9FW5a5@p_6wPqy7`NNB{V{$gJOOaSDV?E1ed7bzs72+U%P5_%KTj`Y9e$zl*(;^Y
zv{9N7_f{$7W+FG}X#v_LOK<o4TzD~k;CTH3#GaC3DKiV_2q>;`91~1D#t!cNBqHhN
zq2{y!WkeSEo|YnNjIkXf0G<tg2m2{2$?NuX5A%355m4owRq%e*YqM1^m8;d}r>iJ&
zrOzxy|J^f#i|^X_`F1A<FRm>+!vwq+2axY_J@y8;oDm~lS84W$E8(!v`V_?gz2MbR
zz#qbc<F!dwcTrHA!mH5w5`=w*vv76;>8+HBTk_x~KgAo=oU;R8&_Q#JuT1kz0WePZ
z3xay#;}A{`<JML)(}l0k2}zX#kBLM3^Tfm9e#5jCS&vmv<~ksdo!KOvE?;vah63#s
z_2nbJm-El;-JAi-nu5bLV~yjsPK+>rc8>CJH=!Y`AtBr}>k3Qs`2t*0o-WV>>aw#i
zP<)^n!eNA!i~5lZ;|l+=r5_jT^7UtAio583=YM(uNUhXx_&67I9o{)E<eTECN;F7U
zN{|A^pq8f_<_cUcz61Ao=pZx(-`;z-SSMO*+R#!R+9n=O6b(dW45_zW6$|G&P8XIv
zn@XJ0#=Rpaw0}JbD5z!)oYDaWRn)Hw0QWsBKVE!Sv@2CH0U*&)B+Ur`Dlzu5yOxLq
z&DQDp8HbT7Rn-%K_9y+9n<G9J3`b7<8}&x8g0hO6bN7~&(&cimSc}1C15V_Tl2bUS
z1G#Yq5D;T?nO3zS(4=pSBJ1|e?Qd3+Q4&U(m(Ghj#nqcZq=PvD31=U;VyACWhfjT|
z-o<q2qeA+!-t?oP9e7(>Me*~;_cPUfpTW~>L);To6Be^g-3srca7ErLKa~teN6#Rg
zzc0VsOz(1Tj2OAlwf>#2Ub3c7+-Vn>QL?5NERf;|w)yJCe<w1!{@aM}1Q(C+wTaYR
z*D9$Dt%i%&qd2mzn9B?v%^)vED2>w<;KlW6sDSxmDSMQ~jDn7)Om?qL&`g%Qr3RdQ
zK~NR;RKd>{uXJmDYNjJ!Bn?1D$AYTeF=kk+S7JbU1bMD~3*T^`!86a?uKd;c{bh8p
zT$-7jpnAtKBBc&1+~A#}RQxp;ED6e#{bpB&7*Y!*I#pv_jtm|8ggbI!;|KJ_Z1$pf
ze}RAuIGI3d>XgVAP4Xxn$ag*V(tW)GG|c@M%}9Ire2~vP{LG5k3nu(T0WTd%6LOc-
zRD>sR9h03>IWWoctB5Ja6&nsV>4{zOs0>hS^&`QvLD&P7tUpwS9?tI=Z2&oKtnW)B
zJt#_5QSa=hizuy^H#8(d6cQZk9wF<y7KYz}uNma2H@Xw>${;22@Y15pYKk)I?#jFA
zeb2;)<8p3kkaR3B=X<O8o4t`XqliD{u^x{%tZCiirOoN^y<AOk`s>H9+&^Rqg=A0s
zxMVJwUPG4yx`sXFjYBCK`Yp^kZYy<2(@GT)N`J7U3}JMiPPwA;Qo+m2GLHZ1Wk5@O
zi7FtSqQT^SoVgNiUL-{G{_**A{L&ZPd$Ap4cFDafeDBD~;c7}_;KthX{&f=x-lGvH
z%7*e^lBVrjBK}_`-;CoKajW$#pPtO(%$AQM-k0y7cOQ&aJX~nW4<_6pm`@i3B4F$D
z*j^0}(=s<0$bIxn9#mhs%^9TWE_`LNkCpsZj$UXi4#JY|gs3%ngZ4z1mzvGmvj~2a
z2*4{t2=YU@L~T7umkFnxT3Ta{84Q6?t==imk;%ta@RL(`@Mj%Mu?|pLh_LeHZGrZ9
z{_3w)i5gkmR=pIj;0Qx?%R>5?Ri2E4kgM|>7em*s9EM>p1bdrLJ5nc*5M}{ZvZ||#
zJ>>J2a;yn-eCURzOZOcR=T<7l8DS|A-$IFoBW^a#CHxD0l04YEUk<o0?9KzepQ1*d
zS@?5(qfAWP2w`7wJE$;Ha>v0Uwsb1!25$n*@8{FT7|+Rqs>aZ(QkF*1X^LLT8DOsT
zNh!Y`{=PtZSm~sH1aEnEUc^VUtA1xiDSQ6;q(e8O?G&`X)o`C%g2@5A^CTYow0KF6
zRUxb#(6lzwV6V=ndV{%eu-EHz%;?;TF14k&DpPZoJYIn!$5bdA0v7(QPoQqdofAy~
zEZik{{in^BjNHdT6W%JWuup4~HSs(-4U+Qv0O5jFI;igpQ}r166y@`0iJ;(!jxaFI
z87|kWW(~;vv~B--@$w0jrE!<_@NQ7z$oJ;rWJRKK*RCFAjL2*Nok-b!`12TsqUTJ`
z-x4xId?hR6o&Xo#hshVK^ycjt^GWrZM%>oB$>spNE56$!E_*g#oEv$xYY$|JJKT-5
z3GNRcWEub`#7hxnJn}xP5j*T<<TF)9j|3b@)-aD(8(&@X-g^mLhs#rRmC2u{+2x!e
z2U2UwPq+xS?K$zzzy_W;J3gPYbX^7QlAj$z(AxWz@>ZS)OM}Dbk%lPP&e6YQ(SQ}W
z2fnBQe+!sUX8=sG>#O-y>$pn%b~I<((qyd>J0J*@TlmjV_@uT2eKcg#{o`9l3ua|w
zEODwP-!i;@$R=N$x9nj{aE8m4@|~1xH|X}(=YT><Xz86si{}SlQo`tpflM!#lfzT?
zwPw8}f>WeP8zbJ&jjX8kcqTrwwl95YnzLgUIT<(#Aokpp$qzL?&ngpo!{r-^b-Du&
zijNQ4%C9jUqKCbvZodw5gqcj%PE22(wz4$S)Wy(D=66C0-Eg58ax9dj^|%m~&V%TP
zkv*Du_&!SJ_1)>uL6P<|yVI**#2tp4s$xO5uSYAqZtnr??pRaLc13oa>jo~UDu}MR
zG8CC{Q9q+qsdB&zQF_c+BN|NfICc+Eb%4%v>u#$=aTR&#Mv(fxBtT>CwRm3%>Vtrb
zn-vY~DO2<2_U|XR1cp*NMWS7c^Ic(^!+EB4$J?oX!(}zYqSuA8Z=4Hfb*d|8s0O{Z
zZQMkbdHqrWYSExPF`N83ijcz9+f`L-q(3v1uhmx~f1Tyj<P78bb!=U5opmgSv5kDU
zueq%BR70J*^Vkx!kESd)kf-x%!w}`<cP?bQYUNOlPS206?T~QDyaUIdc7ipFfkxRX
zIO4jIxE8KfFvwP%8Ut^F`Y$(p;+LJS8;7QXE0&}YVua#;W52NiR8OrpJ*y#j+*1t!
z{xC{jDZz$$l_<K8Vl<5IbeqBYQdvbeE1m4~wz7OV%52TO6hHT5_?ApjdyV3Al^%b8
zNLO%kW~_!(?&|e4S~MePG8g0y9IkKns9Ve9AJE@F-%!8tH7`;tyXjTgXBzyND&WlC
zU{_rAWb$YFQ2|@*La$qHSoqFy5no(QU>}-UMs)bCf>esq{?B{NmpS|$Gq3oyeOq~d
zWesWvSWRpoQvhZlF!PByeA@JbFP~-7gH#etdnu1)C;p|2BA1l=Wxutf5;RWza@V4i
zJm^)b9ldgOXrxJ38J>_zV>}Iw1h{t5(#IJqFjh&=ibHj8BiOHhP_*s)75Q&(6?IUd
zU~;-)<Cfnv18<gRQ=We0?Ppw}Bfs-EAA#iwBwE8#Jl-V3CmUS4rp^k39><`bl)c%`
z@$R5a&>PkDNc+luGh11HO#vYlfSDAk!{0T7Y;Fg`&r)jKuda}`jnbecUvTB%eWFI<
zO7aLGThJ6o<TCb^i{DrDsJ{uy^xkoF1!g>si^g_cUQ@&dD2>N87ZV{dd)HQ>157oy
z%l1X}c8N1^=y7q$=G>Y2geY<sOr{`oZ@c4)S;Kuvn;+`W0>m3RauKE8lPEbYF+byc
zpN6u0)bjDy0Ip+hG=BnVG_>9sA>$e$jV=$Q!KA6{IAhC_%pm?}<GH229acJ^UD1q~
zpOsujlM}2VZ0eE&Y_n>}OWFM-L3!?HyS-iGk+fQ>5q~JQ-L@DGQM21OZWF%1v?<8H
zUIAZcMFPWX$s_q{`!&<WU7<^`3NRne6iWzAy=>W6MC09ISTKRHvR`_2_2_at(BYLG
z#xaHECF`E46}T@}Rl3Bt7hkL0F{ffj#N_PAVOKUhrW!;0(dcz9*0EK_h^iP?2T>N>
z6p<GeyBZ=i37zbtWys%J%$uLA!H+M7uv%!|O`1c03}SE;SvOhK(Q%Jl*jA8uqdkoR
z!WBi9U>u%u+QP0e!e$;xV<~pI2wYb2ozrkq5zc{qjo4rbVcf?=MeApJ?OFMIXEam9
z5anj=t6(&?iHCJYNs!O3nEMU_pZ)F9)p7IyFa6B$BeG5;u{O^nvBJ15jlA-TE&L2H
zI_EbxxQ*;p@I3;-<r1%AnW9U`(SvQ7ZZR`GiFvXkl{jaf5QOqay2*VMR|1CKywW#7
zF6r7P&zQIsP6~6bK~Ns&7D3hYU&eM(@B+cI&54R7wVhX8kpB5~JMoX$xPl=367uYC
zw&3T}CqamLDB3sKc8s#B9pVa*v8I$yv<O)4OkpaWm2BFuzEKj3y1X?3CepVATPT#w
znI&Qq$ig4tvSq}?ph)T!O#hh98KTPKhfPnRIb`61^jh7EQKZ-OYY%Ob;xse}@Q5L4
z!bVe8zKEt^sLIPtTaD<-Nx=fs2Er6Jt=x9f%BUaA0*DkR7^#5%0oGf5KVN?Q^g!dF
z*WY$O=q=OiQbr|T1$AfGg}$aSJCpZ1gX?@~lcsY2`@n>qZPZMnYIKb>-i-$%&mBGj
zdxUiy7+eh1(7j{4o+IKq#jqLt`)%nlc8oU$V!RQ7+1sJ;0OG;Q8ui!#oK|`3I!H`q
zk_`qAFUiv(E`Ux6ATAhd1OQ{2P{l;5tOf!YP_dCE3I<_cjZ;Z-;$3gyf_z&(B`YeU
zJ14O^SagKIN~k&-QV^6&qzDZM*#rcrk5$Ft5P1KSvL?|{@3_D3aLsMzwR&rE2F%N!
zSUY>3CGvgb2^9MW6xHf4dTQr25su}4f{AX;csvq<_i3A9ag+3%Dqu!-LZH8AX3c)?
zz?TI8<BE5}cZQnAG|htQi82l|wJ+*;ztawUL4R%3fqHGL)4jv}D|t6_xSx>)UB4^K
z+AXy^1Dx20<@PTYp+p{^ThXHF;4g5lT_R6k{2?$fhTHCY2x*7*!s08tb^ILosQaa~
z2$LP9dvV=<85|qo!U!$#fS<GcQdX{7JuRuvF&M8ywOs__@dv|Rf~+;-eu7P?e<s-^
zx8Q!nNcT;YQrGrP9b8GQ7B2+K^9fR4ju4vtc)BYu>cw0|YZ+*GK0vhipy%6Vvq!+0
z4YI|#$i;k7=REptQi=Lh;@yGAJ14pte%duGTN#iWxnX;|<~eFEo+Ey)T3$qD?*MT<
z;)ur!qzf?=-Q)G7fZTydM@g<bQLi)9P7Fz=(E>$}skjVV?fZiGB>^2-o!%rSG;fKO
z(S`9TVJJnoPZXPGRKpUBh@%vQw(jI>4Ie@5kI|^^+b)w)qwn(tcrr%0r34~TBBc+X
z4V_Uo5yn0bqnIoH4ZapUxzlQLw*N-7C^DjBHB7@KPuHyBL(h+4N|fdaT=?Mado9s3
zlEi@JT~|U-!SS6phQey@vQ3(g2cbKS>mnC`Ds~)yYDfb){o1#O8p+cV!o^|@K|K)%
z-15FQ?D+Sp9QWy+J(hol@lE<eK2|%Liu}YoOJ10jxiN#U?Ogld7H;L--O(<Gsf(sW
zL-0-k9LE5%fvI$1U~#F}-djsKFX351Aa-t7)KfM_>EXs15F##=wKKhTENfXu3*U11
zLJs3lTxw0!vawy7xMTmO5NO43ooCyBdj$=&Rmv9nTB18xJZF%!Ix5Z2B$jQ{L7(s+
z#Lo_2KP5{siS+=G8q0$@=XCLZ=-^qrz~-~(?ElbVGDf+FkBJ0;nz&U(cQf=74f+P0
z?cpRJ8BL)ir458{@<iZP?gMgi%<t@TCF1(;C}*IZf60r}0+l`*Q;T_r&)%6X$L461
zs8MtAauN>Up0`r_A6aKMKOurvAF~eOR9`C0*fk7TRfLZ?_^~Sb;ivHb(u0KIPG{2h
zI0*US8!k5VlkU(Vugs8s7}Tvl1_!e*q;l|B=NANUU{2&VDTa)aZs;svnzqa-JT$9x
z%6^oP-eYN^-;|1g*bh)3kP&w7`BfJnYb(E()eLx@z-Am>YO$qP0VFzkzb+?&E2K$W
zW;ie}y5?FW&!rrvkW&`FMk80@b_hOw%J3n;s{j`mwTBD;z2FoDRo*S{j-Xu3V-Q||
z`=jvjzho(Ev1lAHjoU^n@}=)?Dm{lVEWfOnLwSd77@onyaw+`SrK5B0Tg$XU@$^C1
zNw@xIH<}_MyE1EE4f%J<J7|8yH8$mG<0@2TDvy7CZ9e=%^t{mLzlDd0H738ctPl%r
z<ezsp^f%v;pZSW}O(^J0-zKQ?J+0nTGT+qC_Jp?CHMr3S=lEa!=$$|67osDQpf|sE
zf$-G$<FNa={IhDVNa|HvSp?9weCUdG>AOOcd<^kRT7|77p%_<Ayk7F8F)3|nlRwq1
z#yM%EhoF+;qnxdkAw6}R47C@9tskHV15iiL@y)N5ygm)qD}$QSgt_;B$=LLjmsg{h
zTFJn4)N#Gq^2_+S<qes>K)gZS)kT-@?^+)D5-!~#Ur642*<q9(K>5W_XGRP$CyPR2
z$%6$Rx+{Y%MR>UuKJNcT3<r<&jeRBJhJ1;0sr4!WdUXx=nj04Z55h5Nq6W^z_ehad
zHileD4w<Pxb2h`nuDKX0-S)fTQ2Fq|ot6Y3#=$ni;mYBjkMLEiG=nNR^F@K6iWU!&
z+UBjMTF208OZ3-APh;6G1BLMPdbUKq7`Yi=9ncdhs04d@@%nTQ0tU}({BaoRoskL!
z-GGprhd)h%B7Ut%WGaMatemPT?U?%fVW+|6>WmRC72OF~b~#TKt^}_2@I5GpofaHM
zxQ!hOD|UyZ0(qq!mON2|!?0GVoSH?xsE{UuzAT2Il`K3C*$eb#gOrIKy|m#6<M3Ir
zE8tIWKxecb0A?7|E`K+Ma}c6lsHX$0N9y(HPxf^;dShtvDPoq6jUJjy62~b)*u+xe
zgCTcw)!=a5+VXLUKGdD}PZ@n7)c6Ook(vfMH<I8QClfNb<%_dNNt;QHOZr(`5s05n
zeiNuIr$kN9y$C|nQv0@3lmAA6_jHTR>ufYi-VL2z<A&`nlXufgED3&DAP1fLlV0^~
zN!|HbqYNM^0Q~hN^p2eV++*7mY_%yMDe3W`B$<vw1e^3&*1jq<qGnhsj|(gNr6}dX
z^m|+r3WJdRWFOe;jB|o)x68oUXrs-~D-p`g=dVs~H;AH?6?m^MwlI@BH}z^h?1nEl
z8ZRNQR?|OH1yEv~u?h9~c3}{1VM3#J$w4&7U}!Y=TktiJ5z?}%(@(m?#H&U**tfqX
zuWbNcWZ&)S048pq1mm&kuHuu>;B5~@?%hr_W|QSml&hj(e+d%4_u_hr%a0s}T=?K+
zzykI&yosXk9BJ61&PWApijb6_fr%^ps&22{NLzdo=(K8c&+!cdrx=6G2QxH|oyM#8
znsZ3SjOc4#-i`4BG6v+EMGJ?5c=s?*GaW|}e4y5<j8_mj=$ii(yXp+QT!YikJtw!K
zy*D<I@l=>)s=C!+9NHskTmY+D^UJzp(N^u&aC_5Xhc|<%o)hROHnPNM+7dcfj{B5;
zI^GSb<%9uIPnc&lkgggDkEW1wC&#*WtX_MgGNJeUkcpAvL#A_kV9)eL<cz%+&K?;d
zuj0^j94FnQtIKx-`7=UMaGCTA(?`jokUE^F7FIS1wN^hVeqT{<I$qS6!0eRVcF?p&
zHO(<GBkPd2F(F<C6!IC3v=bYa0JUTF5<2UR)QQw|3q@@1{20dq7?a^hoQqEbl_$F)
zrKzsm5U`MId#fBpdr)Da+m+6|gz##WJ(S5-XncQk0EO*e3b=Ee{Pv<j^1&%nz8eyN
zlp*;;Z0Mw$taU#gQc=UPWMv4r3Og?*M@F_41n&Pe;?-Xofz9T6^#EZ&l*PqiuK$Ab
z1mho!?23vgp^xU1Cq)Sn7)WNRreqvBJRi++6JnE!*@s3yO<o2v`_xr)$?nfleve5X
zJ@lo8>%CLU_-@~Q`BSf%z{WsG`15Sfnq0{G{Js;#c-H0W{*BlB<m79H54I}?!G-PM
z?c8Ub#y2~YbJq<2I(g~zzW2)u5A?6xPm?-bq&IFlcy-P?j-iGAAfKD57DVa&B2SoM
zsvrdDy;k{D&6*r)4&Yz4G+1CK(dDxGc*d??KhPN~&KtUVo~Y!T{2bAIu>qdT>&<Y^
z&fIfsTp|a`Q5jvMa@%XuGKv(RtB@)1O>nkan^W%2w`ch-47GCSA3-UFf$c{|e`#ZB
zr>;poIiNfZ){$<!2o6>wRc?p#cIKhD7s^d=nE~lz(bJJ3@DQYpBGUf$u@yfa<qF51
zW=s3@@u7T0T6)p+(1eEgpHfYgk8ppbrW)GUaK%1osK*Z<uqdB=c!YqJ@v^*DC*a2#
zfia13aKfqJXM_uDFwI24WT+$MsC|luU0CA-NLQ`f51WvHZH4WYYJ2!T>H==Dy0h8x
z$my+Ksd3_F9bVE>%5R3(Bwi@%Gb%@4{|%4VO#SAiJNv5Qz^siVb!g?A5kHx#YJQ+a
zCiM(q=j#L{y@|NI7HDU=CIt1}<eO=)2D^17>uoNy3~B&sSC_G6iN*Kz70&n2qU5<5
zjpFk>&__RO2H)Fx3A$HK9~{gS=Dj#f{pqk81B~W7Z;h@GV%~n4m}p{Fi(+o~+#zbE
zQ9>!#LwaMKu`Qg02`pkXxQ&aJs&p+|JWHbNz}~80uqaY<uu|Axx&+*oRvm<sX1Gpr
z5#<H+i#yaA50t!TE(mKrbR;z#F0Q2NnJzJ=79_&KOIbkw(5rj}b5YXv=V0RQo4Or`
z#GnvyiqpNN(8AG(p<jj%YvQh7zkbs}v#v$$vNC(4x*p)5c5zCa&Vqn{8Acd<HA%9N
z5f_(uFJaMR*&;EtuZ&aGuPecw`1LG6>{C2ORqD-MTl*-6eFVe2MUJ~AK$F9mAZ-E-
z8lS9oz#Nl&NS2h{-x2O{neD%CQMI{%@ez<2zz;&E&!^;xT;Yzq;VgY`MqpU4;qCEW
zuQ|=>?dKU5UC#3zHVbQwH5O2W+<}IdCa=?eHcTx@qZ`#MK*Z;PJ6nR|TXT2I2W@q=
z{17mF4hZu$`4T4f;FNqnTUc5se;_gn>hkB7GN@#cX>od4I_=4s+FHMLs&uS{yJvf`
z1)-(U-M8Q_jAzj6Nwsl;CorkHYNm!6UXj|>HyK=gRhOF%Hxu=q{6?wWyS;pf086lb
zsC-%4Ue4b4OJxSypki+OIkX~Y<Xmm&2hdpc^TT#9Na&?{bbq$R8)bQ&YApI!x7+7F
zIJEhA;*;>O3gw{QY#Kg+2UC}6VfkHsMxnH|8H4DF*eDv`9NmPp*T%S9ld~E9B<FnZ
ztjE;5%AnJlOd3R6x5_fJl~n+hxs>I)1VL8N5%h$rfo3Bi{bAWckK8d;<;!NW=n!3<
z_cxz^SHDev%1MoLwwJQ==D2YQbmET8_KF@lA~7^IR;@NjZ6bm`TH%7J!{nzl-r1Wp
zZHde4$*J~zxGuUx40%V~&ZGArAa{GX)q2JwG2Lr|ri;cw1GJl}tjZ$<+mMRG-yyP5
zk0a-dHS#5`>f`RX+w=&m!5#oN+}CfH<bsF!ES!$OqU3Ok>CB?RKtINUe9#=cW*53;
zGC-LJS~p&Jc+51FHJc<#6JlO+PgA*tG9cJ>Ka<b@4`<&UPj&zIe<dRcl_F#`kZh4`
zC1s|_ItPc0V`OCJ7$+$z*?X6njAP3<j;3+!acnA_69*>_j)QajKF4)^zxVgPuYSM#
z>i3UFan9%S9<TX)EtF6X*)W~JIB1l;5wLX+4a(u#Tk2a)_n-EJ#3J)7<vZ-%FHih@
z?}ht5Nde|LCe)iYp9|fsYk(fsj6rxdBWy!U$1OaPP4VwGm(>M_@$xbXoYo>hA2cHR
z9vnX9xOjJ+k++HEvNVFo0PC@Z$lY2YttohG=7-D51>LT^age;)XNdiP*xQzr`1leh
z+-aa-Ed`W-Bq~f>o*_a}PCU&Qiu2-^mSnA*Y^JRd<>JLvehZ_fAbF3oepc4KH<ffq
zl6=RL`fIeIQ~HYpW%>RiM`+++?(J8W^GcW~?8N0@K^WUCV$kk5@w|Zl740IHIZ&j(
zjWv#CeOGkUuJ1Mqmt}ii0%DYvyg-_XX*bI$Bc_U{wl-6Ca#^$&N$oqJJ6@>nX<QXQ
z!yE&^rm=_Vmo%C<<?X^>@(Za2V{0}VZw$YXb?c;$dC)>fRC-?#H)~JLRmgXq4Rly)
zKO?+8G3avYvzd*xhb$)iURMJ9{4D!SC0$S92DBfZ7r~l{HQ)^>HHMr&Ndwh0oz7f6
z^7ACn#JD=g`O&N<hb&~N`YI#wNg%h%_Xpgvuj*@Dr@BBBODT|(#6;<Upied>{mO*1
zqgVZlYJ=T*^rzB;Kc-+=g5=k2MjG(j-3iY5cdGrK^T@ADW}rqkTlyH8-lj61tc_HN
zIyGt2)8KK5mHVN>t=!pVrC`=iQZlT&qf?CD389yxjq*LO29V00K40`$@)bInI^qzO
zCH?vB!P<|Le#nCA=!?ZbUlzh^je|r#zJZ@@+v&U?53;0Av`M_r=3)XXEJ;bj7uTH^
z#yl!Ysb9~zaxJX7e0$7LFj{MdR)<oPPZC;0>MD`!2g!Iu_Ej9Ku(ZcWuZW3MUtp`J
zv48zQuv@#DW0nUGlc?{=^79w2kelB8dE>+%pLF=t$2Yi@vQV?8d?}zNZF;O0I29+r
z*v#~h{U`rd)vpx(LnOOfKEaLAp8g~CnM;Rp>cLNH{Bc30KJPHg$e#7B@tX6Cpf${4
zGi10#X&d)K-s|O_yWc?{Gh+(t+W4qsF4s)8%N=85G1SR=!XxjBCWydrevIAV%@5A?
zd#xmlS7yu$>LNZ1BMpfW@s(=tx0AF7#q12+3}zTl!&sF1>Zhtm^jTP*;}`JgCiaJa
zBADT>-OALi;CDsDRE^xcJ~i>K*1KldLmgu+P*4!#Iovio{AT8Szt2AT4&-UPnyJ^J
zgpaug&5R%4jmm$d_M+l`fl@g>GDW6sktw(wBygv=jhPy)MOE2O@$EX%wHl@NqW(c7
zQ`vmFsZVgZLSJZJn?X%7aWS``qvxK$UYSKx4=}@FrqR6x`4}HQ(b-T3Z#mcByg3U_
zfDM&19|Ge;oH5PUiI)Ur>0m)txp#%|!Aq`Du-&(9>m$>kaXTOB7)g09m}OzDMGCVU
zxb4GsHm&qkH5rHh9F1tHoE9i7I0ebGD%=oo-EGULhrNu!xDDLo$NOI`;9)KGJ`{YS
zZfbegJw?8JBJbexRm@C&W}AvkNBT_x-le6bwnO+?|5{f}VHmy<jDE)^Kpj&|+j!?N
zRo}v2S;Dc{5FPC?q_TSMp(^Lx!(%@h`KsUP>uHxaT^#bXg5;L!p}<DD)u<9WRkNvT
z(r(^61N03wGX%jlc&<(jHZjJ~l+8j>?Yqf=hu(opbv-=_z4Lex9<nWtM-r(_uBzDT
zn1berK>azKmNZIeI<oJkG=6p<E5^<5)?l5ce@SysTP}XbNMb#Bv7`y%48~JjC9m)B
z@KxGov{0w5+6pP-WFAiK&`e)oxKs{LQ9tQXL+A%zyN)$U)h}x!W4`8^H(qX}ehN{k
zN6a1%hT#1xT6!tII$7SMF+wA=YLF~SpatrI7|E%ry#0yZ<j45M%9uzxMd88uQ3o$f
z^@8V4lQ~?ZS=l>u%<JJdc=c4CV~-kKWfNPKv|_8XF^cLH7XRig8%QbRU;6H?a*&oX
zF(lYmK1-fu9~^I-`M$WCO0Bz#m>9L=fy~ry(ziwP)nixvkCYDz`BP6U$v9Qa5Mkwr
ziQ$sH+fAb#)D8dX+=*iJ!1CrwGmd#4bms!DYI^>wJk3_=ro$Erl-#<B(gWAvms|#^
z$70|hT;6QZaBWhtIhqHW?f$*;Ic&<h*R`exSG}xk$=9gnVnABhlu{|IhBzTJ%RfHp
zD!W?CD_7k!*2QYKd7dArt>V6K;E{cJiJxCvwKDL#VBq?0<-_6^{N8D%Z^~qUG(1PR
zPd<T`u3{G~SNaPd9B@rVdEY3jHi{4tq59t{_GNoLR0d2|9R`_tZAeM=LYxdp?Rk``
z`6GpGBQ4tQ)cnmPN|PFN+Vwf-tgF>#)w-&qzaL+w^+aEf8M46I@U|<*bRE=t46VBe
z3Jd%W53~;0@O4$RYcpKspARV;vCw~{)W1E+v9-WF-+U#p@tYD!zP=M{1uYzTGNj$x
zgd+Q;=;1#u_e}2EMrG{iey7+Q&JqwP7-QCSxuNAQ_Qmz;5hNjq+FnjzJ3pA`>kopK
zZHSJK`BDliW3Qt}4gi9+VWCx3ZFJT$tAFRz5VGR#B**j8v!Ma*r@n?WPamWSxve1f
z>)&r)kf6uPA0-^=R+icdh?ob*SkJXo{7{t~9Vy=0!ajacE;2Bk6>hx#$wF##f~hy7
zKE#pl3cjPx9}2m<&Xo!eUhpDVl>YIO@vy$@&lQ^P0+CCuim8s0h8La}ItTaLB?ebc
znr(d}&Fpzf1moRCfPoz=*&+o8iJ-Wz_zz{<Kc07#PX$ilG5kB945cQ=9n#diqub<~
zX&QK-M8hbQtO5UcU%AD@jhTAG$ObdXfFbO)p2^!SH$4~)d-;{XcvZEqe-%`GO1mg2
zkLTq;fZU@@%c7G5CN2s-WF^0W09x9JgjfSFgD;5CdA;oPu$R-rL6rx3A`kpS@7`mV
zzp9W05ko9UW@`{H^OaF5Jod=aMb+o=3hs4Z7<f}hIv*gpKQ#pg?b^Erz}|~AtUTq$
zX(GYuQ!Cy^td&mfnDS@-w@yS&*h6fF`fB`1m>2#MTm%-I=^RB|5S5Myqvq%6AV>3X
zT8)Hpe=6ZaqBpk*Uakg%7ds>uuo#KCLZm-}6W7^fs&=>Pd!54uo)H6m0Sf<w8kTHs
zyv+!yr-zlpw%48UU+$|$46`^)PbC}Hfzd=?O-*ThL+s2!<eNg=s(&(K#fz~GiGGXN
zP##uU=$dbSWN%o+RbwFLUA|_r2(lFqd`GR7QXx0mWW)nzo39J1MSb`IG1(A#(*if$
z2w5*Y+(f-5GC(TmnZ<|m1gqn(1j8XqJ!V&?M=CTr7fRJx?6-%Mx;3qOPy$_pbQJe%
zxRv12;N4ASLZCi}u8mrsH``8bWlMb~*YYx*Q{S~V*3(Mk{By9C&uJLxGM2UB046iJ
zSGnk)T-PB;>^ZT%d)eg<5<QZGPZ_Zr{-z@(IL8(xg4ZIUe0nZl;SqV8HG8WI&b1OO
z5n~G=l^QNbQ)Rr%H>R$vtulv1D!Z-(xu)CZW&cbSP6W&doZ)+ZJmZckV&wk1iXH$e
zUm0uK8JHX`eSH-d^_<!RUb3+g3?<(#Kl#*a8i!PErnM5vwb0<@?zh{>4~bd7aWCsj
zQ+YSU#=73Dx88@JRl?OOVsnS3Yhr|?tTKR}x{~crNg9+c{^}!b3&qJMERs&9!oA7L
zn9K4W6Qcd4@ZEr+w+9DaHDUC|vNrJ*6KGT41-a=gN=6>q&kqnR&Ico0%6HmF$OV!R
z%}+cRFbj0ZhA|7tWm2tFbJ1!@*4?ZYtC?J1xoO<<7L0=wnmcu5qqqQs@Ad+Tydg+H
zxr$qxF?KFvL*{ty#|zgKrPvDGM}Y;;On}_oo_%V%WN29Nh1^*AJ`hA0p?RK-Hh?`D
zY?Q`dR*ji8z{$((Q057R-GybnGlFxagd>|*%+T|McP4EG7|BVC&j})i4Trio5;wRL
zH{6}mM{3l10tErP{R8D(Vmc_b{@|((!?drZ(d@Fr6{+)#yz&0GazO0vlKGRsa4Duv
z*q!OIF|M7gGHd6O`><=ddo2|A`amz%h>4_h8Y>vh1&7`-O!S@VIhqoDZ8`W%FPrlM
zgFLi|>!Yut5c=)|=i6;7Scxleg^IchMM-aZdRm;yzwtCxYpTI=u~W|Pj0p52${tx+
z!4G<sn+p)bPFp`jvJ#r)d|th0aI?aU=&VyDCYn|*m<`u-%66sS088Z2x<U;kv;uy*
zp8;%>A%-{IXNM9z!${=C`poTMim$@oF|2>D2xpU*&OiB_s#K<eajvPF+W8PR{R9e0
z^yFu8?lTv=ZH6HC*;VqyR*B^VvY%c##=oB0xB8*{nS4yH!3p}|uSwI*Z_0jd9ad4~
zwA<Kzt1lO`S{uDn6OReF?`ZaHr|Ib0=M)GSziC#9N4i@_7;1pihAFSOIx-bX78M^)
z-+w*3erj}#43iq2t*!M5ertrhA;D35s!YOmVJ$P%65cj9J|5qqkVOy+<l~v_)7@ZF
zCe<(n>_&ZYtMZUuW!qZBS>@a<keuc^o#3^}m1=e<IQOZfAvkRWC1w_o%`tB7r)ScL
zSP}_axWa0W_Ybpf9-u5N?Ji3NrUS771uuL;eN9kkUEzJixdzl?A)0mF(j*01ubppe
zg$ulu^R7_gF@8;McW&vimEi>xQ=?k&wXnLzG6^Ra4bg^MIl`|b<Q8y!+~p&^QB=Pl
zbz87TOF()j?n<mmqTCZ&MlPCqd|f?HKgI6HGR5=6&kyABn)rkC$eVW~_`bSHZ<CM&
z997l`8T#0?avhG_xM%Z*tFX4YM@eFtq|n6^*9Bh?lJ=<QM=0n%oaxHjxV}kBKY34j
z=3I~DD2@3~Z)(|5c7Mpk@PS4)@PXPhD5V~9a0%Dm#tkmy^A2VD*MvY-H6KQ%^>=;N
z(foOe%9NGinNP}{X5Q)+?<EubRWqhO1iq5!!UtNRdTUgAI5~YOJf1_c&Q3<W#TCjs
zSOWrvt2V^opqR^57GfPI94JnfKm3DK&abyX8jF+?a^Jn-u{q>=0G2)1?Du+t=e~{F
zD6z;U=Bg$+o6x@_<2tbs4uuxsp24hitZGc|H4VxZrvRE1eE2-z+%g81T}ULV5oFhR
zXo*&i2g(rr1WSUF12k><#_GEA$QaFiT3F(ZtF0x^VfyojHBD9HrrtfRw(f1XwOo%c
zmvUqwg7#jsGW_sU<TdVtF}e-ihzL}8@yekd9wF!PwUl?j;fG42J|UyyS}}Og8|?P!
zc8W#G)xqn&9_jKGZ6!#OQf+CdPs^s37g5Np$RmeE3E}WVHn<FJolI;tD;oa7?mMx}
zOV^ADeWEOlXuC1)6c*f^clADm)yc^sVex*XMsK8MF>jsbcbA2wZFX*FZkT$2NzRG<
zF`f<NXec>fR&_J#a1YF@4BXGCUb{4HcxL!zG}{Qgr#0w8TLU#3oYhiXraoz*rONcI
zzcsh-&xTW9g=|1~6U7ki^YU^IkVU1#To+@jST;c8tYw7{S(&NxJprm^X@!#0=Z$AZ
zPw&!oo%Uu_h#yektil>}$UeQBdRJ+%F)Cy3{Vmn=_<|JO+P6t_Sl;p^KFD%n494Sx
z_iOVnM+DAyr_1?xOuc%Y=g`lKJ})eMqjS<XVy-*o=H-xPlNC`2D7l$jH~Em_TjkS#
znzUZ{`I?LfyBByBJQv9a(Hrjc*DJSdn4_>`+E-L}3a+naIJ{rt64DGmf>B{=QNIA_
z{NyHdN|J>Xm87QZoZO#l#bsQFm@ik>)lLI&PoWgcvjhaWU7RG=u-fR_4a4bLT4n}L
zeY~l91|e>Fmb`|Ib1_+oYi>X!4hxj0^wtI28tjcX@989qr<E<lq`H+^=7j=7iPVjX
z{NzRN3ZmA3jQ8`5lxzB1pq#5sFrSIgh7^yB4Fy(3D;Q{_Y1Bn8bhm=eETivydt9DT
zvFSl%sL@3eaj62r1yOZ=C2`jgw-es0#w%rDJz-VFPUPvPHkHC#T~o~%^u;gE+tnP)
zcXnz06bG6gF@NjKI_Z*1=%EkTdR;ew7&*7%wn+-+UGhjpYW!)uU9-VtlGnDLbPUw2
zB4z#NV$Yi?5{5?{y52oM&cW--2etBdlOa>ukCE30-MoIbX<{ndS$b9G)pDc{sLCYu
zU>*!5$4n=cT1eF<dt5yF`R*YQ1?cUcJgP@kR`cTg+EA1e+m$A35!Mw28>rOtAiLmh
zb>v7PCIbR>8pLm29wRUNS8Y`H3gs!92D(gY_uFO9DXCI-D5P_1!%+NWLOLg*z+&Ro
z8kq~y5muIg{(1me`XG=*Na5K?2eswapF|C-A{#~p)%Vt_my|vGlvaiaPi`$wylWfe
z2sq#!cSDJ^BqC610p$b6u$fv=FV9R7f`7gaFtoO9K^dCw;G3i_H?ZLF$glj)u&&Ri
z$LfM3CS9WQ#4={F)sB4lZu0XM!}UzR`GJx1c3+4%=9cIV!z?uk;Ul8+=%jdVV-ZCz
zw+(nRnZucK+bp2e!_axA+#z?h|DD0MMX5C*L`I^jox+OmFi@Bl+#$h%c|_$2r507~
z3Ny>`pkXoeP*IMLhoMnVj5@id3l<Q%>oGoPw2-~F5>Rt91>9Y#*OZxJCCocgTG3Nk
zdLVjlow(KaF{U%T8w`}xzBHQ3Q~>&81U1id$Z#>{11<{C^}Q!r@p{m*6plW$yy+=<
zdUS2U53l@vb3*S5*S8fZql!mI1SWeaN`2Wjy(Yd5F8x14{nnz$?p?w2NnZX>2fUUL
zc2y4sMSwwU%+7<k#YX~55jT%rvjA{KCe+?)#85No0GZgE2ZS3#8n)AO`5h`CcM(A`
zavtODA)>;6NMc0~U`R_=Uw}lopepP~U$3RD2Y8C?@b0Z2YW{wPKr`h_j@?OIIaxM6
z1Tm$XI=a;4hvHi^Tv*4zI~jUX-Dl@@XPiTdyxNt#t=-+tW8>?mE_xRl`sU0|5GPR2
zK@oTAhO!FPzIz3DY=HU+F<u3P_!R5ZrPUS^X~KoyM8YmR^ZbL#2UXOt`IVV_9Fv^h
zXQn_?Okydig!0FmZx2$N$QfY+o2x>Yby1UElf`g4S^su&uYW6pjsr)FTwwOgz(wwo
zq3w(Z;MMPIILJ+hCbE@`f|mJ?)8<R)Jj`2Vera3nvQctN?KRHc9OvjV_Xp9(y$@LP
z1DRV&YNIz8*B2b4Sg@Iz_@Ij;E*I*jee!l4)l$;BJj`n^Ce43ZwOh+BMhz%U)JX`$
zz7E@dSnB^-neg0M##*vBZ7>Ltn3RD)nQmrmSANz@0TYIyBGC!s@+FNpnX->MgQk34
zq+5@Ry&J7MlbZAZJVi^N<%y})5Qkm3#fGs`n3XUAc9{c~!e$j1a5`m7tYT&awp)O6
z^n;ew``%Pc^VIE3krMJx7Pl=mZ0GeTmu_=IX_q*X&_GY2<&OCn^=R!`EIX*Ja?^t{
zjbyU#Zru1%5Z~Oe<c9YquXQ=E1pJ`&2sX-S753KO^(3|2qdSWsJ?x0D*DchO?S$sQ
z&#3cJExymrI(!&CW`w%M8e>2tS(R|43C2#E7FL}=Z8%y~eMRAqz0Xu%ka<I0Nt6O#
ze1(^7oVG#X%3Lo4g;&uCRAo8Kg8V7fqCnR%<+YEmH3#x-gSi!8ZzRVTceCo{WKkz!
zQP7=2`4w1HK9+ft24e(oZj&Q{aK-heR{y3=?X2+bvc^ZXCCS?o<(QefZv%1~tSJel
zpqAU^lAxh<jNJM?igi#+K$&m(GV)PQH@Oa@;FJ~N#{vn^ahF<!@RfUSGhowqZ+p90
zE0;mHA1+T|2(P?(n)dozH0}S2)ahs0Ft}ErVD|#~DS-|vma^Ygzx7-_urcEk$l$#q
zAk~=F(<Ar&d{*N|<zisDgkRF6ZO?;gFeT1ORWEz8!Qopow~-)R4JV%b?I5;U8-KQ3
z+V{xz4ygk=Q8pPyT|sRv85^yxc<~dT7}XcD^v!sw_Vmr@EZ0abMo+wm44``x)D&26
zB4su{Cr?#yi?{CyQX|?JocaW(*$mYaJG#BWGv-?m$xqpYjI5asqyY%*t4lyUv|5|%
zaEn^2l?=21DX7dg6fJADFAPHS0f7A;&-t3Vz^O%t!dt=^)fU^qI*d#^5VO<0nt<=?
zu};QXXO8epUZPA~dIM+ow+apDEIPs)+>%{;ZA=z(0-ommkmF+gG?&s>EU$ZPKy{H$
zU8%*M)wQqi$Eq~v=;8NEQtiY+C}<)dM>R2^<Y1k<SVb{AH_=lcG7-22*_0r1_brQ!
zX%I0huJ<jJ|MD9|jq{k?PgYsu?Gk9;(`ISAIu&_`bf9bu6}3_}TRBM!|Myq{<0svC
zRTjTDUs6r6jDK(c9Mef+f+vm-mvkmRkI^f&n}NGjsR0$1mC07+`l1a}L(J}DYiakX
zbH>HsqC%6ApHB4=1z=pnB%Xcq%E-)vlEBd7ikqq*vrNuQ=Nz6nb%L8_2R?bkKNP-m
zQ+wp9jam)TIbusQLwTcT<2ADv{wb98-k8-H4y98=h@v5B+e6Tzli7LvIf7W3`)e7@
zI<)yrZ_SF&A_G;#>n9(?^a4qJ`O}a}bD*-y@i9MMOYDLaI?if6f41^KOnO45*ks91
zuGA6c^(Xf}3>rJ+F}M6+M*6{4tu+@ZJL}p$XAus;+hbha4865gt|T>A80*-K8LCb`
z_?9sv6bceb7(+B)#A7^U-;+@egAoLCk;Xy&Q*NC@3j^QYoAMvHm1Sl~g+Lm+-ukp)
z7tgNsWU!QJtxUi*y0Yf6^kf#iy$RFe(_YhVLOokg7Sjgi2v)u9uGF2z_>HxvKv0;A
zefhzk_C}aSQ?#mm2{WVmr3d=Ce<Y&_6E-0q?`!TG8sXs98p|_D-A@l8nOBkX2));j
zaboTXAOvGjPS)iq`VmxhG^^ZKvl`E<#vRty!2Bz0OULb$*9r+f3;l-f(h4e)L1eh;
z*E<pZ1bJ=KmU>WN!cv{vc57a|nb_+#Lzt<Ww8ANuf+D}MYKMgH!d;U^W@a2NEixVR
zW9KL)!Y<~mHHYl1JX2L{Uk;U6eYAS+*6X@AoFR%pZo4#m`*P1{@N|r6u}_TZ3l!HK
z4Ua>7luy_DW3#gTUCb7H;$`QHD+h{QJ;>wD9w^FpJAY;hl52@sF0tgmkb=RhYf`73
zQ$AZx76%zJaI4;XwLz^e+VItHaSv-ClfLoG`q&6KPb?k?G$PF~7kW{(jCD}oqsS|f
zf-7-*o7X2UJ6HOJ)PrH`{7z~DGfk0TgemJnUrQ4CNNuI$36-7oE2MY%nF)ux@N_^<
zh*L<QdWv6JdPi(1atgh^(to@2y!WaD)m0A|ZZL>(LSEQ<#*D7NeC7e6XN0<zEgb8c
zfti^HX7j;%7gs?Z<JNT#v)d{(tlxm8ac?(eH=2xkFL8;3?gtyXKH4tiMJOo9-i^N{
zZ2op;qDOLQgPs^z;R-b62!>q3xdd<SjQ1AKUrdwnj$V>EV~Tu~J!1K()Y<)6|Mnlq
zKKvBTA96MZ8u$ewH(ezNpE?Hhuk4w*#$t35FDVR>@Pkvc3f<Y(doJx%MQ`s%6l9W&
z<_+&z4Nc>iexW<9(=#3=)-PRW8X`_en*ZGG-rlo*GZ@(_A+U6Bk<F`fO^B!(Qk3PO
z{dNXoL%qh6`U6u@<Kr4cz2;$rzqLH8k4CO-$Iq{kqovAtReb_$4m^n$*61U~0Wq(i
z<QtbWC%EqeAwt&m%#Q*64}ZL}9$4<bx;C|<idn3+lz(d?vvFriMRIMzA<&hqyf*$_
z!C?ZYeBDDBvyxu&BGoe(Qhd9-Mm24RP}hq}biU-+nOv4*F{8D)9?T#7DNnN3LKyn-
z#A|x2FCTV69ZR<*KGy7;aniESmM45+x**I1H*YoLki8-Z^kGagz<xRFcKh74oKJsE
zKN34ym62K`4pJ!Z3SLmOIzns19_zx;vI{FxB&6D1TT?FOedeRN-n3eGTtN?yHJIo3
zzLe<C1ps`hM3J4-w&+IxgN>4QDN>_^0OXDJ{NkIV6%QhJww9{UUfL0L65W*#cw;;h
ztb~E-Zh)RWNK`Vc7<utnl`!bL@6i=swb{)tmJP;EUXMCTzSv}Ch-sJ&8>q*TE1bPT
z1FU+)5R%E??0T49&<HUK?QjuO*8^?#DBO@VG<xq$aLz((G`mDGYcoxdS-S9Eastxs
zA5N4!pbu;qubBE860@yRH00cs&|G@MtH$<NnO^@bUJ|d<qS3meJjANP*L732Cfgyp
zL+VFJ1@RaNapyaRx1h%P)YorpZXEJ{Hod&<5XjEi2J(_kBMJ!hdt_sT(bFL#d1uZ*
z@Kq`Ed_WlU<>e@r?tppu2Q5(FcYZny*j~eLdwXV%s#37LP`{qmX4MEx#Jmiv4Cm#5
zG??(CG6l8qDCzM*dZNN8kV}FO-%uJF;(~VSdS7Y@&jqXXncraJvpIPOZx9~CPf&x8
z;3ch;Rh=Ac!e5>i`DpM_pk>i7VO$NqaYV`RLTCU40Q3kY=C7NbyIwW*HePl+G7I;%
zmWdJ$a&{k8aosfJ4Co4?`k;J+^6S@SqnezMwbd-xeKq49Ky$G}1IpOXO6QDEpG@SU
z>6zF+LdkotvcCBsubk3_)=MIY10RAeJkBOM3C*72u)lcknnmd3nG%U&Tvysh?=v0E
z1F^Y`M1+K2Z7<6cKfN$gsxktqrand(Sl8HHQim2)h?bB(Ux8d&;QKlLA_ypfjz@k3
zp`G}_!YPpKLF5J1{tB>-FT2nBk1TB3C5Kx+Rrw+)SW3O5UKo?lep;#y%ad)I2WdV~
zU?Wb)1<~-39y%<}nm;blwsX<MD~B6Gq?gr~`h>^nf;%_Z;Eb~BgZXX;kVo@RQp{3$
zAxMvFtPbejY*n$H4QIN_d+tX?mq=UFI}|nd50};kG6Sky(ww>RZ*!lUmT}!;%i#1-
zw{DW{zd|_BUuDqa<s5lUo#JC&E*q+Y3=rZ`LRJC;ci40o2LZL-Ay!OaB2Z4QthqV`
z5HW@cmfgOe%j4=(B!4Ozc;VhoUs?#f(W~c;Z5Dq;ga%S=MmT;DLXo?-_ZCUiJKjC_
z>pM>_dSw!y66>$yN7kFp^%3t+L142OZtvF(uNp$TN4o#;8>1loYfWIm-(Qe+tfj17
z^?XBz3`X&u)D1vOJNryx5WO>>u$gU;Ju8Ki6*m;|=v{-1<ZwLBp3rhIUN!J?%nfcM
z7;l0y?x%1677h|3FHx0~n5)IYboX?y`tn#)FD!>~Z3>YS=FuHxx^0!8!$crKHN;qL
z&&to#LJ^k9s!dI`t@)gJ3Ky2An`Ub4Ek04!Q}YX<r)d%c#K4v|>yNDSOd_|im~pj}
z6a3pn67BkIT5!JL+W8)HZ=;mSN>kk?dhfCe1-&~)Ft9m4@Wn?OHguoeSNU}Pd!`x#
z5?*C%ziD7XPD2FY)ArT$n=m=1SB7c5zU27>P~peL;OY^(Jyn-%udNAG6x8KhXiFnY
znE<g?KRn>@lWi)?CM||$yVJqc1CvsvD%vbgZwPO?mbY}`6a(H&%!zt`L&yyh>x<!R
zH6cdo9H>-Sifg$fk0;WyVuPEj#iYOTi6;|wBlw1mn$o6x!G7Y$tw*i9@TO1X)P=q9
zaE$+%GIzz1A4gV|BL)Q&Lz4*Q$t%H(La>+KbGohR`_0?``XMNPXvkw|VDd!ZT@1oH
z`^`I8_5Fn=*HjVip+p_SXnnct1I_^MtGlz(WToS79vVcp{}fBrx%E+-{;WjoT^qFl
z2issS;jd!Sa9cflcc8WcaDA?E{ABBjs5^nZ2K)!8woqbFQX3E(d%VCQ4o*$38wB5^
zm~W9Df`ax6KD!;>Q$FKcb_U??VL|Df#%Yd3+US^Psegn97%nD0yk0~6kc%4#gKOES
zJ*-Yl*CbpCavVQmQ8OpeuM80}JZ1MmLf*(_Rh)_Ts{Qu?KL%1;$Js~pZV}HH9j~9x
zbVAEXqk?z13g^jZLj-a%orD=_$@yGYTP+Yt@lkq~PYiTOC4ddPGDG(V?JsxEY1pW_
z_%Sg2$F!HPxhw#LXvjk33g$BYgSIai!=bL5gqHq?b2oGU)e9j0SSsq_&P{=Hu;Axa
z$GLb#%D{4QXATBJnm<%H{>KXcb^h1r6l&6sucaI1%Djj*>v_pfM~_v#@-P%|(*!+_
z0WW}D4>FCS{g0MG3Q%GqGq4H)4h~Hg;+?u)Q8wV0N9BPp<vE&di606L$Pqur{l@>a
zJH@AI(rb`4UPur7tTZ9%udn~tgMjUWZ5F>9$ZkY+pWzDIE{$C<^7&$1WQZ>8&e1Nn
zOhK0^%%tX`9cf`K;A`~fDxA?GYd}=AeQF*}e~EYSKgW7#@SHg0Z<Ec59sHURZa}+t
zBi%=>LApBOP(@3dBQaunznWt5Q>p@h8mcz%0u;lq&@MnG!~ziL+NI?8|Jv?<t`}h7
zY=#efsWCAzc~8mfyNq@dv|xWe{h=<A0`Ju};N-V<9v%P1PJjJ0+O8~9HQpU0)&SJI
z6VX6>nw$i1^Ns#eq2wRa>WOUsNmTzuUcdgAU_dCqmv(k`&bDggsn!#;+uA-MC@nCx
zlhqpJLlDs2AI0+LJ^uHN{pxqI&9tR~9;ZHel2ASud3^E&P~RCh2+vtnHV)U5j01qf
z7wA$lVzy1_i+-9a*whsU`M4|bW9vD+V&F<9svo1|WA&$6de3q+m3>+~-uq~3O#Ws3
zpKSRrUitNA{{7cO5wvBjuC9J#?vk=<xPiGp`h6sSGVAkv=#C2-NQt*^eN!Z47k-6X
zy%ZsjMA%X}*N18py?*xD!t)AjvpS86Ek#kY-1`*$74oRH8J^*EO4CM-XOqt1-wgY|
zEMot2?~c;WxAwlRv+Xon7nfwL+1h+hQv28RlEZon6Ol#cHq>N1B3ZB6{#H%)gx;jM
z!ilDf{hs@*e(1auaIXP*k%|nV<jCUQM&Pdh`P~{_69nW_3i{-9Yfu>IWP$Ee*$|1K
zT44f^iNP=`(M4JqxN(@P9p@n%PU|&s=!qckGWwcBJwTr8<I&Q?|NKpWR1v59#@5yL
z`SbBqc67GgYZ?{t9Hmi_a@_wn6#>^rk4>0i)u-J;z9Eot+mD=K?z%~$zW$R!{_h;}
z-`S~yCIf-lJRf*d5$2n>L`~MP*TEoZxV7u({~(1K+vl7=36F{jyW_$l*z_8dU+8U~
z9y@Me+NAsR`o~lI6n`{T1H{|~nXqsE<j{3$^hQy9aZk3IL=)$Rp-@2qZ4}u5&L;o<
z$QCCcfz%`=C7VM7W-^3i1AO4mpFfXFJlwSd?oE_AxEpnkRuc0_Lzd22NE)u0*QQlv
zZ{X-^Joe+sY?XJ%*Sn@pFKF=CKY#0^A{uWr*3np0vUk{etE50|q&=M#JU3p#q8E3K
z%pp->UHd{<T1u2N)uX?nZmuI(D|h3>M&-(N4w-!dY%QW4fj_sR;q=aTrsutxV>rLU
zy3oB$717~Hu0&i!y{?;9QS)ys3fRHJL$qL5RC9#9^vo+$tzx6sFWYV?Lh|pj5Q7_Q
z;yy5}DRLR8({|d*a5z7yb+-+&l=LO0MbN^_I(t!*$dhb%Wi3KHd(xtl6SYl8lCIt-
z>wkPOo)2hp+P}e)9xJsX>9|Zg^>x~dnhzVMHG#fRJf7OOryIyx!-{DakNl~o>$kb?
ztQh?LNv2|mKBMm&G1ZB?8!{)u{)t@pFHY9B0u*7yhJja%s=QnDX%!!HCtEcg;Ttqf
zb%r^=ptYH<xp~QsTRFJkv?5I9d`zUOanEUs`N~_h1-_IjuBHp60>8tne}tYm1`wS!
z3wJ`S=Rnfg0$*|ag--b@$B&%Ow@Y&G7T^9N^QD?Jly*thW@s>8Ml<u}p2BGl_Q=R%
zqJ9R)dbztwmQoz!Obu3Q!zV(?XBmikh59My(>KeH*SA{<dFaSx9@xM64wn4d)@Jur
z^}Wm_6W*3&E2faROVD27n4=8F_Rk^{TqEa_c}}{=KO8jtEgkbn19VJ#Bs2i7ECY?c
zFPjT7bFJY^B`LU-U7RoQOFB%wafvp5OGA)3wB}T*;XQBer@zG@f6yJ{)UFLBA5yOT
zbI6wTAwUxyycl`?H>59(2I^^y1{4k)rycaX^*Po3V>z@dreTv^Pxm`K3#|W%F(A&#
zqod|@#BY<K;=I5PwYvezF(yvuE&ci6e@g1tQM85CNDEL12XvnS&$g5UgezB6_Q~Jl
zm{>``iYbbm>e{E(eo;VwD3MqSeoIqp2$t>h{Vf@0W)UlAhL_9xoT04<tVk3nANf6A
z(h#it>&)q~9MzX-1Clf}0DF|E_Fw$=kNy?vdH7GAai}Z8o2lwPjhy5GgT$~qFsADF
zPU$FxrW;E%^sjx;F<UpjeT`;NhiU^4i>bMS|IJxy!TW|ZFRz}BS}?L;6hvE>Cva4u
zU>Tv`Bq(~Rqbse===rnK0=w?EY_ul@1B7lUu#;BydzAk59&J^KiIX%s_pQ7fyRmO&
zUq=8~$B!w6#3R2ao@xYvg{eq%6+QK5o}g*UCpv;ahKuycoX`Jhz5fHA*0^}|-P#LF
zTQLWH{UZ`x5e6v?w7V;|q&@G$)5G~*qAzGo9seog&_4J2P#*x;xOCA<Xar-=(m3!*
z+|%EA0`R&=0yL{|c6Qdub~;8ijAq08&}_Xa6vH3?h(7;)qJpI~>T0r-q$Ao+g^AMy
zpY~_kqE>tIe*D(P4&~GR<q9x&6+I>$(4rB6<O|>qBR}-${+8)^R9k_zDlz+gnr}Sj
zpt=8bI!?eMls?JvySI2~-?(gR<49$<MM<;J&i%hho`1eg&whG9$B(cAu2^JUpoI+Z
zsH0QBY2^j(-QJh=|326MRn!|b(IgEpgSIuu1)gv_gvLLXz@t72p}l_ZumA}~a}XmV
zg`|7Ith5!h)&oGojO3ADxu5?J@(4|&DRwnAwd~fQ&ZUdVj{y?RR|TYlvqw&q);~Wb
z8qZx%`1khYmOVRZkGh@!(1O!AZz97#KP8%|s}TYCImpuTbSSxoRA(DW`(5HO05_41
z7XQ6R9iR`QneqtNC>`x93u{PN_&zD+LxDXm1Q4oeHXDsC|KX1(5SmI&O+5vu)S0MK
z+GHs0EE@0NLh^?G@l*ESmd{D!9bimqD0yhj@l_`9ZH;^y(gMod`1Lfu|JyoaTWCrZ
zLFvZO_I5`IkP2`8n4bOzrt`m&CP0bZ`x4paPo;V*nsr|%zq0|(iA%qo?st_cGw?l~
zuhNU(nNKT+ScXu^W*xC-!cIuu71TQHwKAzV)<k$zTUvs+c($^#QnbpF6Cjt@H1~Zf
zTJbk|K`;P#R|l`mXRV{B<lP^OgR1n?FSnS5vn^%Z6M6%O>y5#`zEY8ar4E&uNPJF4
zKL$2SvtC{|$Z-Aho8P}PdSMz}>g&J!bpCv%4})oDYtc54)nyOV5XNV{-U52e0U_>r
z0MAW2bMA{y58A7J^iG(Nn%Z<aPy>jH%e%Q3|CoVA8-UystgNLu=)qrXlCzSFDBVjF
zAkyWeL1<6=2Q$acsF9Pz(MjW?TWIKnI#&wXVHrHtHVp)*cDmH|KJx?(Mk$!@SV4eP
z9g{Tafb>bv<=QGIs@`<<Dv+RfRvfth4_`}v3)2CV$^O>v-@pHmj_9gpDW$rtmb|nA
z^X)m(KrX}sd3PQiZz>Hf22rxafJ#lE=jCRy0a!hbZ5gBo6zT~#HQNXus(blfTv=Yf
z2|5#^7`*KPq<Ga^CZD_6sui+H-s@OT^PcDA@PSDCH?{>e`4N&rVpvmDci7B7>YYGY
zV3F(1f$843o{pM@YKQQ&y-a+je9-pLbECR-E7QF=^%&h+rKq{C8F-}kyTAkM0JmJH
zaZ6%G(r<Fh3QeH1gIS0@(y(G>JzahM(%viupW6Z@^IPgM{7KA)hL<FwpefU;jn9P1
zwUGe&8!Nj#`RJ}ng=rYmT$`qPNBfzB`FFw^4|ve>C^}jwGkSa0G1_=e_IEgNh39kq
zOxbRi05v-xzYqeop%#6NDA<d=Q$-<4edb483S^pX+TcGgP(C4Oz%!g;8@An$V#p2%
zOKSj0oa?qY_j^RSpd)BNkF9rq2$4<u!}o$!KESX>UvAfl@nD&Sr1yxuDD7Gp3H%wp
zJfAXG$Xi~!t>7VJc;I1v{in~Lbz&s>=Ihm|u_-vI6HuELgSMOY6PtWqv%Vvp&t4y#
z55=%s5MfMMNcLX(OZc{;=-rA(&6F>XonGZ0Ig}3uxM;y|r25<MNxtjXX)x2&vwg%b
zaheCpLJWP<FaHereTr0euf}y){3|E6_UU?5MqPW$L8ke)XP?fktT~+b$W}SvcB{gn
zh6{%6nyFeQ@>R_zxW!+B`iXjvWO;QDYZ-`b%WR&<Kms#pb@CtukBc-qlNWG{RgXCx
zM-7IV4|Zjf-exNM-&!eww59KL&x_5+jupC?T<o;+cS7&tQpnRx0_hcGE>l6|P*y#7
zVxh7M4#`yV1(_l&L;^_yu}?Te&cj2Sjq-GbIub<c1J@*gIhK$Rq;Yo0CWEVa{|ANw
z+c4M{M8(~5^Y^M*i0lHiX=mS^+4F&Q_p4SY4l9)W9h;$d&t*fpq(wvU-D^X0IC~(j
z8bFT)s}5<snDNP5mo+@PwL^gC`+QEvTx>o_gb*g@*#=QNm}|7ONkpzRU>~2Qfp2u}
zrF6egt*yte#ChsQ^QoVKQWeEy;=iXze8^pr73w}JATm~EeKEzc<3zG=#cld{j<3}T
znMY@TC317EXxG$jcT>xTdWnP4W1=#nR=qBGH}q3m8<;``rK$(4<@>Dk8~Uh0Q$&r0
z7p5DKKz>e_;wTh;A(TuS2|6DZ9-Rz8?SbOPV9lJ34<}-58j%JTK<n0`wwPo|)orxm
zh+;>aYEvl$Ihnp!Cz~|CG*&GeuzPCo?e<;8^+8*b7Xe6d4Ohn)!q`s>11$5Ezg)E}
zLm`feYzjQG<2iLhtcD7RR@jl4$f%?Pj^kK%xw`NPTfdm+U6G4GN-hxGS><0^g$=!9
zu5#*-<rtL`8x&Sw;4e~OvIja1R5_qsSgS|A-M0<tZJ~H|n`o7-Vue{zp#jKHT8**S
z*)vzOPs!^qV#*!6Kf(dqkEU$m6rfRmCwUDR$5tEtT+C@z_r)ng9Y$i!_z`Z&xGM-o
zm)zmGQnb)`dr#UWD3GwJAAjklsdw->Nl>I-!$9gEIazXbnq#K{Gwy#VYC*nz98%V|
zp;%HH5xU49%mhBOmRo2-X54VmqwbRDX1jCRGtkqVQ*WTzJQ??07v3{s)hSEf0q+6@
z6x}Yi=*{>>+${;J-`$=#7Jx&NwEXYN40i4=Ef@>kj9$WkG5Z*78s}KGE)ev}PfQ~W
z=v8YMZI+ceFSQ0$x|YYEeafQqw5nh}!LT0PR5J1meIJT;G_WroD@^Vtq@b&y2|z&<
zkg3;Fh0Ri>STy9>GnYWZHlxyOtFK`T2;$D5QUov(51KSA5OQ8Gxx51OHb;RNAR2-;
zSQ{Rh>0CkXIJCF7l?8Z6Sy=K+foE#wvL{@Ir+I$hP&fJcE(o}dUg%yy88Wi}ScYC)
z9sAJi{T+~TN>jlGU^Fl!Aiv%@iuxYYomD*$qmh1c6iEmitKEAwvs_};&^+_t8xN44
zWmzRo3#I?h<89^K+92hbA_FCf*GGUj!+4nS@Js@B0f7=A>&d3K?j<#N<-e^m9vu>E
zg^FyfDC<W5!Up>)O7n`#C6+?T{T~^1gC>Qt!H(8e{>#JI8F`GSvSqncysK@<Um8@W
zr8&T!y2LgA!ZHPn?%OL=QP89+>^O7)dADoS7b9h_-Ua5H#axmW(B>||IE#<Nn*8;a
z;HSyPJPIBnC<+y*7Z|wBkDoz<61+2bh7jlSBG|O=@+(V2fPCS#rB4r5j<fO0m`;OM
zqc>px)}PNgn2j3zH2XO>1APhN%M&#f;RN|_Ye31r7@VIn=#peDz-QwR%$|&s@(U6|
zHl{61Wan774ZHk&wEOUf2)CmBBRQAbBiSk)DE6Ag3lR8DnabKv&4C6@Fluny#dccp
zfmbM*%?j3uHLTOYa~c%D5ky0N&mKc{I%fl$`E=H`9-t$WyD2FmU9Ym_u!y38ZVV8K
z9LN=?O?Us>&4_xQ{g$}9io4VBeGP5oW<EX5&)U7W*_Pu)c2Jxf5KmirzpDkr5Q6+Z
zeCWLPEAb^6Pjg2A>+&0W*G@HlsHMz@uof#n&Mj#uDXsqS(-jUjh^T6#Ut%<Swny=l
zbz6TPT<59FMrle(vV`30?dHul*Wp>A<m>15_-s<{fISfb9>%UecF>R%l>o26uC>Kn
zp|!284zG{3Bb~WqDT~?6iFNFUl=;Py7Z1Dgq?THDN8>c}L$Y{QR{h3gExn%Kx2V^x
zNrE-uFL}Nx1yNp4g6or2)V|9ER`jBvz1c|-O&fI|aK5glDI#Bv_!<IPJ<~1DHlwf9
z2J-J5BvmyBO3F#A+x)x`5D0X0w{j$G{NxF(Is2*%t-dqx_`E`q>G0v>3#M4+E|CVk
zQ_p`vsh**95pc5Ay{@M(RLtg@TZOdRmeezf1{MeHh}fQ!d<?lKoJ}9~-b$aUy?^TO
zR!FSmUvM{Yq9f(jCUR+nDU-6G`nw2F2hY-x6cMge6vEkc%no#Sq`b?@9|X_Za~t1&
zPRkJ#)+SdKWaX)BFW+ut(=UHnG7SOR!Lz1h7CNNHOoOqNr-Lggkx~U4npR~tJB76b
zZDHc5IecO+bBwJ^85}pV3RHc@ORDbZ)!nynm}T-%h927q58bYH?F3A0)i2J9m)*#B
zfo?jkpqM=iTEB`m!_11pViRPQ{wd`F)nGs)g?Ep40yeb0M$XE>TMLfAPIRVv#)fRO
ztQ5n!gB*G9N<WaUVN})yd0ElCeLU6Bl^|R9-$L$xlIk<bPy##U>{yj!T;^Ey4YT*x
z#Jl5A(df!qW}_=8XrA&J$>_18KLN4PCdGR0Z{!V#d85}f^3>f2dXok&_egJJSP6QC
zN4VoHpQ1bi+RBky2Y>R7*CuDj_|zod+0IUn_gu>#&Jpr<M4|aqUe!B4MHbGizE6D6
z(`+_hEIOD!I;=GxHG&leVcFIB<Ht$z)!``07dpUX)3|<+2&ee!^Dn4s)WN9*CgFew
z+W^2^UQ_ZT?Z=2$CJ=rriHV20Ca!L7x`A{NE9@d(6-<^+HZ59Bl2x-M2>Vye*n0i5
zsUC<J)S>*72OzJ>ktdVQi~*ovKI^mJFWl#TQO`cP-T04krxR2s3i>Tt1@$&YDmlE?
zM<0kLsvE|7%PP{nXZ|_H+!I;+EB4I=(>(2GHGqf+C1dy+LGORQKDeVj_=WY_bl7`(
ztU`wA1W@@2i0Q9;$-X7WYg18FyTP+TG1PeZlDb2vYjPDU1mQoRp~i2YlJCq4x919>
z&y$kOI$K**^Yx3B^-EN6;5lx}C*vy5Rj}ysR5*}8>wuj!%XjZyT>F&zy2oJk2db|%
zXc+K1QXudITn@L?$<E|e^UG34wefU4eY>BJpi3?R2nE&MZs+e;92zO6@q_ezyL$8g
zsXb!N_pL17qDD?^o4TrrbvEku;z+ru-A&fb+k?t~>`w(Udh@Ey6C(APxk~`>rZ3(t
z7QtEK=HR^s@dE`b>*jMD9EI&-EL?hNO)H7qgTfZGXSq{7MoY_<rmGDZ(<*`@nN~;_
zz!}jo?RCq_M(3qb4;Q?+SGOLDrJ}Z%Kl9@sw7iRL-3<*>*9J-(OFx%cZofSt9y`<E
zv<+0!JqGZNbI-cp{$h(h7c_n-@U8e<R@9>3TFO6kj^$UN!?WWwq{G;Og$R^p3j>~`
z>^I+(mpn=uG#eb*gzXA6$xfH;K5QXnA+0A1?OEc-O>yW08Jf!j$ehxd8jHhoXfba`
z{Uku{f+H=P+{1u5%%g_~*}40`{O|VETpyl4NQ_ZYx~(=|aVI^^m;JIsMbk+_vs73_
zOk6dtN9b^ug4^)b7V@UDvjg4cLH$0pSa%#SCNEzr&~-q;I^*1DT2|71uH&f?z<Ya{
zC2b*zj?+}L+;Ggr>;{*|h5~jUCt&y4+B(qU)PIw#dxwv1&zC*Ya01lPHE%n~zw5I<
zLVwT_M*yHra-&un(bVa_V7bFG*DIo62`@XXvXvK99~i?HPwOcJG^etlP^my$9r)7d
z1Lu+Ardl?)^u6Q^_r#gKEloCx&nQR>T^QwHgUVhR){>Rp`vMlT2Rdby`Oa8Zy|XmQ
zuL#;%b{9JeSxPUN2Xpu!{*r-KEzhxE9*<!e4=$HCynU9~Nc0ORg-ekh!d1(ZeUg@Q
z;G)2Am*h>i-g<h1>he>1>@qJ0zsrO!|1zc{upg+&4n1@j2tf#5F8M{gX5jT7uV;MT
z4UWy7I0pC>XJ3l%hf@BhL90u1z73Nkx+ZoU7pm&#%T5y7xs+Ry0qDa#jOC=bU@*)l
z?rjpGQiQmpFxuKI`Gbb0KnuHLyTR(U+je&M=C|=LbmnzW<`XsDw8GZ?xH<si%NXo9
zQpKnK;KRjhm{N-ZkKS^xpAnk0Ov2}ML?BG$Ff>|ZKmT^v6u(6))-yqKj(sNWkdVW!
z1*BG6qj$FtShPHBX}dge=_ya@9?-VP2-ku=&dVi65Dy-ndVxY(Qh~Pr_B6l&lTrH%
zz+u7QQJ)8FV)nj=E+Eu&M0Jw)(f<EID@R%Pap^B#!i%1gwZCU666=>#Jv9!`b&HKv
zIYf=V^~KruW}5)ickUiu-(3sF^a;>2oekcSVtxDq0y&f7xgmfF*fiHH9%0{;sW`UK
zo24vL%cCMlE48tH==d0@p-~zOpv$ruxYUa-P2tj>N*|toE~9xcD{2A2z4U2tGd=p=
zuOzPcforJdV@D4e02Y9gd)KcbphvT4>&Kh6r6zx|>Te(?UIZ~%2l&QyWj1N7NJ4Jh
zII@y+_OnXhW~m&&a8wo8U17tAmhMRMmlGC}fNTiu15Pl)y^RKT{*8+|SdMNROg|Gn
z`cnu{n<<As{$1bzYO{o<Hpl-^1W?oMl~<F%gEUfU59Ln%{EHylf+cV*O7Mdf<TEUQ
zu1SmL{?*QNZ|?&V_H@KM?`B1h1C|ePQ2@kmD|MUk@4PIy46wUF(@wGk3j%Q6er{L!
z{QX0Jgtq@X9C*_&rRp;95y1^wuuOI5Mf@+q8O3*imAXv2CMxm(qV)Pl>sLp9bx5K@
ze<I`JK>hZ(#eO!RwkxpK!Et_vz`q|@=#S%q>%3MwVFUU62h@~{p^!U9zgq0vUkPU-
z(mA{CHiv184F-7KFb8NDK<mZuKc0M62$1_e3&<T3nq7T2(docb7S328eN}`fJDutN
z*mhc`Qt<fr6QHIxE;Ti^;(ia%NW@|3iD=a<8c{m$4|@~k<1!-*^hMbvO06xIt73fO
z)==g-Su@ltXU#0LFIgnmh-~3UnH6D6?@n~)h>TjK@&9cRz#3U;fnXp_2Y|mrNz55E
zntGxIplIgi78m|*zdmY3(S18iai6R*2-zdPNkmp(H~)a7`q`Y<MA>Dhp0CCs7ppI%
zSS4$^1Fq-|6^!8;4vqItACmsr-jABAe4RIkWLNXz^2cpP<(6G7@bUi{Ay5!9Yf7t;
zbnWNq%#r=}pxC$s6kh_vA=&MJ{;c#`N1#d<l>CEkZ*MNe&#8#Y$Xe!P<#%pQWmDG5
z$SLS%RA<t~w4wZ~F_Cjnkslvq4*p`@8l!)Od(KG<Y$Dqa1Gf=+_aXrQB&}R|@gGT(
z|6-|pK;b?KS*~b4ZV5NI)6laUd6%oB55bq(n=D_F_-=#Kl>?9)Voju#1V{*_8)gN_
zzW@geOT3iFqHAp+kTqS<+xpFGv}QURsLN0c#s;wvza8%C4R(0_l82ON-<xb;9kQU<
zKyAF2{2JxiQuk0D`}{fJ5EYn4l2QOqCsWb;#(<ZNH8^E&E1_2+C6TTB=32F#+aG(s
z5S@pvC((Giv2s83aHn?o1S9RP1up_ojhmm{Umg8B9{_&7_ChPo0K?yUVgF-<tt;h1
zNVRyjI(k+WDEmO<Q$DJenf8|4Z2=dmEBD(4)u6U;Iq<o{39<GDZyey1r5hCtObwLm
z9W5CJcE-+g`39#%fS!wK$@yLb{v7fCd?+N=S*j-y?Tt-bjbTp^H7=r6BkBx>2540R
zog1i$M`&Bhb13>%I392h0E=hic|0IQTyu<hXxnk2ZKu2ZmEf<ob3(fV*bW;S&jxHq
z0q7)>JU>rnahMw|nyWfJ=78TOm74Ye)eP!@)vLbciCj|u87AL6DsQHfm2M)Wm)wOD
z`MJFZfM;t9byD_}whSSBfknP$nvoaUK%rf^L@ky8-@3YTAs~ZnHt8xE7pA^@0dT02
zkvr_|!&;HrpPSG+)Sv(k1Dxtt0%|W=xzi*8s7TdKxUu07CF<IC69!IT;7C>99+4TV
zndca*qv$oPG`i+nE+`9mWKZ&!fY&e+YZD%*jx8PIsgFCP6~_&Q=K6BW04+(9C$#s8
z=%9TYP`nNFwmfgRB31y@5-yyTMlgOmL_5XV$(Z$D2=7DJ_j5A$1ExMpF1oa&zUw)(
z41o!e#6y3V2ikgcq9;>h!Yi6rQnbTE5?H!Cc6Rlg2da=8egW{$_e4SYvBP`2>lU)z
zyUGEJi5ufoDOztx;%8{S{d4dV(6UTZoi7=f58rOfQB~grWX{k!@|9Yl?x=z4@BFLT
zr|LM!ZzrM&jWJaBXCKT4a3dY5OKv-U5~|^Ws4K3ZWc8mElCV8wi07oPO$gA@${vFz
zmYFVQp%Ipq%_`~+k7)pE*z&6;S`BIUQ}204Z@WhbcR~y0OHIX_r+%AWe+i85uE{6(
zl8th*ZnMlE>Bh@;PFq|nf2RU{6B+pfDl&IX_E(_-jZuKmBBGM_^A--B7XieC;+ZeM
zI$q0X8oEzH@`S_@Z2c!vA><X8g=uK)$s;o@0a5mysdr4vti`MXH|s%39^+fqKv`RW
zqBm9`t={JKeX>u}Fc0O6yoX-+5$@6{*!Sy?Rr=oMElt+ymACsg0L68h<t=ZYIm?G6
z1XcJUEknrjYc!Y^=xMby-Eb3PVfO`MRZ{^#N`{9yyQFya^@s>5E6MTrL6+W^DF7UA
zfj=~d0_u}!HR2*7w`%M19EUrN%I}MgRnF=G0Ei2j_ygkQF$I!ceIAz_Cb{#B`?6EJ
z6Oa*HYLdBXchej$W>zYwXuv`V^;wYkKb?JdRFhe^_lRNv6-NX_niZ6e^o|XrBUM0(
zAfQy~oeVk%QdOjvAiX2K6I3AdNbf``p@R@e2noq|;@r9SzM^;G$6vr&$#eETd;fOd
z4}TH+HOBY|fUvK2+l2Ni;2#vP>BtRkmF(;nzNT}PBs7nHw|JV*fwc9%kGc92M!)i+
z1o@b?;~jG~+<_1D@*fAA{ynPc25gC9IX?u|$@qlyEv@9q5{D*XFu|hjnSOMK1g#5%
zv|Fy(e`tiww(p~z>&A@YHT{ZQ0vaJ(;z3loc8}o0h3@`>d!uL7abk$h86oI3emf4`
zZZl{DiX=t6Ubo0IM>zCsRI_Ehp7HArX@r(matwoI=NqYN=Z>9$j{L?N??<PlL4b?}
zIS}DR(eh`w|5|xl6H{lgWYxR)u244*t;HdIq1;;AF@j0RrHtFlJWeRvM1eh==_@Pi
zV|8n)PLOJQEhow~vd}PAZ$h?~-ZdJAWDdfO?tA^<4SfGIRUX*g{$(nv?=1wf<jRl(
zw6u9IujMXN@?IwMEikR~-66;&#+`Bi{wwE*gKCC%k@Z&4ClkKU!Q`(fd8#0iBlI;G
zc{iBe-F4qAGS|$JKPc`-sFIQ~doT4Aa?qxCwf;z(QXi)`n*D^u=C>QHrBEqXC3`NN
z5rZs2ek7#zu6~J2z~(~Fof;Rf&*rQ~2$tFInAuM{4odz6oKy?m`%e{9zx4#JM~z=z
zf8U4+X`Z_M&c{1pwA`Bg)?tiW(e?U6sCvTy_k-yg5tCJ#h1zW?G4yQ+wa)?OKXDHK
z@PALPVoM5eeNSnA1L`*kJ^txuUMJ|bjz0+AuB)Y8C`fv?aFKDx^)Sje>fWaf+Ln_s
z-b(`;XA25ii*_H^`vABdsds=9Hm4tsl)FO*YU<R)oLc{QGLl~`tUhaSV)hG-tk-d8
z-h6`z`4Uni&D8PEA?wfme`BzQkx_g`?c&t~u!m^+rL|6m%vNc-cJ^~?Hgf#_xUXr@
zw|d5g+~s+CQC3jan8%KMov}RXs&VXB9BOswyS&?^WdQl*t~jumV!VFh+5~O;oP5VA
zK)#ZLV8_o)U)9s^EkR~xm&vNM^f9FU^mqB_jR&e!R-rJ$`lB-mY-7zKvPiHH2BHg!
zxO9b@MZN`hI3KRh2Ph6Qupr4-(_!#l<3M$N6AyW-%N46`=GCvG=&s7znRne0?R+qz
z^@)gxkVp#34aM~Yhv<k(+bE<T>C+`<h~Yvz**)|0BAm@J$$9}V*}U^9)6N1ug!DLs
z3W>?ReC*h<!7}}lM~Xrb(xx+?iM{XrSnw8aAkRU&vQK(UKJMxBGHW+j=-FP`9w!D~
zKV?=X8Tk!V8_$v+pL>KlpTDQ~^DT7b=?V8*Y{wdewVa;LdTB$#`Le9!wc-ixgM00i
z+<A-d{#;nt6@F+*ZD<DBDSDy+^k;M=#`f4=2k=xF1;|Ydt*oEy3LLF*RT{Z{ebeR$
zid;4aiznzlv-fAa!<HvV_2VD`aD0B^meROaB-zNI2lJ7)!CTY6{2A+jGi4a5+tOO-
z&8Y|aFk;Ta8>6fgD_8$wI*AA5M<#B_j9~)ESs4SVrwtii5sbGyfNl^Ma`@Vv`RXo{
z_qmLayhVCOTh!w@LAV|T9M{&+oXGL%K10*V`mYS1(Mg_f8Y@XMs$Xt?+%Wk2uAdvP
zX=EJv<#a!$_dy&A;>f;_KCy1hA>a4ZJR?iTdxnvps1%q#0zg}2NU!=12L$5ziB2|g
zC+*dm+L|rP`|B+})x=S=Rne9<t*n`Fr-7NyI6+o_oFi@W>ljpLWM1%@H=+z(k=**%
zYv;(DLKb?_KGdt-;4OvI&}e;UhPwy*ya-K>m&W^SB3>-hFpFKi6GD$Un>-!@*0W*C
z$b;lqy*l0)$>cLnG2`NSI)oy3KdyRjm)C_!tS&|IjdckZQ<C2TPn7BsZsgeGgK<Cc
zOytg|l9OodUG3jlkqG`sI`>nTC%sHg2`HRO&*}IG;0b~Z$cyGRp?BNn@Q995TDam$
zyiUPH&IQct2=!N<MGf}#te`SeX6x2qvCRjYyw+vl{uUHml><sFX5P8+q-P&PfUPuI
zjG_-q5~VyfiQ?XaX#t*guN%5<P0WA}i%=$E?Nx{S2!lc*ws+a{`f83<y2b~J4NNcP
z8*wdmFmdj+e5y{Z6zo-Z&)aT5;g*I4a`a(2k0&g*II*ow9P)-YNDv}UA=%HqrcTVf
z;!*3X8}xj!S452=1>S!iLQR}$!=$_1H`Y4~Fr$R2_0V2}0Gg*6$i`Rn>UZNiW!OUX
z9WGPJ{Sf_Y7pcho#y{i>(yjf$zysG!p}$eUfSdp;sO5dxn64=!4IWZ<=V^2E#aMQ6
zj#WT-6~YNuVvOVOkke*>@}#-v<!p*EtOv<k(06(#gl#qS{0Qr>$b0z}OpQ72S8eln
z+HRk<8NErl0bFNeD}!j#J-5|Sixb}eZ1u?)U~7c{^Xlq}^r=;juUxnc3JtG98Lxv^
z4T!dNJGdukU<6)<g+*DhhesI<<ay)+5jhfwWcYftW2yZjZe+dIG4w}$AV=8S5O3@O
zBb_J=&9*AV(Yrbaic_v)ikD1p6`LPnzW3gprC31MWw~DRzNPju9bNNe)Qx-j!%S4c
z!PzcHlL%|o=qn`ZYnNjacE-yu&#jgscoE%3rGwbr)dXwWRyR`_4h{v=hEcVlrb9<h
zWq+lhKnoN8;*R*^00sE_yxd>^^@~OaC8r=iRD=6mJkqK3gn6}vfnJ=Z&I`Yo%lxwL
ztK(v8sa#WSR>nay5}vLqI-#(sH)yRWq(jhaHi#}aKXel(rSpWiMQWhCG`V{|UfAZG
zp~Hx{P5{xt@yl0u6lktb_FR5xHT6<kOqS6ZlQ^QN<#OM%S&WM=8fgJ9T)@umW~KV$
z9*tvV31apze1ivef~HSrEAk70ovDEB$mZgo-Y#R+!~GQK=DWedkGQy@D%w%dBr~SI
z|EA%;f6-W>0M#Q7$P=vqoVBbaH6T;2>&&UxqPRITo&O*ke8j)zqQ;0nuIY-P5NvQU
zuO&W*l)I>7coU|0pE!08sSrZnW!_9Ts-S7~MA6uLONzgNfEufsA(T%4wd?g(tO>-t
zQ?)&^O-fu95vZJCjLvR6%=Cs2X*X8;J|yG5b&kA_wC^CQqs7X~F@%R;%QKd1VY@XH
z#xPWW6Km69m31?rH}1#lkV_f=P6Blfrjao37&(>1=NB9S!}B!YJ#P{u9OYG@!dc^Y
zg$v9}Tf)q67SZ7YdJjZI9@N{}7OyJx6#EY7yl>mgwyB8o&I?|OcZt?1HgP_6Ut7-9
z@7|wl$NtyF|HCv+t@8=*ke9~|qXuSaV`}Jkk_0ZvvNCVpClKN3V)(L1da6N)te492
zWSV+sf+*jl$9kLgdB1>m!T|rE*`X5Lh<<0keznn%jHLdJ>sNmeF1eJG)Q=?jp$Q3w
zzW%ripJ3q}fxe8F6vB!=DQv?E?D}(zT-Hj|mP-c=bV`PH9vNOqVT{z?(zjGuc_SA^
zeY8_gy!zOlLvJa`%~x8oVc}38dOVwxio_YxP?t!!z2w^2E<>RZ(Lfl}EfU^RCHcCr
z$hc{}2jN4lHAa5%%c76l;+J=$r}rF^m3&AO4GoPge;kgQYU(d)wy=9Jm0Wj)u_pn8
zjwpX4vr^$PD~q)?h#+sFkLmsTvM#E}jL$9c+#Ru_JQO<Y=lM-6`q?l3w;=x4Fa62~
z-XY^5%S8<`LcBGEnr&Q+V>5m2&}waq1p_96T{ZqpZPtZa3K_|fEn$ft&-Itw02P^g
z%j_Jo5X&1nc1xKbE}4BnU&^ztIVXvDU2Av7*W0bIf2+7ayW5E-I;@l%J0o$rwFJOu
zwEqe9e^vb7Q)SOl+=P`+GnitQ#n(aCQ*$gEyrn;<&unWzH>_NufHkjh^qre+%E`iB
ztE`i(xjcXV4@~^?9gD?s6$jBex(|t!iha`=SXhY7k$SC&2<NW_4zQkFM_p(^n%$Bm
zH8T54Z4)N=2r_s`Aw1_xWQ|_5oJEp_MFCvw5T~-7X+z27uv<SK@4UtvkP%hn96icy
z+-POBF7LHRT95X#`r95sIXgL(m^_p@<^q-cR_?L3GzBRv#W3G-)2+c7tW3YT<bHqZ
zv((sfV#k}%9V>*BB5L!vzb%j^E5qUKJt(llbAHnhhCr^yJOEE^Tai-Sdoc8&5|-Ga
zH&kdWj8NRZVL`CJGSF5e`EcmE*IU0lWEWp9w~2&$6cQ(Br9T@Ye8J!8=+VxYgNh9Q
ziM4=<{#WQv?HHL!&<r{sfF^knsZH^FP9(wpY6Z+=9`+n5;D_{m`BUH<?zQXkeNKp^
z!fM66&6Sbrn+Hn^PU%It8ow#cFKLbolB1+NgyK4yDY;jK0uKG{$JLY}=zkGB?;;h$
zk54;5;VO3?%xLB7#zJ8!=S3tj6%tR6>y!qJsUsyt3`>2h+06}kGp(1jUzg@r+=-8s
z6F+na)#0B`z2{ktr>T$b@(Ls!S*ivV1!)rHd*2`Fmt*;EnnXoKz3EU`Nr*=1j)f+R
z<eO!?tUjuO=^kqDC>x53S+m><H9GMQYs2)H$KKuo^1^(#X0I@C7ytEn?R1~#`(*0v
z<$kouA7dQ<iu%8T+b=+t7uv!^0wInvYDMJH_K@QTBL{8Fdsn|Y>XU2d@V4c;arj4u
z?CN3F`pKpF0wLw6C^E>mN0IguaMmPqGoa`EmPVsh7AtEF5ADBC`uBK?@5w51;+#;c
znkn%c7c}&BS_^3*O}|(*<bI9gr)|sSzh$Kdp)4s55#5e`w3ph2RqpIqo~*i;<>ojP
zHzAl1Y@`=$2R6N=s^(=1xDone#jWg%Jr|vB-RaJ{=quRO?i?MrYebv<l5Ek}wew&8
zXhJmH!6BEr^+y#4sJ5523o1wcx4r*|LnT~f5i8kID&m**8c(11oJ>)Ajl(YBZx5Z&
z3oECoDb{Q;?7i{kvkTI<GU!i}@G#x+vsQonA#*_S_6_Y@d@K)8{Mf`kL5ZSLr}52g
z$=Q>`Rwu=_Q;mTITI$S9U1~3rHp8k;g~}LBy;5ckafj_xKMt?)yQkG%QYblQGI0tR
zWv02ud&JQ{o)f5}mU>H#bqx?ARoM$mmwvp|Q`tde9#c|MMzO_0<_FZLa{~kQ9zioO
z1=oNl;U92gyW}Q%c0p^=lC;*sc*K^j-u(fr$v*0dp~*q?F<Z~>94TKVsr1m6lJ4ti
z3Ca}0x<JHQSi=JL0^Z+^5ikOMSAuZZAW!_j%UzXt3F%B#M8rw1vI1Is@ymFwFQr<}
zh?e%fJm%yj^Vrzfe)b3oQL{4Ov0i_V4r$jyyX0z18|XeJgc<iLa9Jt^R#Cf3wh&_L
zK_KA!UB*gy;#(SwhQhXVpD=`-Lp2YXLn4kC6EFKgr7rnGB85j4!0xQjm`OG|zNq)f
z(iH|=70CDI<LIft^#v@<qSJWCLjS^I$!e60*}7z{{p7VmF-!QAs3uR;!?CJ|&#Pv#
zlY(s_2|~bMo60)7F{mf794WBi$zV0+w9vASxK-2Q4pRv-46M_$Em$h7dB9veW+|{-
z%4XL3o-bqqVS9JSK1L!iY{=k(AG7S0!!*0xnO(6=93;CA4++=RTe7T4tA2z2V@*yL
z1X)#HZ_~#ri4ua&^Vf?yB#OYP#OE)Hc1U#Gsqs=yk*7M^In-)ie02{_B>lO)Re9`n
zWCGJlG#9R@aIhjQoMf(fhWq}hj!L773Z4lsn>ZjKJd*q!SM~_VRV^~49X@eR+t1Vw
zhCb4qZNeT^UEDmeT-P1!*!{uCyz68~My;PDCc?#(`1Syz1v||SH(-elBP9+>N1J5o
zhwgwauA;E>gT@)EDv2V3C+la5w=r`sdpPM9S>4b*>nrLo1%xvjugI*k9xL-oj1B7;
zVK+Qhz+0^tpCSDAOeSwmLD?L`&?N96*5?E2m6mlGD^z2w&(c7Vd95OG^9gLEAjxDr
zf3g?4!)b&aA?3GzAg94j)2|Xf!&v$zGj#|Txb~{>4P-teqB)2U!fS1^X@=z)3SLs1
zkG5wOwAU<qGQoXr2Gz9n`~_V9h#ixjj2QQ-QURBzw5Q_Q{T!pbP1moo)#BnkWsaZj
z`o>(WkX#SH`;kQF8RcSsrCjGxXJ-R2%9gT2hpcmf%b+UFxU|=UIpNQUD>a*%xmG-W
zy&zR_I>UM^)3Q6B1)`G3+)-xDs4QytAP;M{E^Go25e0osclt*}Jo?szd>hZS2QXw9
zR-CNrH8xVK<H|&ELjI`Fe@XJ)k?C>$q+`DF-2OrKSQLEq9NtA=GQ7&?>2Z>e?at)k
zyvmRx#1XC+={J#clj}+~D=!*q6)JfKgQV49q7BNFCDbO0lz2GbDy=#J+aZRph@nd8
z*cBAiPLk^POp4O_@U7T!KI3_ZwEPp61Y!F#pAIt{Pp$lKi0WrJKDoO{3LNdQ8S~CM
zF-7=P5kbA`#lz~i)t9;@V*82#EH%|uNfO|2!@-Rf_$1CubXMK%ULrzP8DMI$tnde0
zk3tz`#ot)bsDya~hw&l@-3!F=PAe$`7thbUOfA(pO4v&2UE>GX)^Dkp;0M}6`nr$8
zc1~yW9`MI4z7gg7(VC_Zj}l}aDs?6cazxurqz=A7MZPEet*B+5BOjL9Rl>7`_&V~W
zoDA?>u(mxe@*&Q9WS-a6)wR=fI{0itIKxuP8VTk(izt>cK3YRIh+${EWYOb>^jsgy
za<tvx+9~(MkxNABnTe{eJ(VFlNv;|(V)<k2j^COiTD(n2n*GMFLq4XsZm3uU%u>&h
z<}v2fd<;AKaTOVqD8RJT1<eI2A~cLBe6nu7IMsEvs?FNb8CGxBXzl>-Qg1NqZ<uec
z4s;89?l#GffqnV9?a{v-V2>PiSR3|>47WIp5;Zo*RjrNhPJMEKy!^z+#EfR(#$jc0
zr@0wM--{ly&ITfSLi%jSUJ<?E?}<ji)35cJ4=(HXT%{9p=+AyQlR=f+|6+)st&<9h
z7@5Qb+OQaF<^sb^Vz6~Ce<*{0?x}AhIaC(T{~GT90dVaAvUzD^<*fhcWAUO!nYxp0
z&~936DaCHOzQ`{aZ%h!IB-+}lB#74z$IWCCBNmG$JZ^U;z|Om^Vqw;Ep4H;(Eq|q5
zgrLTUx5{e4EdJz+#iROqnRZY7aT}xTYC}oy4VN2c<BR)p+?&;5>Z*Mc9#gEv9VU7a
zENazUEvm7)oO72LHiJ)gREG0Ja1kj(4r<-lfn-u_W$4736k7CcnjCHI>Uhbz%N8V?
zITItH?rE<L*N?U`+BubNPnIZ|1L(c3Nkn5PL0`abCp0#a>hoOF8-}|%O2z$b>tXUa
zfBB#-mEparOnS5ZsEZnxfmOTx_1TZEg<MMX_lP92JyOrhw4vjrd-JBgGiN|uS))&1
z#<`Yz-uCAL)1RTi`tIOo+H^6Mu(M2+G6EOrQcbGN2s!l?q2^ekO)k|=%J!E8$70vq
zMM9(Y0B-4UJzb^r7V&gJDZgowcC@;2(vW_2Z*Hfk&G^+9C&cQSTy?%PFL>C#e6rnf
zZbW*zMIjJgaBDIIr5YV9>L4yLN!rO0+X&`R9>4W)THzpx6&bpFN#~)T#zU<h#7Ee1
z4NX%S+{aHzR@k7fA%kltYnRtOuzApsWWzThixM4I^z*EaYL^2U(+Nq~lO)+=VE)Cp
zem=5)8JXyrapb?<*^ESOaL*q<7^YK<j@kDL5Nj~O#qemG=H4)-7GW9~qq`LP#>1HV
z8Ngt!*L<3Krzaamz2?PJDCIUZ?43|<hL2neHQ`X>ThyBj>HKT!UCc=}SzS#-Pq<;3
zNfw;}JdFWkP$s_HaNQ1wCWG1o*0J<wB(5R0<Q=VQXLGFJT8M9@As?@_SJu2cntFYF
z%!J{j&J@C`P>er5gLBnI`iW^VzP^H_{J>=<{EBX@Y&~|+afUUa*)<});oG;(H@;ur
zJ^lEmyCA*dBav=be^6i7g?smyb|B!6Yj#599;w(9F#Q+5`q}&q7-MCZD)gqCvGO|Y
z*LZmOq2h`i8BFkw98*F+VWij@R;#HqM<Pw&yC*~?Doohj#AdramQZQaY4@h5V)I@Q
zNGE6OIJs1e2J4+pLRTx6P)Sq4=5E~UuiMLv9+=8FAFvon9xioG{OlYuj1KjlE}I-{
z$+Rhtuv4p&wnQXB#cvlcDMw6-)4ewlbz5+ECv1<s4OnHEG%Wi_;JuarNvcz*TknY#
zBi3A?PFlZt@a?p!{+teY+Hs@)jQmpW#hGVvC+LB@`XSK#$=>Mc7yn5)d6XQwpVILP
zz@@*z>(I~?oq}lQ_|%3;w9vrRLf7D`yj~(Xhhge5<>q-XBt30bw@M{h-tCF-WC7on
zaj~y2vO;!5p7iq@SD`+)b}5GqV8idfdL6q~yi((c6Oe?%SbZhcMjblDEE=8HKL$C3
zB=aEdc;4)vT_~-p?iMr6o3EeVx#E_mGWOB>TO7TzS*>OQ{kl_bJHbx9o+)sp;)#^V
zCc0{Sb%?=$w3AmJ_Gq~hww;sh3s=<*Nx-krnS?U31)2~asl*9z`8rf~+qAfHtkR3;
zxX1b9!aFL1;k*m9ky%~A$#XLI`(ck8sUEzYOKk76a@2};jSlf1^raBK0X%E=#Am{L
zQT7-A@vq_1;5vu~FFONYdm{I9&Kcd4P$6Gk7eyTos3_#d4(?xLWpt0wr4DZjSql$F
zav*{r*fGf(pl-$<b7N<B*5~hXrmXc=YuT2xPzih+!A>s*P8vKWUREKYcog7373HtP
zD{|y^$2~3d<Pgl{aID82$z#?OV?O;^`H0mdr<>8)vWA6q_o++{`7^b!suv#^wv==}
zIT)E$wwKxUJjyv6eI2(xq`1EQneV&NQg2`~c{ujyojZ1o(J;T($*T)bM1R=!*<8D`
zL<a4%5?@+dJGxXUC)n;%&XBIwxNjyWw8)+uW~b-A8ibIKh^Qz?xRao(s%5o(gSm7F
zbq84R@x-%E`q25ZUZ-{9kSx4XR+al)+BdV$HqfRRSpun;dW>OLU#r`x$JJ9kg`MnA
zH)$2K|L9NuQe{D~Xl-FC^HrA6&S5^2y*?}R(pArhcU7`duV!@nLyVO1<^xSn;^w5G
z0=WM>c#DMQ5t8S%<g*wHA@zWIgv8^q`Q%&~=%M1sp}(I9POoZz-U;uAFgDMIwA5^8
zCz-(tmzsU~e3@e=@$&b)J^9|GxOyJ^Mz@e4PLfX=Z8oxUL)ZdV>sPcjLX<t3tNIQX
zcjwxfKjjock}xqbt!_mHL*aQ5NZ|$+yuz|8<{))J^}SDZ9y=S))Aak~ixDGOIGff6
zLk(=@MP7>tlS>dRe~`C@C~<|=bEWTYa&;}K0q`+XSvZvD2+{Z59KEme)E1(tgUzS%
zvGdC{E+-lCVe~z_ub0AXD1`5k1vWWYcuy$!KmNggO0Iv+C32jn#u<?u36(8PDQSCg
zoFu_pwG>8mqE?&pvb48-n+{TINkxa%M8e2OM({ZDJfEnp-O%;Su0*D34%MR1KElOl
z%0Txp-wK1g&J3LjyXzw$2+TZg1y4LqYA;jeY?{k#7}l7~B}zKfcpVpWMa)CSIs~?1
zCT|z+X*opCaoa487KF&X0|5Q*Z|E-|=_e>HCqhnasbBBZ2QwsR@kz2*<#(@NW8!sn
z>Qv(@3s>M<)+wwXpd1_QN@#j=#FiEd+q~z4`@}}Qg3q0H3#+fxm#mP*b)OY|IC>Ln
z{V5?h(ZX&xLU_;wxF9>;7&o<_JoD$Gn0xbk5=tjl{plph@&U8&mX^*}Z4Ok`?q<C?
zNWR9{@VS0)+Z`Bf*_~TuXoHG+e3^Z{j*FEwi>lyBU20)5|D?8JKFnc0HJ|t5ZAV(B
zYYnQ($PBJ3Iap?)PvcKTPA1289{dg7P#&^&HI*5eQ+=+`)HtW0Yud3@y7X_-^)qVe
z*@_p-Skpp%?d>^N-QbxqrZ$_8WpM%?^Hz?Z($<;?IBL#EnzRypZTf?MyBZ$!e*^Mn
z%9=g$`{v0}?db20sD$$d+KT;7Ln&s_9UZd1(<-3P1goH_+m+7)fV^CDdn}u);sn!7
zbGuzU{4Jxi*~fmum6GgZH01pHxT_^L{{0!7^BUJc!YJzF<5T;_2Dy|o-@TjENqw45
zlE@RU#DCJQjv2P4L=lGuU3}F{D@!U!_$vS1==O5BWaBebx+9;vJ>?KF9qjFd9@-T9
zF|7GD@fw-`mDCxb>Ew`9c{ZUZwH>X5W`qNWP&N-SsLUMA#~f_;?)KKM3TKCjXQvuu
zhda;Vh$XuQIpN*LYp^#8`lZgc|4FWp>01nPby{hT3whi=?&J5!QmejB#;Gza)dA5R
zRpVX})vmw#p~NwIHu-@9g+6cr5ZB*--S<P}q#4N15EZSo2El}91F5U3YQz7bz+#Nz
z)~bhO!DoqXsrSmZ6_)t?<$9ShOUkm)8<C|__G?|{Kx(6VI(R6`4O2KN&=8f_vs`5+
zG8-FCHloo3d))e85qW@u?sTjy<ObpT>d<}r5ev@E2X`bG&YaQqHEnq6f9nN=Mg1iH
zx_tOKlVNQui2Z-mV&HpfG1_-b{dz$bKxIj{r)phOr$Lr>Z>0a9$oRkRet?7DW^g%H
z?1@vE{lN9Skk&Q?RR7fgBfa4EFN$1N0_p?fV_oM&gJ)y(C3H<3M~0tnRTMYZaNU7p
z3i2#IxOP?K{%O;zue&wbrEvbw?BGU1D1p#w^NOLs&=Lz-PTW(B`afi^^bosh+-dY&
zS42jFNZ07c-13h;gKie4WL?QV<DYx969JW#Wmiw4=PG#blaW7i{x^VR<<#~<j7geK
z2<mlAOiVfD+|11Fa=lo@=<0D5@|hq?<ZEuD$Wlo<r>ccKY130T0yQWK+_$Lx;XitT
z-*t4e6@iF|<}rBW`hm04Dr)Ep`S24II&`t>xt;2XLgLXT4R%7-!|&bF^ufxP{ZgQj
z**Fg3it!>?^YsEli}D(ulAyyUHnd~;&_d&vL4{SCK0CM3=cbf1xM47xU#4$g-A~${
z9W-|}+>?<1rG&WZnGy+<>v%TE?KFAiJCQBQ7QShKjHKa1WHRb0bQojR-&&><%i8Na
z(PnWL26;jz-VnR|#Gf0KpJ>I~tFN@9q5O`Txr^S<@7Fx(JB`<NGq<-dq(Vo9SxW(i
z^wat0g8H$&Vg_!ZFH0d$mnZEG+R`<kSLP>Q_j6L@>gi)8?7UQxrLKTtxbBsxS;1m5
ze$zh^sbc>g7rm5o1v@J}=MYe~KC8|k&m7s>lFeS#)Hcnqw1=Nw02xUb$Lz^+{QPNT
z+O4Y^3EGGGbFRudWAbAK%q@lPTKti~Q}4n_9jlkYrJg%N-Klr2x($$^;e9BVi{Iqx
z+e33!UCAuYs7}?ud1@*jSl;Ir_5BM(B&Cy+Q}5Sp`LJ{H(;3mZ8!0}SVU0eSFTh~J
z(NkAXXM>$7JvSfx`pA2^87+7I+8`G{?9fxz3qYiN$@Kx6EZd0v3aMPmD%H&FELG>w
z#B{kJI0iu+_#m=#b5Hh7mRyP#<vF3ppp;v$VCn`w*8c!}MZC9&?r)fEZsU}c6i{qm
zS0Ps~Q~bydIl{T}J7fM$8vLJp(a<}zv9WOowbcG_^a!|JPD9|3mfQ(b_%(X{n4Qor
zms9g2c0S8Z?)M?{PXi6AgEmA){R_XL^fhv7YT;Dq40IJJ)cS)WDZdH1NV;!KlCxvD
zdi5%}#g)LvyWkY9(ZEPoJPK3(4LSnAM|7?xJO@%<4mubbqFECye#89Tp%BO61gV23
ztN-CViQ_!~nx6l@@#0kW3UHaqcMlan!DsYO0|(%A{=<E9;17RJT0sAGYg!OXq_`ae
zl2C{)G1$L6nm+VTOiVl#Yckv<N&eKf>;ZpI7}dU2;x9Qn`qr*4y4a$wBac_ecaRAf
zD&iWZy8k<PWGEMav!!MtbD;b_xC45&<c#0AgA4p?G2fr2M0YBdFRBHMS?yK+pZ_N%
z`smEe9D+OhicNW^7w5O>VW>G6f$J$WN_ae(KVn8l4~jv^2;zkahw|{e+xGUWX3!r0
zKm4b_r8TRT{hwO)pDI(X0EirQ*4=W;fQ7TM)w-^+Q0AN>gs97&TN$mm7Sn7Dk>qb7
z@QV~yZPyK_jj7Fg$#YN~q6aRa$?&J|ce5|uCQHGYGiPq=a(1f6@(ajp&rhGlwOJJp
z&?hKJ#6crzc?`=`^p2STXU#gQKbFle6bfOCF?N1lS2s@>>S}*LYEp~@6IBhoi={-b
zC3(=H6f&uYx}&MOyYlB+M&S4tzNI^8R7g>yaWCN$(o^(}Ns#N1zNA5=b=>O4DxR(7
z#6cphq%HDFxWsbG8`ci5F`c0kL3ma#p&I*2*W*>F4KsAuj=f7LX{FM|8#TJ-`{irZ
z&I?1c72&}k1vcjU%i<>vf%XhC!2PT}<Ci=aHaySej~fbXVB|;|g!LyCjXc>BOVNuM
zE`m>HV6Lr&fee1LXqtRhZBg+~ZqNINpEhI+R{ivh@I_T?U*W+!vO8ara?ZPDrD8*j
z$34(1j_?UAoiNfH-c`K*Vu_)?s53;r)Dn&|a#N$hH6~TI99}A_y#2|ctQjK!Arh)q
zGHuK|x)ZYCV(7$>sp=Txm!SEkNzy@zt-88;0kb9_@p7beu7zr4Og=A~L_NgUlOE#v
zc(MOUF*+F%LWmQbj%F$h<~4M<w|RTxj=!OOt)x8+J$YZ_{rQRHYK&rJR+CySHdNes
zj<+l;^#HJa@9zWa(R_O0KSk~Tl>UBG|I4Jrtww@`O#!1aC{&^6c!Jg%*pg1lGQ=l7
z9lz%|{yOkXgHbAU+HY6bZ6r@`XJiiQBc^NM7;xoWR(>EoXq7D^A*VX~)Hv5)Uv91M
zFve%(CX<X^U=@c^u<gaMs+Df<RGXNBRJ?I5!%Ehe3_go%)x={puE!ZF9X!f~pTfnM
zgb41KoZ^WWjd)ljWprj(y_*o~%ohwA{^*s3t<RLsbt<YS0dMTw4n|V)#Yt~2%u=;p
zqB~|Gs$OdP&ulc%KUZRq-K%{AZT}PhXV0E3A3-6#m!cjgQVDYuT~;9uh$5Q>5i%y)
z#k={C#Ir|O-y=`o(z7u2YsPfI5z~HQg9QdHd59Cd#qqmimnK8ZcZioH^6Sh9Vwkzj
z25TGBhO%2Zxs3!|j4|VLsE<gEeJv1i%tq=gv(x6W^`2IB^CaP+AZntg?lR=t>jm$S
z!>BdyZ?CHscM{BJqjW>(l0CBLJwc1YTXg_@K5Ab3&Iui$5Y{`tM28YQh>klRW8~^9
zwK-4wIx><Li}bXy{TAaY=m5{xFP$D33T(!j`vnmg1<eBJVj_&(<^kfA^DK(a#4${l
zB4i^1*}Sh$R5(P`r{3aZu5U&qG}kQU>-QH)nbW!QeocK3a@dmg3}DtvQ6*96T4C+R
z)UapZO7ND<(s;=92!l!ZB!27e8sCD3fhjRYdz%Pw0!||v9;PZXd0u3~;}bwq{bB)X
zrpzqnN#C_k+fQdW7EXC+;_59rqKiFalKPBT?=laW6utM}nTtV&2Ght8uKJzBD|1iS
zE)4U#LJ|rj7<6p-mg{=x$KV7U`jViF%tj=l*SXxNP<6Q)-@Q(T9V-(bx*?iv_nl%L
z$^0|Ym=QsV!rluNNc)6-&s|Z!vv@6Tm{0AnZww1{An%U2MSH)8PpjYpcEWA)g6>`4
z1Ml+nD(k&7U@1>qayXhk_+t1Ly*|H&!w)YN(q<*Q_;e;o@<}*U+UyvkMk7I)*zaL1
zu{rB7k6T0PF`$aC08nE?en$~4{W**Hp)aGf6OdU$9|TZ=#XVVi2r>MoR<Jz{i-;6x
z<{RB!!6HLO--OhSkBgNeU-o#DeEU|8F#D+Z5C`<Aw-hHgWmjfWWoB9OhR-ve2=K?T
z)VP7y+Zd$hCA*J!byUs1;1cw@qmm#Z?KWJX&>1f+X<xsdD@L3V?8P#i=;Sy+gh8FW
z>aZVL1CrG-?&AUqO^ynzB^urvsIISTO^R7bkyJqlo|+*}x@g#Hd&pGKw3=EasH8@U
zch}Abdwh)=x+p&13EmYf+0tleA7l~z#Hjy)rYW&PaxLUQ<s>VU{d?na*>8hYs22&-
z$wyePd1Zbxn`5a^Etr1eae1pbK)JAvH(uz;>02f~*LO?bt8X}ep1w6T#Z?#vqU5k4
z6OYv4-OdI@4bfs1W10yxbX%G8yvg>C{bua_`sv(-O5lAd143ZthITOT&Q?SO7q0{#
zX4o$4;|0QHxfEsq6ti-@0sF>@Q`yB7ijG+8Jbq|);x0mYDvrT8SXja}^aIUA<O`+T
zLafx6_b#o~XiFvqY&|BFo+rLJ?-nWHWUiHNI%zGzAuBfsLMuwLGTj+5kC5Uv^7MTU
z%co`0TRBC?$R#azjdbQPs&c|BZ@v@~A-0;{*Y|ZdCfSpFv_ijdK1TuS!O2^*9ItJd
z;4#xMW{$U?=)+z=h*k`eJk~(Ng3;yft8rb9&Mj+bIhP0j<}Tlq=TH|{xZyWBLJHdT
zTGbL-&0dp--%wzNiYR_utz9Y660#jWZ|t+Mwe9=y?^HheM~6{GRXZ&nrk|&Kgy@WA
z39n?<W3~o^*QZHAh7K^U781tWWyCt9>I&T=pHCDAKMA}a7oNQaZ>nZ6j`!ov2}U}v
z)oVtLjkTZ>?3uwnN#($CD?}Wvp0Sr-F(*2ZbwbprxWNi5J@wJKn>(?l3EKAH2(y>V
z&g5r?K<+cE2%nVvMxWjy??q)sWEk<nPDXAIo8Qy5P6g0#c8?-Wo^%!&&S<z8?>6SQ
zq`79X^y2q@dbx7lSalH(#4Zh7SakBVV#X%0GD(wYY|c}(7NX&7WR^-e8V_Yvlxz6r
zYRV}@Y|Dbeb9^I0E}dM7v}eUG6%}_F*Y^$~WN}aP%ciITCel*P>7=V#?>sd1OW>&t
zN+^U$vHT4c@@&7kbeC0pz7_0HR+ou*j^9)YET!g3w>pes^PXC$`c{&ccH{Zs^~NMp
zIPj86A6GzV>O}2{Se6BTVh2Ko)h^ml#CL5iM``PmCLKx=m=-B7Qc_RZlSmglX#P$^
zJcPFlA;Xnme8)REj!1g6maeaQv$ZrxV?tr}6^cE~WEU)4dcDlW73)6fA>*W_vl6N2
zNr4V{?lNXYA~yp&eyz5WNBCl{+NzPH(nta8gpMNlA-l@(14G8fE_~uyM%YPNqZML<
ze`S+A6Cq>XSdpR4<na91T7GLsM@Yn^pWQp;^G;$2=uvPbv<Xb@M)X=awdD8;vbn0J
zv>cTp?HI0q%yWpYPNt1mW=WE8yIQJlfjkpiWP5M=H_VyNwa+OxjJI@SA*&gB)1A(|
zDmuyzXW33d$~)`HnX&MdF+LW*N%Ntk>0o7I+^UH#u)YVBnexhrp!mWg0WUaM82%Bf
zNQcj2t(V;$CYvB>tTeyx?)G!{J4=HFy#s@hFFG3u;tUUxcWySKdoIxl!9Xhq!sp7s
zocpLb^6t%CQVptP*ss>Ex3YG1RGM8S@vPnhALHd7yR1%ysW9z~9a?-+l0Db)PQLz!
zuSG9uUf4+^`YF|HjeMZVxV7Du&`#CKaCjq9(03Qdk!sOFzfiqeH}|26m<h?^A~D2g
zIK16Z|H=S{;!o5?pUWy6nxa5kB|G1f!uE2##z|_8-XA@t9V4e{<k#33*q+!h7Cv@c
zM=y>6<iYNe^I-dhG3zQhko{wOy43jH88aFaSy#$U^+MUqa6rN9fc;J(eM!E#@wn}?
z(x|{#8FTp><;tYWh&;YpeqST7w%HTjo+yj1;Xe=SB2l7XEL*;t%f9z(I(Boc7nm}0
zGia)|!uyR^!(0aq1P@O@6eKo{H3M*~^(VvEG<7!dP(P*3)d4~0_|2_iU(%nS6zUih
zSlpf_`h4sWAXXy#F6_*pXd}jHlXRD=J_{;lVAH3(Hw?fcGS|g2kJ&9!i=GLDR+g}>
z)xI9H{css^2f^`S>+&WP6zTb)e-qtDY+#!;d}4E<!<G2tg>`R?j8FrMu!Nelz}C=#
zlQ^Wwk-NyNv(Ok5rgOX91S=tjN$wXg%!6z77wH*dWpSI%Q{|#B?yT*4-6jdD@whUJ
z9@Vat)7L@eUE+p%fFcgoAprLqF}UodS77>}o(_f2<V>Sc)wzp&{0Y|N>puQwQu*|T
z%sXV9z{WJ9cMbHEU(C4<UWS?nPjAzjLKigzZyZK(N$5U_1%6?qUp<XDy9|CKPi(Vs
zce+eVEy&l4<qR?__cj(-`T2ShDYq%+Ozc|SO5tl+XUhlf&3B5?;YJ~<BcwXz>4iCy
zQ0dy0(=jGK_CA>Am>&FR^S)hU$k#S<VxHcM9e4Uew2`|q*?L30FwIr-C3)tUMDYdh
zFecG(9bMyVg9grFE&=#-0VeXS3}nJdVcc)1zQ+@-Ivs9Us7^Uc!cu}TvCab*2k)JW
z+vHl>>Z(LGH~5}ZclTT?&`WhplfU9-^1!qKpcXs}3SqU{oo*8Q_Sdcw^Q}w%@fS5T
zA2-x|+<5sCGy>wf-k;omoNlT}>7?mD{p^ZwRoR>|+m2<TivekKrT1euxpE;*BPPW1
z43RJ4*E6dJPkRmxudo|!($7jdV@PoABfFno`5{GB?1!a^+SLcqbS!ygyKm3LvTbg^
zs@e{=F)t5inF67gnx3aa|NDn^JA^Nf2TCk*=ukA$H4Z*v8<AoQYYOn5K(+_A?J|KZ
zF;pIqKeM14Sh1PLgJzbT51@yp=CU{|k-N|X#S83AyqleKCO#}=qgPYF&kxnkKw2Pn
z&2D^nHb3GUAy$Ssu%NWj7DICyyHe|_jz#F25(A56o0FySw~ZH>7#-?_F0XojE8a9Y
zJzUr^=-B5P!&gS^oxF@+tuv~;OFaIu^f_DbNv@*%W<$-CDEIMtD*^`3=C}ka47RHn
zPi+zqI-RXZ5%&(ac)Wvy9dvLnh<-BodH&;PfZ`uaCG_}niWg@mhfYs~7%F{xBf%lf
zH7|O7{-C>jZG~O$(%NgPo(K@bCniyKU`I#})GG_G($s?@<oyglTJ{dy;BiT)=oLy-
zmTCg4A|+10)CzttkcHWO+}C8eL~95HNFlxI>^J(}aCVwFf9i5X9E@mUXR<rxjubin
z=9KqW8^Siy3;|;~Q)<~2>}?ObHo;Ln1QzM7Pt3DTwcer$*4km!8kXL5{xU(+bV8KG
z;cIj@7J@5(*R$3M$+SayINrSsDjwg2!SdhfY}%a+q$L23<HjDkdJkNT$9<8v)(0w)
zEhqGhPJ<BJ?yDv}-Z@Je6Ly&Z@gwz3J4j<Viy``;!Rm|O#uv1@3^P|j)y<dYkAXw^
z2t?d(jLLqaE>*5T4$}e~Hnq72vhQ^!iHbH5cgD8oBN5Y4+9~)Y2ZcMO+OymKm6K<e
z3hU)x4<E})q$By-crbsfTy^Y@BT>6?h(dk8Mv2W4lzXEFYgg)gANY<0ELgqy=Bw#1
z?K$DGl~H_ah<9OW1{xf$v-#yB1K@om?=GTNDA|wLoH`k&(+S$RAm4i6jx&xNSy;#R
zWAK)*ftzYaMkD_q=H$G>2VrG`=*IZi)KAv%of9?Yl*Z@`A>Zcq%3KARV(`AyqF^3L
zhh%#;kV<mwU(ae<7I*GlqdtfZ(3y*LxLx;(D!9^SNW@n*Zn`Q`Jwjb(S8CT!@gTbX
zqy%RJVJAWC>Q=xDK`j&8s|&)whjAoc(QBbkaG+nS!}^ukPjDK0+dsW*!@0JU-iL=T
zIn*)ME>{^n@NRCtBBKk`<K2zt(<ONhcl8Kt@wqNgT(ke_BYk)OYP<=&dum6Iy<<MV
zw3PkVzo!B8V)?q#6(iZ#p$CSVT9^u98ZjKnULxJK+wCr6>`V@)So9WNQH@3@9VwG6
zXfTj?3<bFe35?84?Dld;QLq1ouw+4Ut_o7HX06<tyX`(T4~jJTmOd7;_B>)LNPAn_
zv)rza-PjM+ld9ncI`z^W9>z*l+XGa|uNdXbIfZ8saG0!f(b>iyo;;oBa$meU$*(I(
zQZyWdW@mBhRts3*v%WaN)HE+3+p=1_e1@-K!$9IMle1u%oav3_$=$!UJ;#d{Qg%cP
zUDR|wLK)W}n~G(Ig{n29-q%0B0X}~HdUO?@7}#f{Uq8*c4rbS060H*B{Y<viH}1S(
zaa&>(wCYw7Wf=$CMbeNj11dYV&`E!;HTM8>-IX93B5Hj0bl5pzZp;Iq2Gi<N(vv<`
zw_ir#LQbTE^rso%d-GkPU#8;rW}wRNp6BDMT%<sYi;IK$?qClu9XHZ)iN_4N>fJ<@
zqqKOX{!RNAQq3&p?#&_ay4Bl|(Kbj#vFz^YgKO2YAm>B^xmhuMUB^@(f}|(zTQpJI
z4945kWet0Zduez!)B%%cn2vaFE=L*+A)0TFSO5+98p%(JL`bng{V*1n{kK8cGX2>c
zQ!{{~(@TY=sEb@dv0{#z4_qfy1$>%n1)glY1+7zI6Pgck=pE9fiqVG=F2fA~z@?;s
z(=uH~oP)!2f{ASskwdyU?VEE@XRqZN_o7Yw6%c@4*b3pTWlx4I43P76qkKqSW3Qc_
z&Dc27rYxz%W2c&-S5;lgN8QDs-W;{!WP}|iy*j(K8(X#c%-L*B+KmUJ0!Sd|Vt0Dw
za=jpnF;b=Ne#Hj>lQqbl^EpEHzr$|16cBcd9P89;nT&kpe)?~d_bKPeiL1*YM&mZ4
zn+pPVqnnS1DuBHBJS1IV%=<QCOH$!{Puf`8cDb@Uu6@+cu_)b(Fc0#>beb2o(v?V4
z#xLPC=J3ph#LqHY0Rg%pOUCc;pt=_(%dT=)ubJ-&kDd`kYaII}WxGSd27U`Wsr#;&
zT2dC%)aUrsLJz*PRKP$p>1*>4Z3Z#M78y<#;#q^G-6q5ft7f1fD@6wnP&9)YQb@vM
zP@LPhpBo|f<`P0tXP#(+TOTd8=PID25VV|8sPx4|v}t9g=YE0G<F|&rU+PMO-hg@6
zZ?9j6ihdhpG8@p5;C4&Iq30Beo`)+Td_N7uWPZdfabp-+Ky{H9RHDXj@0~vT<*`7~
z^Ls_j2H`jm9@QYQT;Q<_b7*OekPTZ?Af3%~yMHa&V`kE6H{h?);#+x_H6Wl-X9=M{
zc5UC~vg|wx&d#BM$bwAYtrd5-<EjCuNWH))y-=p225yOh$>Mljb5QsphLXEtdeGea
z{^Ii*6BIxzIf2`Ip}!m_i=XP)2F|2;0A>Z`<cESl1$MBUXOza@>k?p#L-?rtzFlLv
zq%;2%=ps36v;Zh%9|G1>Nlxg{Zye4JV9kKMgBfrZ`+dm8Qi#0n-F*wl(YHLWzPHRR
z^RAL@wwy0{R68Qe9<djre(|3advaN=0A0oej-VY6bTQ-Jxu9Q)!XDwxW(TLXekRHT
zhz0{^!1w*>z}YXWJME`i+uDx#<4XP>2V-iW69Nzb4|G`i#c}tt2J{KfpirP}?eAPh
z321n92dr=6%0Ik!rs<bw$h`}ySDep8PLOFx12ou43ETYBYOt?kPyx-Rz5)_*pw9dM
zVLVjMf1gg~F)W?^eu;Eocv9~`$+h2bYV(g}^FxIV4uZO33I;Ul4G{&)4(>Yu(STA?
zQBmCt!0iy2OxFO(SIHBj$C)dC;{*m5fckKSw_OD4qp<~~TF1d&e%~jMOW8Q&<m{{y
zTO_4+iCpac-%`0h%b<Zg1c(5*GxlzbJPXv$1rB6<ZTB~5i0AxAn=*O3Yseo<*#S6~
zhnVc#mlS+|P$QH<;~^2jbdFpkcO_3ncC!|Q?K@B8?{(o7C~^QO3`wg{Bx~dY@D)>*
z$-k7{z2sSk|3!rsp5xB{8yrDc4Sc?Z<t635j{ut9PCfp7UOfOu<*}dyB--l=U}RDF
znB{K(Bdx~6hHjRe6XdJh08HdU^xoY+6Xgb|flBA{n`|vxlG~$J$h|BqbC05a<0}^a
zX<bl)t(+voalambsU5Ek%>FC)i!bD!A3mWCrfe0Skf&_3$@ttZDtwXrefyNja$wc;
z{+S=vumOCq>AI)?J6(0p<Zj&Xr$S$;dQ5I-@_!57k!-Smy_QQ6q5h|(2X(NF+>i4}
z3t(eHP0Md!TL}-yTORbs*<SjmgFy$#Q$=#3>u+>0yd)C=4o*hrQ&;uD7d&Dp*e?se
zUq8sy(gF!kupmo7wimdETv5?Wzi|)M|40L;``t9MBFGt$C5k%hG0nb@kwT=JnVHGv
yH-SVTyU7?=0qn$x%y+Z9PirY`2s)e26WJogJU|-)%h^A`kK!G*+l4nxpZ!1L^DZF(

literal 0
HcmV?d00001

diff --git a/docs/anvil-terra-poc-presentation.md b/docs/anvil-terra-poc-presentation.md
index f270938f..27c8b87b 100644
--- a/docs/anvil-terra-poc-presentation.md
+++ b/docs/anvil-terra-poc-presentation.md
@@ -158,12 +158,14 @@ git drs pull -I "data/*.cram"
 <div class="columns">
 <div>
 
-### 1. Configure and add references
+### 1. Configure and add [references](https://explore.anvilproject.org/files?filter=%5B%7B%22categoryKey%22%3A%22files.file_format%22%2C%22value%22%3A%5B%22.tsv%22%2C%22.tsv.gz%22%5D%7D%2C%7B%22categoryKey%22%3A%22datasets.title%22%2C%22value%22%3A%5B%2２ANVIL_1000G_PRIMED_data_model%2２%5D%7D%5D) from a [manifest](anvil-data-explorer.png)
+
 
 ```bash
 git init
-git drs remote add anvil terra --checkout hydrate
+git drs remote add anvil terra
 
+# Select a manifest from AnVIL Data Explorer and download it to /tmp.
 # Download the TSV from AnVIL Data Explorer first.
 manifest=/tmp/anvil-manifest-38dc7537.tsv
 scripts/anvil-add-ref-commands.sh "$manifest" \
diff --git a/docs/github-pages.md b/docs/github-pages.md
index 91de92a4..b78b5e35 100644
--- a/docs/github-pages.md
+++ b/docs/github-pages.md
@@ -71,6 +71,7 @@ rm -rf .pages-docs _site
 mkdir .pages-docs
 cp docs/{index,quickstart,getting-started,commands,pointer-files}.md .pages-docs/
 cp docs/{adding-s3-files,remove-files,troubleshooting}.md .pages-docs/
+cp docs/*.png .pages-docs/
 npx --yes @marp-team/marp-cli@4.2.3 \
   docs/anvil-terra-poc-presentation.md \
   --html \

From a1cf36f10e8b24ff2f65f22435b0b95d7b4b06ea Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 12:10:39 -0700
Subject: [PATCH 61/66] 2 of 2 update presentation

---
 docs/anvil-terra-poc-presentation.md | 49 +++++++++++++++-------------
 1 file changed, 26 insertions(+), 23 deletions(-)

diff --git a/docs/anvil-terra-poc-presentation.md b/docs/anvil-terra-poc-presentation.md
index 27c8b87b..95fdd56b 100644
--- a/docs/anvil-terra-poc-presentation.md
+++ b/docs/anvil-terra-poc-presentation.md
@@ -53,7 +53,7 @@ Reference proof of concept · July 2026
 
 | User A | Git | User B | AnVIL |
 |---|---|---|---|
-| Add references with ADC-authorized metadata validation | Commit canonical DRS URI, size, and checksum | Clone and authenticate with an independent Google identity | Hydrate from a fresh authorized URL and verify bytes |
+| Add references with ADC-authorized metadata validation | Commit canonical DRS URI, size, and checksum | Clone, configure the Terra remote, and authenticate independently | Hydrate from a fresh authorized URL and verify bytes |
 
 <div class="columns3">
 <div class="card"><h3>0 payload bytes</h3><p>committed to Git</p></div>
@@ -93,7 +93,7 @@ git drs add-ref --remote anvil \
 git drs add-ref --remote anvil \
   --manifest references.tsv --dry-run
 
-git add .git-drs/ .gitattributes data/
+git add .gitattributes data/
 git commit -m "Add AnVIL data references"
 git push
 ```
@@ -105,7 +105,7 @@ git push
 - Canonical DRS URI pointers
 - Paths and Git history
 - `.gitattributes`
-- Allowlisted, non-secret remote configuration
+- Only portable pointer-management state
 
 ### Never published
 
@@ -117,7 +117,7 @@ git push
 
 ---
 
-## A clean clone is enough
+## A clean clone plus explicit remote setup
 
 <div class="columns">
 <div>
@@ -128,6 +128,9 @@ gcloud auth application-default login
 git clone <git-repository>
 cd <repository>
 
+# .git/config is not cloned; recreate public remote settings.
+git drs remote add anvil terra --checkout hydrate
+
 # Hydrate every authorized reference
 git drs pull
 
@@ -141,8 +144,8 @@ git drs pull -I "data/*.cram"
 
 | Stage | Action |
 |---|---|
-| **Git** | Clone pointer and safe public config |
-| **User B** | Supply ADC; choose all or include pattern |
+| **Git** | Clone pointer and `.gitattributes` |
+| **User B** | Configure remote; supply ADC; choose paths |
 | **Resolver** | Fetch current metadata and fresh access |
 | **Cache** | Download, verify, atomically promote |
 | **Worktree** | Hydrate only after validation |
@@ -179,7 +182,7 @@ bash /tmp/add-anvil-refs.sh
 ### 2. Commit, hydrate, and publish
 
 ```bash
-git add .git-drs/ .gitattributes '*.tsv'
+git add .gitattributes '*.tsv'
 git commit -m "Add references to AnVIL data"
 
 # Materialize only TSVs locally.
@@ -195,7 +198,7 @@ git push -u origin main
 </div>
 </div>
 
-> **Result:** the worktree contains hydrated TSV data; GitHub contains only DRS pointers and safe public configuration.
+> **Result:** the worktree contains hydrated TSV data; GitHub contains only DRS pointers and `.gitattributes`. Every clone must configure its own Terra remote.
 
 ---
 
@@ -223,7 +226,7 @@ The DRS URI stays canonical. A checksum describes content; it does not identify
 git drs remote add anvil terra --checkout hydrate
 ```
 
-Remote metadata has one authoritative representation in `.git/config`; credentials remain in the provider store.
+Remote metadata lives only in clone-local `.git/config`; every clone must recreate it. Credentials remain in the ADC provider store.
 </div>
 </div>
 
@@ -268,12 +271,12 @@ cache_oid = sha256("git-drs-anvil-ref:v1\n" + normalized_drs_uri)
 
 <!-- _class: small -->
 
-## Good component coverage; one decisive gap
+## Component status: implemented, partial, and missing
 
 <div class="columns3">
-<div class="card"><span class="tag">IMPLEMENTED</span><h3>Focused coverage</h3><ul><li>Resolver contract and errors</li><li>Terra remote and safe config</li><li>Canonical pointer/cache key</li><li>Terra ping and push refusal</li></ul></div>
-<div class="card"><span class="tag">PARTIAL</span><h3>Workflow coverage</h3><ul><li>Manifest validation and dry run</li><li>Pull size/SHA256 checks</li><li>Selective hydration</li><li>Cache reuse behavior</li></ul></div>
-<div class="card"><span class="tag">MISSING</span><h3>POC acceptance</h3><ul><li>Independent User A/User B state</li><li>Real or contract-faithful AnVIL</li><li>Expired URL and retry journey</li><li>Authorization leak audit</li></ul></div>
+<div class="card"><span class="tag">IMPLEMENTED</span><h3>Focused coverage</h3><ul><li>ADC-backed resolver contract</li><li>Canonical pointer and cache key</li><li>Atomic size/SHA256 validation</li><li>Terra ping and push refusal</li></ul></div>
+<div class="card"><span class="tag">PARTIAL</span><h3>Workflow coverage</h3><ul><li>Manifest validation is sequential</li><li>Selective pull is covered in isolation</li><li>Cache reuse is per clone</li><li>Remote setup is clone-local</li></ul></div>
+<div class="card"><span class="tag">MISSING</span><h3>POC acceptance</h3><ul><li>Independent User A/User B journey</li><li>Production AnVIL contract proof</li><li>Expired-URL retry and concurrency</li><li>Denied-user and leak audit</li></ul></div>
 </div>
 
 | Arrange | Act | Assert |
@@ -301,11 +304,11 @@ cache_oid = sha256("git-drs-anvil-ref:v1\n" + normalized_drs_uri)
 
 ### Still incomplete
 
-- Compact AnVIL IDs still require the trusted Terra resolver.
-- Service-info does not discover auth, provider, or capabilities.
-- Remote setup retains provider-specific command shapes.
-- Downloads lack bounded concurrency, retry, cancellation, and expired-URL re-resolution.
-- Production and independent two-user acceptance remain unverified.
+- Every fresh clone must manually recreate the Terra remote in `.git/config`.
+- The production endpoint, OAuth scope, and object/access contracts are not certified end to end.
+- Manifest resolution and downloads lack bounded concurrency and retry.
+- An expired download URL is not re-resolved after an HTTP failure.
+- Independent two-user, denied-user, and credential-leak acceptance remain unverified.
 </div>
 </div>
 
@@ -319,8 +322,8 @@ cache_oid = sha256("git-drs-anvil-ref:v1\n" + normalized_drs_uri)
 
 <div class="columns3">
 <div class="card"><span class="tag">P0 · VERIFY</span><h3>Prove production fit</h3><ul><li>Confirm endpoint and OAuth scopes</li><li>Certify object/access contracts</li><li>Test slash and compact DRS IDs</li><li>Run clean two-user clone/pull</li><li>Audit logs and history</li></ul></div>
-<div class="card"><span class="tag">P1 · HARDEN</span><h3>Make it resilient</h3><ul><li>Trusted authority routing</li><li>Persist auth discovery</li><li>Expired-URL re-resolution</li><li>Bounded retry and concurrency</li><li>Remote diagnostics and CI</li></ul></div>
-<div class="card"><span class="tag">P2 · GENERALIZE</span><h3>Keep DRS composable</h3><ul><li>Unify `remote add`</li><li>Resolver/auth interfaces</li><li>CGC and Synapse fixtures</li><li>Keep publishing provider-specific</li><li>Defer mutation and copying</li></ul></div>
+<div class="card"><span class="tag">P1 · HARDEN</span><h3>Make it resilient</h3><ul><li>Safe clone setup mechanism</li><li>Expired-URL re-resolution</li><li>Bounded retry and concurrency</li><li>Cancellation and diagnostics</li><li>Clean-environment CI</li></ul></div>
+<div class="card"><span class="tag">P2 · GENERALIZE</span><h3>Keep DRS composable</h3><ul><li>Provider-neutral resolver contract</li><li>CGC and Synapse fixtures</li><li>Capability discovery</li><li>Keep publishing provider-specific</li><li>Defer mutation and copying</li></ul></div>
 </div>
 
 ---
@@ -329,10 +332,10 @@ cache_oid = sha256("git-drs-anvil-ref:v1\n" + normalized_drs_uri)
 
 1. Which authoritative AnVIL resolver contract, endpoint, and OAuth scopes will we certify?
 2. What stable test objects cover checksummed, non-checksummed, large, and denied cases?
-3. Is the pointer extension compatible with every parser that must read it?
-4. What is the supported override policy for tracked versus local remote configuration?
+3. Is the DRS-URI pointer extension compatible with every parser that must read it?
+4. Should consumers always run `remote add`, or may a tracked, non-secret bootstrap configure `.git/config`?
 5. Who owns the independent-user acceptance environment and compatibility matrix?
 
 ### Questions?
 
-The maintained design source is [`docs/anvil-terra-poc.md`](anvil-terra-poc.md).
+Detailed design and acceptance criteria are in [`docs/anvil-terra-poc.md`](anvil-terra-poc.md).

From 512dd9b67dbfdf1f6ae54c5c3d0d7b47fc7f01cb Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 12:21:24 -0700
Subject: [PATCH 62/66] correct formatting

---
 docs/anvil-terra-poc-presentation.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/anvil-terra-poc-presentation.md b/docs/anvil-terra-poc-presentation.md
index 95fdd56b..7ad4a67f 100644
--- a/docs/anvil-terra-poc-presentation.md
+++ b/docs/anvil-terra-poc-presentation.md
@@ -161,14 +161,14 @@ git drs pull -I "data/*.cram"
 <div class="columns">
 <div>
 
-### 1. Configure and add [references](https://explore.anvilproject.org/files?filter=%5B%7B%22categoryKey%22%3A%22files.file_format%22%2C%22value%22%3A%5B%22.tsv%22%2C%22.tsv.gz%22%5D%7D%2C%7B%22categoryKey%22%3A%22datasets.title%22%2C%22value%22%3A%5B%2２ANVIL_1000G_PRIMED_data_model%2２%5D%7D%5D) from a [manifest](anvil-data-explorer.png)
+### 1. Configure and add references
 
+Select the dataset in the [AnVIL Data Explorer](https://explore.anvilproject.org/files?filter=%5B%7B%22categoryKey%22%3A%22files.file_format%22%2C%22value%22%3A%5B%22.tsv%22%2C%22.tsv.gz%22%5D%7D%2C%7B%22categoryKey%22%3A%22datasets.title%22%2C%22value%22%3A%5B%22ANVIL_1000G_PRIMED_data_model%22%5D%7D%5D), then download its [manifest](anvil-data-explorer.png).
 
 ```bash
 git init
 git drs remote add anvil terra
 
-# Select a manifest from AnVIL Data Explorer and download it to /tmp.
 # Download the TSV from AnVIL Data Explorer first.
 manifest=/tmp/anvil-manifest-38dc7537.tsv
 scripts/anvil-add-ref-commands.sh "$manifest" \

From 0308579ffa0f8a0c6a61320f2c7568e6e8cd56fb Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 12:33:32 -0700
Subject: [PATCH 63/66] more presentation fixes

---
 docs/anvil-terra-poc-presentation.md | 136 ++++++++++++---------------
 1 file changed, 62 insertions(+), 74 deletions(-)

diff --git a/docs/anvil-terra-poc-presentation.md b/docs/anvil-terra-poc-presentation.md
index 7ad4a67f..d6902dc4 100644
--- a/docs/anvil-terra-poc-presentation.md
+++ b/docs/anvil-terra-poc-presentation.md
@@ -82,8 +82,7 @@ Reference proof of concept · July 2026
 
 <div class="columns">
 <div>
-
-```bash
+<pre><code class="language-bash">
 gcloud auth application-default login
 
 git drs add-ref --remote anvil \
@@ -96,22 +95,22 @@ git drs add-ref --remote anvil \
 git add .gitattributes data/
 git commit -m "Add AnVIL data references"
 git push
-```
+</code></pre>
 </div>
 <div>
-
-### Published
-
-- Canonical DRS URI pointers
-- Paths and Git history
-- `.gitattributes`
-- Only portable pointer-management state
-
-### Never published
-
-- Payload bytes or cache content
-- Tokens, headers, or ADC files
-- Signed download URLs
+<h3>Published</h3>
+<ul>
+<li>Canonical DRS URI pointers</li>
+<li>Paths and Git history</li>
+<li><code>.gitattributes</code></li>
+<li>Only portable pointer-management state</li>
+</ul>
+<h3>Never published</h3>
+<ul>
+<li>Payload bytes or cache content</li>
+<li>Tokens, headers, or ADC files</li>
+<li>Signed download URLs</li>
+</ul>
 </div>
 </div>
 
@@ -121,12 +120,11 @@ git push
 
 <div class="columns">
 <div>
-
-```bash
+<pre><code class="language-bash">
 gcloud auth application-default login
 
-git clone <git-repository>
-cd <repository>
+git clone &lt;git-repository&gt;
+cd &lt;repository&gt;
 
 # .git/config is not cloned; recreate public remote settings.
 git drs remote add anvil terra --checkout hydrate
@@ -136,19 +134,20 @@ git drs pull
 
 # Or only one dataset slice
 git drs pull -I "data/*.cram"
-```
-
-> No author cache, local Git config, token, or signed URL is transferred.
+</code></pre>
+<blockquote><p>No author cache, local Git config, token, or signed URL is transferred.</p></blockquote>
 </div>
 <div>
-
-| Stage | Action |
-|---|---|
-| **Git** | Clone pointer and `.gitattributes` |
-| **User B** | Configure remote; supply ADC; choose paths |
-| **Resolver** | Fetch current metadata and fresh access |
-| **Cache** | Download, verify, atomically promote |
-| **Worktree** | Hydrate only after validation |
+<table>
+<thead><tr><th>Stage</th><th>Action</th></tr></thead>
+<tbody>
+<tr><td><strong>Git</strong></td><td>Clone pointer and <code>.gitattributes</code></td></tr>
+<tr><td><strong>User B</strong></td><td>Configure remote; supply ADC; choose paths</td></tr>
+<tr><td><strong>Resolver</strong></td><td>Fetch current metadata and fresh access</td></tr>
+<tr><td><strong>Cache</strong></td><td>Download, verify, atomically promote</td></tr>
+<tr><td><strong>Worktree</strong></td><td>Hydrate only after validation</td></tr>
+</tbody>
+</table>
 </div>
 </div>
 
@@ -160,28 +159,23 @@ git drs pull -I "data/*.cram"
 
 <div class="columns">
 <div>
-
-### 1. Configure and add references
-
-Select the dataset in the [AnVIL Data Explorer](https://explore.anvilproject.org/files?filter=%5B%7B%22categoryKey%22%3A%22files.file_format%22%2C%22value%22%3A%5B%22.tsv%22%2C%22.tsv.gz%22%5D%7D%2C%7B%22categoryKey%22%3A%22datasets.title%22%2C%22value%22%3A%5B%22ANVIL_1000G_PRIMED_data_model%22%5D%7D%5D), then download its [manifest](anvil-data-explorer.png).
-
-```bash
+<h3>1. Configure and add references</h3>
+<p>Select the dataset in the <a href="https://explore.anvilproject.org/files?filter=%5B%7B%22categoryKey%22%3A%22files.file_format%22%2C%22value%22%3A%5B%22.tsv%22%2C%22.tsv.gz%22%5D%7D%2C%7B%22categoryKey%22%3A%22datasets.title%22%2C%22value%22%3A%5B%22ANVIL_1000G_PRIMED_data_model%22%5D%7D%5D">AnVIL Data Explorer</a>, then download its <a href="anvil-data-explorer.png">manifest</a>.</p>
+<pre><code class="language-bash">
 git init
 git drs remote add anvil terra
 
 # Download the TSV from AnVIL Data Explorer first.
 manifest=/tmp/anvil-manifest-38dc7537.tsv
 scripts/anvil-add-ref-commands.sh "$manifest" \
-  > /tmp/add-anvil-refs.sh
+  &gt; /tmp/add-anvil-refs.sh
 cat /tmp/add-anvil-refs.sh
 bash /tmp/add-anvil-refs.sh
-```
+</code></pre>
 </div>
 <div>
-
-### 2. Commit, hydrate, and publish
-
-```bash
+<h3>2. Commit, hydrate, and publish</h3>
+<pre><code class="language-bash">
 git add .gitattributes '*.tsv'
 git commit -m "Add references to AnVIL data"
 
@@ -194,7 +188,7 @@ git remote add origin \
   https://github.com/bwalsh/\
 ANVIL_1000G_PRIMED_data_model.git
 git push -u origin main
-```
+</code></pre>
 </div>
 </div>
 
@@ -206,27 +200,21 @@ git push -u origin main
 
 <div class="columns">
 <div>
-
-### Tracked pointer
-
-```text
+<h3>Tracked pointer</h3>
+<pre><code class="language-text">
 version https://calypr.github.io/spec/v1
 oid drs://authority/object-1
 size 987654321
 sha256 8d969eef…
-```
-
-The DRS URI stays canonical. A checksum describes content; it does not identify the AnVIL record.
+</code></pre>
+<p>The DRS URI stays canonical. A checksum describes content; it does not identify the AnVIL record.</p>
 </div>
 <div>
-
-### Repository-local Git configuration
-
-```bash
+<h3>Repository-local Git configuration</h3>
+<pre><code class="language-bash">
 git drs remote add anvil terra --checkout hydrate
-```
-
-Remote metadata lives only in clone-local `.git/config`; every clone must recreate it. Credentials remain in the ADC provider store.
+</code></pre>
+<p>Remote metadata lives only in clone-local <code>.git/config</code>; every clone must recreate it. Credentials remain in the ADC provider store.</p>
 </div>
 </div>
 
@@ -291,24 +279,24 @@ cache_oid = sha256("git-drs-anvil-ref:v1\n" + normalized_drs_uri)
 
 <div class="columns">
 <div>
-
-### Implemented
-
-- ADC-backed `AnVILResolver` handles metadata and access.
-- Terra `add-ref` and pull use provider-neutral resolution.
-- Remote config selects behavior; `--remote-type` is deprecated.
-- Terra pointers retain DRS URI, size, and optional SHA256.
-- Cache keys are separate from content checksums.
+<h3>Implemented</h3>
+<ul>
+<li>ADC-backed <code>AnVILResolver</code> handles metadata and access.</li>
+<li>Terra <code>add-ref</code> and pull use provider-neutral resolution.</li>
+<li>Remote config selects behavior; <code>--remote-type</code> is deprecated.</li>
+<li>Terra pointers retain DRS URI, size, and optional SHA256.</li>
+<li>Cache keys are separate from content checksums.</li>
+</ul>
 </div>
 <div>
-
-### Still incomplete
-
-- Every fresh clone must manually recreate the Terra remote in `.git/config`.
-- The production endpoint, OAuth scope, and object/access contracts are not certified end to end.
-- Manifest resolution and downloads lack bounded concurrency and retry.
-- An expired download URL is not re-resolved after an HTTP failure.
-- Independent two-user, denied-user, and credential-leak acceptance remain unverified.
+<h3>Still incomplete</h3>
+<ul>
+<li>Every fresh clone must manually recreate the Terra remote in <code>.git/config</code>.</li>
+<li>The production endpoint, OAuth scope, and object/access contracts are not certified end to end.</li>
+<li>Manifest resolution and downloads lack bounded concurrency and retry.</li>
+<li>An expired download URL is not re-resolved after an HTTP failure.</li>
+<li>Independent two-user, denied-user, and credential-leak acceptance remain unverified.</li>
+</ul>
 </div>
 </div>
 

From d1c5cccb04399925013d0607e4fd31879d40d713 Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 13:00:18 -0700
Subject: [PATCH 64/66] yet more presentation fixes

---
 docs/anvil-terra-poc-presentation.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/docs/anvil-terra-poc-presentation.md b/docs/anvil-terra-poc-presentation.md
index d6902dc4..49dad658 100644
--- a/docs/anvil-terra-poc-presentation.md
+++ b/docs/anvil-terra-poc-presentation.md
@@ -88,7 +88,7 @@ gcloud auth application-default login
 git drs add-ref --remote anvil \
   drs://authority/object-1 data/sample.cram
 
-# Validate a batch before writing
+&#35; Validate a batch before writing
 git drs add-ref --remote anvil \
   --manifest references.tsv --dry-run
 
@@ -126,13 +126,13 @@ gcloud auth application-default login
 git clone &lt;git-repository&gt;
 cd &lt;repository&gt;
 
-# .git/config is not cloned; recreate public remote settings.
+&#35; .git/config is not cloned; recreate public remote settings.
 git drs remote add anvil terra --checkout hydrate
 
-# Hydrate every authorized reference
+&#35; Hydrate every authorized reference
 git drs pull
 
-# Or only one dataset slice
+&#35; Or only one dataset slice
 git drs pull -I "data/*.cram"
 </code></pre>
 <blockquote><p>No author cache, local Git config, token, or signed URL is transferred.</p></blockquote>
@@ -165,7 +165,7 @@ git drs pull -I "data/*.cram"
 git init
 git drs remote add anvil terra
 
-# Download the TSV from AnVIL Data Explorer first.
+&#35; Download the TSV from AnVIL Data Explorer first.
 manifest=/tmp/anvil-manifest-38dc7537.tsv
 scripts/anvil-add-ref-commands.sh "$manifest" \
   &gt; /tmp/add-anvil-refs.sh
@@ -179,7 +179,7 @@ bash /tmp/add-anvil-refs.sh
 git add .gitattributes '*.tsv'
 git commit -m "Add references to AnVIL data"
 
-# Materialize only TSVs locally.
+&#35; Materialize only TSVs locally.
 git drs pull -I "*.tsv"
 git status
 

From ea11cc1ba250f9419bce4928a72e0348c9b81edd Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 13:31:16 -0700
Subject: [PATCH 65/66] mkdocs options

---
 .github/workflows/pages.yaml | 1 +
 docs/github-pages.md         | 5 ++++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pages.yaml b/.github/workflows/pages.yaml
index edbe1b95..e7085a81 100644
--- a/.github/workflows/pages.yaml
+++ b/.github/workflows/pages.yaml
@@ -54,6 +54,7 @@ jobs:
           npx --yes @marp-team/marp-cli@4.2.3 \
             docs/anvil-terra-poc-presentation.md \
             --html \
+            --template bespoke \
             --output .pages-docs/anvil-terra-poc-presentation.html
           mkdocs build --strict
 
diff --git a/docs/github-pages.md b/docs/github-pages.md
index b78b5e35..27d2ddbc 100644
--- a/docs/github-pages.md
+++ b/docs/github-pages.md
@@ -4,7 +4,9 @@ The [`Publish documentation`](../.github/workflows/pages.yaml) workflow builds
 the end-user documentation selected in `mkdocs.yml` and renders the
 [`anvil-terra-poc-presentation.md`](anvil-terra-poc-presentation.md) Marp deck.
 It publishes both outputs as one GitHub Pages site. Do not edit or commit the
-generated HTML.
+generated HTML. The Pages build explicitly selects Marp's `bespoke` template;
+that template includes the browser runtime used for slide paging and keyboard
+navigation, unlike the non-interactive `bare` template.
 
 ## Enable GitHub Pages
 
@@ -75,6 +77,7 @@ cp docs/*.png .pages-docs/
 npx --yes @marp-team/marp-cli@4.2.3 \
   docs/anvil-terra-poc-presentation.md \
   --html \
+  --template bespoke \
   --output .pages-docs/anvil-terra-poc-presentation.html
 mkdocs build --strict
 python -m http.server --directory _site 8000

From 5ea5a46dc756f8ee7bfc7adc06af25135792fbab Mon Sep 17 00:00:00 2001
From: Brian Walsh <brian@bwalsh.com>
Date: Wed, 29 Jul 2026 13:42:02 -0700
Subject: [PATCH 66/66] mkdocs options take 2

---
 .github/workflows/pages.yaml         | 15 ++++++++++++++-
 docs/anvil-terra-poc-presentation.md |  4 ++--
 docs/github-pages.md                 |  8 ++++++--
 3 files changed, 22 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/pages.yaml b/.github/workflows/pages.yaml
index e7085a81..65f1ac1b 100644
--- a/.github/workflows/pages.yaml
+++ b/.github/workflows/pages.yaml
@@ -51,12 +51,25 @@ jobs:
 
       - name: Build documentation and presentation
         run: |
+          mkdir -p .pages-build
           npx --yes @marp-team/marp-cli@4.2.3 \
             docs/anvil-terra-poc-presentation.md \
             --html \
             --template bespoke \
-            --output .pages-docs/anvil-terra-poc-presentation.html
+            --output .pages-build/anvil-terra-poc-presentation.html
           mkdocs build --strict
+          # Keep the standalone Bespoke document byte-for-byte intact. Passing
+          # it through MkDocs is unnecessary for this standalone entry point.
+          cp .pages-build/anvil-terra-poc-presentation.html \
+            _site/anvil-terra-poc-presentation.html
+
+      - name: Verify presentation artifact
+        run: |
+          # A Bespoke deck needs its embedded browser runtime for slide paging.
+          grep -q '<script' _site/anvil-terra-poc-presentation.html
+          grep -q 'bespoke' _site/anvil-terra-poc-presentation.html
+          # Guard code-block contrast against Marp's highlighting stylesheet.
+          grep -q 'pre code.hljs' _site/anvil-terra-poc-presentation.html
 
       - name: Upload GitHub Pages artifact
         uses: actions/upload-pages-artifact@v3
diff --git a/docs/anvil-terra-poc-presentation.md b/docs/anvil-terra-poc-presentation.md
index 49dad658..80e5e6ab 100644
--- a/docs/anvil-terra-poc-presentation.md
+++ b/docs/anvil-terra-poc-presentation.md
@@ -21,8 +21,8 @@ h2 { font-size: 40px; letter-spacing: -.025em; }
 h3 { color: var(--blue); font-size: 23px; }
 p, li { font-size: 20px; line-height: 1.4; }
 code { background: #e8edf3; }
-pre { background: var(--navy); border-radius: 12px; color: #eaf6ff; padding: 18px 22px; }
-pre code { background: transparent; font-size: 16px; line-height: 1.4; }
+pre { background: #000; border-radius: 12px; color: #fff; padding: 18px 22px; }
+pre code, pre code.hljs { background: #000 !important; color: #fff; font-size: 16px; line-height: 1.4; }
 blockquote { background: #fff7e3; border-left: 7px solid var(--gold); color: #152334; padding: 10px 18px; }
 blockquote p { font-size: 18px; }
 table { width: 100%; }
diff --git a/docs/github-pages.md b/docs/github-pages.md
index 27d2ddbc..b092347e 100644
--- a/docs/github-pages.md
+++ b/docs/github-pages.md
@@ -6,7 +6,9 @@ the end-user documentation selected in `mkdocs.yml` and renders the
 It publishes both outputs as one GitHub Pages site. Do not edit or commit the
 generated HTML. The Pages build explicitly selects Marp's `bespoke` template;
 that template includes the browser runtime used for slide paging and keyboard
-navigation, unlike the non-interactive `bare` template.
+navigation, unlike the non-interactive `bare` template. It renders the deck to
+a temporary build directory and copies the finished standalone HTML into the
+site after MkDocs runs, preserving the embedded runtime and presentation styles.
 
 ## Enable GitHub Pages
 
@@ -78,8 +80,10 @@ npx --yes @marp-team/marp-cli@4.2.3 \
   docs/anvil-terra-poc-presentation.md \
   --html \
   --template bespoke \
-  --output .pages-docs/anvil-terra-poc-presentation.html
+  --output /tmp/anvil-terra-poc-presentation.html
 mkdocs build --strict
+cp /tmp/anvil-terra-poc-presentation.html \
+  _site/anvil-terra-poc-presentation.html
 python -m http.server --directory _site 8000
 ```